Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
File: 0nXXqLrAR39VCd_xG5GVymDfh9o.mft (raw, json)
Hash identifier: bu4ckoPW7YAAnltgW0G8xDLp4d1KIw7BbtsKyJEK94Q=
Subject key identifier: 21:DB:91:85:7F:F1:9E:52:F0:6A:A6:4D:35:7F:D1:FA:AE:5B:95:D2
Authority key identifier: D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
Certificate issuer: /CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Certificate serial: 019E314DC0E042A85E14FA43820A78165975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
Manifest number: 1924
Signing time: Sat 16 May 2026 15:00:39 +0000
Manifest this update: Sat 16 May 2026 15:00:39 +0000
Manifest next update: Sun 17 May 2026 15:00:39 +0000
Files and hashes: 1: 0nXXqLrAR39VCd_xG5GVymDfh9o.crl (hash: m6R2VioKHeddOsY8Bm+EXYO4nB3bZA46RnmWPmUdVk8=)
2: FYE5Q3Mlv51odwTBANvIYF0s6IA.roa (hash: r/sE12BhKzVBtzNy9xBdk9/yYXwH8MFHHau2SN5trWA=)
3: MG8nLQn6FF2YIVEJshTINKyMAkA.roa (hash: ZMHaCqVIyIzXCZhJgr+ievneK9umE5mdfmEe8ABbVuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:c0:e0:42:a8:5e:14:fa:43:82:0a:78:16:59:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d275d7a8bac0477f5509dff11b9195ca60df87da
Validity
Not Before: May 16 15:00:39 2026 GMT
Not After : May 17 15:00:39 2026 GMT
Subject: CN=21db91857ff19e52f06aa64d357fd1faae5b95d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:0f:36:d5:67:6a:61:4c:4b:6b:51:b9:d5:
87:67:4f:9e:b3:69:ac:42:20:17:09:c1:b9:cb:fd:
ef:ca:4f:e6:af:ec:4f:1a:9d:49:38:87:4f:95:70:
50:b4:ba:c4:ff:c3:40:5e:68:47:0c:4f:8a:1d:1c:
6a:b5:2a:d3:cd:bc:c2:a9:05:d1:1f:73:fe:4a:53:
1a:98:0e:1f:ba:29:dc:33:9d:5b:73:66:bf:0d:b6:
b0:9f:ab:bc:3f:ae:93:29:43:1f:a6:36:40:c9:31:
ab:3a:86:cc:bd:50:77:a9:7c:93:57:ca:4b:44:a6:
c5:bd:ce:2c:a6:7e:72:dc:ac:09:b0:34:83:76:3a:
3a:76:bf:61:f7:49:94:39:bf:f9:c4:a1:b4:07:60:
03:77:11:2d:19:0b:90:1a:7b:8e:86:59:4a:c5:50:
d1:d0:03:08:d8:53:a1:2d:b3:40:d0:cc:bc:07:40:
13:f7:be:a5:94:59:00:8a:6c:c4:15:ba:bc:88:02:
09:0b:f9:c2:8b:4f:e2:32:47:ee:26:20:8c:2b:50:
ff:f8:c9:d8:3d:10:2f:85:c6:d7:df:21:17:b0:f6:
27:3f:d5:5e:10:4c:46:62:08:c4:f5:42:b2:b0:aa:
37:a4:98:45:32:36:70:e6:c2:a9:00:29:70:00:74:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DB:91:85:7F:F1:9E:52:F0:6A:A6:4D:35:7F:D1:FA:AE:5B:95:D2
X509v3 Authority Key Identifier:
keyid:D2:75:D7:A8:BA:C0:47:7F:55:09:DF:F1:1B:91:95:CA:60:DF:87:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nXXqLrAR39VCd_xG5GVymDfh9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7beb04-317b-448a-82ed-565b1447037b/1/0nXXqLrAR39VCd_xG5GVymDfh9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d9:f3:1d:bd:a4:15:e7:0e:e4:a1:24:0d:6e:61:13:e0:64:
bf:15:60:fa:c2:4e:de:ce:43:93:c8:70:ae:b0:e0:bc:fd:22:
61:1d:29:2f:59:15:31:74:5d:86:c8:ac:2c:f2:a4:e8:9b:41:
f8:f7:3f:3a:af:53:c6:a4:e0:1d:57:de:d0:34:48:3e:24:a0:
c7:2b:32:e8:d2:c7:b0:cd:b4:06:92:aa:57:71:dc:b8:72:73:
c1:6f:4b:66:40:cc:55:fc:c6:c1:15:5e:a4:5e:f6:fd:62:4d:
e2:3c:bd:76:4d:7f:f6:eb:0a:c0:54:9c:36:d7:b8:3a:99:e8:
53:e9:27:b5:83:a0:65:db:53:97:43:8c:50:c6:60:74:28:6c:
19:df:89:cf:a9:a6:01:9b:5a:a3:3a:99:25:3b:6e:51:0d:ea:
ed:d5:3e:ae:ac:26:13:8c:be:f2:05:fb:3d:92:ca:64:19:9d:
fa:85:91:4f:80:a4:50:05:ad:c0:f5:fd:e9:b0:03:f4:37:76:
27:cb:23:4e:d3:d9:5d:50:86:aa:6c:ab:db:55:db:0e:75:ef:
8b:9c:f1:04:09:ba:e2:89:24:9a:76:9c:c9:d0:11:75:a7:75:
27:e5:77:51:ce:7a:67:0e:26:5d:6d:c2:c4:c1:4a:09:14:c1:
29:fe:29:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:15 2026 by rpki-client