Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
File: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft (raw, json)
Hash identifier: mxf358Quo9v50NCJZ5sb/FnbNsNBqazJPS2L6ESynm0=
Subject key identifier: 67:AF:EA:89:50:78:75:65:77:A5:9F:40:D4:BD:B0:62:80:E7:86:23
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 019E28EFDDA9F9EB60DB8CAA1065E7088924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
Manifest number: 1607
Signing time: Fri 15 May 2026 00:01:08 +0000
Manifest this update: Fri 15 May 2026 00:01:08 +0000
Manifest next update: Sat 16 May 2026 00:01:08 +0000
Files and hashes: 1: 3tG3zwbaaFuFl6cpIqxTe91Iu4g.roa (hash: JJoTnqlPPDa1SmZHbLUdf1Go4yaIrlgXIH2dNpLzAn8=)
2: 53l_D5g_N2hEJkJMJ3_8BjIEv2Y.roa (hash: XGQ+zMpVhvmcmw4I8+8i5OdAGzf1VzpgvnNvlvgbkC0=)
3: ChfnxGz0VKQRsVnjHyIAinMMsIk.roa (hash: eW5OJ9VGVnnfrTZ+gpRAKAP747DliU0KHrN7X11TVIw=)
4: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (hash: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU=)
5: OZvI4MXWtnolgxghoQ6_cphW1W4.roa (hash: Oi9ZbYQx2WEELwMB6HBFHb18B/3Zxcuia5/qRlgnoFw=)
6: aDzvIFmPuasW-wZl4h5nCLEftQ0.roa (hash: V99/4bZyDIbs4HJhhHYscdVnYmUcdsRDsQGQFwRiELE=)
7: gqMBDEDRSu4xKONst1tdj1bPNsI.asa (hash: x0HezPZk/P/a+aIvTJaAXkz2eR1qdgdIUhB+jiHUu9k=)
8: lXLif39D5KxldHNZbTu-0rsSDYY.roa (hash: mVxFtPQntFOFsnZXkQ8/rUjDQRMlvViyOfc1fE3bjpY=)
9: s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl (hash: xwUvny1EOi7KqoSqqYX5vPvpDjNwqHYVcGA1nDht+NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:dd:a9:f9:eb:60:db:8c:aa:10:65:e7:08:89:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: May 15 00:01:08 2026 GMT
Not After : May 16 00:01:08 2026 GMT
Subject: CN=67afea895078756577a59f40d4bdb06280e78623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:be:42:9d:55:6c:c8:e5:f9:08:9e:58:21:
cf:f8:bb:6a:58:a8:16:84:d9:9c:67:6c:eb:d8:0f:
40:ad:4c:1b:7d:07:14:e4:5c:1d:d6:a8:e5:e1:52:
b2:06:bf:2d:57:fe:ad:e4:5c:55:3d:90:e4:0f:cb:
e1:93:c3:51:72:97:c6:75:0c:f0:9a:06:a2:f0:e6:
af:f5:ce:a1:80:c3:50:4a:75:17:3f:4b:a6:e4:13:
c2:97:24:0e:6f:84:20:c0:8d:40:6b:38:c2:50:fa:
96:8d:af:cf:ef:88:5a:c3:1d:b3:14:ee:f3:51:8c:
f8:0d:bd:26:ae:be:f6:85:bb:71:5a:bf:68:5f:45:
09:b0:73:14:c1:f8:ac:34:7a:f2:19:72:e8:ad:77:
71:dd:51:37:dd:f5:d1:41:9b:b6:27:fd:7c:44:8c:
e1:73:cf:13:8f:8d:ad:3a:1a:a9:a4:f6:8a:d0:27:
21:5e:47:0d:e3:0b:44:e7:60:93:d5:9f:61:aa:fe:
51:65:25:0c:5a:8e:36:c3:ac:55:b2:bd:17:b3:e1:
24:15:af:74:fe:71:b7:28:d5:fb:65:f5:d1:8d:ae:
e4:74:25:38:b9:0a:d8:41:a0:6c:49:e4:4d:7e:f9:
4e:e0:29:f3:81:06:6e:06:ab:6a:cd:cd:b0:81:5a:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AF:EA:89:50:78:75:65:77:A5:9F:40:D4:BD:B0:62:80:E7:86:23
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cc:e1:24:c9:be:ac:df:2c:b8:dd:8c:77:72:68:b6:12:61:
1c:4b:c1:7f:b2:d7:3c:b6:c7:37:fa:8e:28:5f:24:1d:0b:b4:
b4:98:38:d6:3c:18:da:8b:1d:9b:0c:93:61:1e:c8:4f:41:9b:
3c:89:8d:a5:e8:4f:12:d2:9b:33:87:ac:44:1d:fb:58:27:55:
27:2d:a6:64:a9:7a:cb:56:e4:8e:05:b9:0d:30:9a:07:e1:2b:
18:c0:9e:10:b3:7a:4a:1e:dc:52:b3:d2:3f:de:bc:cb:55:8e:
ce:e8:c5:20:7d:e2:ae:af:30:df:95:88:3e:4f:23:f8:82:9d:
b9:18:06:13:2f:72:0b:e7:26:40:6c:3b:48:3d:96:80:e3:e3:
e0:27:ef:d8:eb:70:b8:b5:31:19:30:3c:d3:2d:3c:ca:03:9c:
7d:63:63:58:74:14:a1:21:0f:7b:9d:4d:f0:86:69:f2:13:79:
2d:6f:bf:00:87:96:8b:b0:fb:5d:30:dd:41:39:42:b5:64:4a:
ea:c1:d2:77:02:59:ef:da:89:12:77:e5:0a:56:41:10:10:7c:
a5:48:66:e2:d1:75:de:66:db:0a:33:73:8f:ad:98:33:6e:bb:
97:7d:93:89:b8:8f:fb:8a:e5:3e:4f:50:ce:99:cf:2b:2a:02:
7f:90:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:14 2026 by rpki-client