Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: 6M9KzXW6vvvXXbJDJ9s6vYiPnKMfbMVNU0yYU562l14=
Subject key identifier: 06:36:B0:45:C1:33:7E:86:57:CC:80:93:E0:08:4F:AE:70:26:19:54
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 019E295E40FC7B11D0CBE5E93A2766CD3AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0FDD
Signing time: Fri 15 May 2026 02:01:43 +0000
Manifest this update: Fri 15 May 2026 02:01:43 +0000
Manifest next update: Sat 16 May 2026 02:01:43 +0000
Files and hashes: 1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: 0ottmte4a5/xG2p99Ks4QEAF5CnPxoaaAfZTRfkBZoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5e:40:fc:7b:11:d0:cb:e5:e9:3a:27:66:cd:3a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: May 15 02:01:43 2026 GMT
Not After : May 16 02:01:43 2026 GMT
Subject: CN=0636b045c1337e8657cc8093e0084fae70261954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:7f:39:e9:3c:47:3a:38:31:30:27:cb:96:
01:86:b4:d3:0d:88:ec:64:b1:73:44:52:6e:4b:76:
8c:21:56:62:96:49:54:c7:f5:3d:fe:0d:3e:3b:ce:
04:49:97:38:22:55:82:69:4f:73:e2:c1:bc:26:b5:
c6:cc:a7:73:75:e0:c2:87:ea:b8:56:99:06:46:fd:
fc:bf:c6:0b:22:f5:fa:cf:f8:15:73:7f:5a:9a:af:
39:63:3d:b4:e3:7d:8d:2a:26:ff:d0:77:7d:ae:40:
f7:9f:74:b5:b1:25:cb:55:a2:c1:d1:cb:71:9a:8a:
af:9f:c5:0f:05:34:21:51:af:6b:a7:d0:f0:89:2e:
7e:9c:db:26:66:e4:6d:04:61:28:a5:44:ac:6f:23:
cc:4c:04:ac:97:d3:cf:0b:1b:e4:6d:16:76:ff:25:
45:54:b5:86:d2:7f:ac:9c:ab:b4:d2:86:54:03:09:
07:30:df:72:33:11:62:44:1e:c6:3a:1e:9d:10:36:
c7:f2:9c:75:5a:2b:e2:18:82:3f:80:33:1c:f3:2e:
65:78:1f:78:cb:fe:a7:6e:53:51:ce:a3:86:04:54:
d6:2a:71:54:ec:bd:76:1c:f4:8e:f9:13:80:86:b8:
24:e0:90:84:c5:c2:4d:5d:95:6d:e6:77:4f:21:c3:
f4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:36:B0:45:C1:33:7E:86:57:CC:80:93:E0:08:4F:AE:70:26:19:54
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:8d:ed:c7:24:2a:7a:c6:1d:f2:4e:0b:a5:27:b1:f6:fb:e2:
60:4c:5f:50:b8:ee:c9:94:de:9a:70:93:9e:ad:5c:53:5a:11:
a8:51:b7:bd:db:c3:16:f0:d2:ac:44:a2:fc:60:ad:75:17:e8:
bc:d5:57:f1:fa:c3:18:4f:90:5e:f1:4a:db:57:d5:ff:62:4d:
88:e5:2f:ea:f9:0c:e2:7f:db:3b:37:92:a4:5f:de:c5:df:e2:
7e:be:2a:59:97:fa:3e:9f:e6:19:a4:6f:a9:89:e1:3a:cf:45:
37:15:a6:d5:83:9e:f7:13:39:14:2f:ca:e9:26:b6:1a:f0:3c:
73:a2:84:8c:bb:2e:e4:4a:bb:7f:8c:9f:05:42:d7:ba:f8:4a:
77:6a:6a:cb:a5:c7:ec:ab:f7:89:4a:4e:de:8b:e3:d4:7b:0a:
cd:23:4a:e3:60:cb:0c:5c:bd:60:98:2a:45:15:e7:47:6e:1a:
3e:dd:50:b6:fd:a8:23:b1:b9:84:2c:9f:13:6f:c5:b0:f6:bd:
fa:8e:a2:a0:d9:5e:96:a4:53:41:39:cc:c1:29:43:0c:5b:bc:
f9:5e:41:47:97:e4:36:ed:7f:d9:fb:12:58:5d:a7:54:75:46:
e9:da:c4:c9:51:8b:dd:2b:7e:dc:3b:07:96:5a:e9:70:0a:67:
6c:9b:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:11 2026 by rpki-client