Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json)
Hash identifier: bHPkRtXejk+UBPx9q70SCASt44bxvZOfSAnEyrKUPHA=
Subject key identifier: D2:45:97:1D:2B:30:89:03:8B:60:29:06:EA:A2:47:2D:25:4D:35:00
Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Certificate serial: 019E31BBFA72ACD22E6FA003CF91EDE82D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
Manifest number: 127C
Signing time: Sat 16 May 2026 17:01:03 +0000
Manifest this update: Sat 16 May 2026 17:01:03 +0000
Manifest next update: Sun 17 May 2026 17:01:03 +0000
Files and hashes: 1: UBGkKBFV2Aa7JBw4pAiIxve4fn0.roa (hash: 9cBrWgFQDzVn82NDm23DCCjfy/yynDnSQwWNQi58HvU=)
2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: vJbt0mGYt1MsWiVJ9MvaxzUU/LP/1ubyfZrpum30qTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bb:fa:72:ac:d2:2e:6f:a0:03:cf:91:ed:e8:2d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a
Validity
Not Before: May 16 17:01:03 2026 GMT
Not After : May 17 17:01:03 2026 GMT
Subject: CN=d245971d2b3089038b602906eaa2472d254d3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:13:44:88:0f:b0:31:f3:d2:7d:b4:25:ff:
2d:f4:4b:11:32:63:c8:99:db:5c:a2:9a:51:e5:32:
e8:02:e4:2c:9b:92:32:64:8a:94:e5:09:9a:55:8a:
a7:b9:71:1a:b4:75:ec:1b:a1:82:25:42:be:2b:b4:
29:3a:b3:d0:c9:c6:e3:68:c1:bb:c2:70:cd:ab:30:
63:18:1d:1c:7d:81:41:78:84:d9:32:e9:c5:24:db:
bf:ed:66:79:62:5a:33:1e:a4:97:40:ec:8c:a2:e7:
95:d0:05:e9:b3:ba:07:c2:19:4a:8a:30:d2:b4:7e:
df:22:d6:f7:0f:d0:ee:d7:e9:9a:6d:05:a2:ad:00:
81:10:85:2f:2a:e9:f0:79:61:77:3c:b0:ae:a2:e6:
e8:b1:6d:86:4e:81:35:3b:9f:ef:90:22:54:15:4a:
f2:d1:5b:c5:77:f5:0f:e1:ac:00:2c:17:d1:fa:3f:
55:66:09:19:02:2b:1c:a4:75:a1:fb:22:c3:09:68:
27:a6:89:e4:6e:c6:df:b6:94:b1:61:43:0d:92:8c:
65:03:d4:0e:b4:ad:e0:fa:73:c6:81:50:f4:99:ad:
e4:a2:49:36:c2:59:2e:a4:30:23:b1:08:64:a5:3d:
d1:c9:3f:89:9a:e8:4c:d6:23:30:3d:e3:bf:6b:16:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:97:1D:2B:30:89:03:8B:60:29:06:EA:A2:47:2D:25:4D:35:00
X509v3 Authority Key Identifier:
keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ed:86:87:0c:fd:44:2f:d8:33:e1:66:c0:a2:66:99:10:fd:
dd:7c:6f:25:d8:ea:bb:2f:fe:bd:d6:25:6e:a2:be:1b:85:b7:
91:96:77:71:08:12:16:08:b4:5f:05:75:52:51:6f:66:cb:5d:
90:ff:6b:8b:fa:8b:5e:55:4f:20:7e:31:a7:67:41:89:0a:86:
fe:33:b1:08:9e:08:76:cb:09:1e:15:d3:3a:2f:dc:62:a4:a3:
fa:6d:8b:64:7c:78:b7:6c:9a:85:4e:52:07:24:3f:49:e4:19:
27:4a:a8:19:d1:d7:f7:7b:d4:a7:6e:36:0c:b9:f6:c3:3d:70:
a7:b6:78:b6:32:d3:f7:83:75:56:0e:4a:cc:32:b4:ee:40:77:
b7:a9:5e:8e:b1:54:f5:50:a9:f4:cb:cc:58:8c:9b:19:3d:ac:
53:f0:8e:0f:b1:9b:7e:e3:3d:30:ed:60:77:2e:cb:aa:1d:28:
cf:e5:c8:28:33:8a:47:d4:62:e7:af:b5:2b:71:a6:20:7c:a7:
e7:7e:3b:f2:37:a7:17:07:b0:a6:23:db:19:a9:c6:d0:ed:2d:
63:39:03:e1:3f:35:8d:54:22:ce:11:dc:c9:9c:cc:90:6f:c1:
e8:45:20:d3:81:5b:c1:f0:d1:f9:26:b0:76:f7:52:61:ad:df:
46:54:be:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:23 2026 by rpki-client