Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File: e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier: 9TIdXtrYMu6MLIeAaV7fTO5y8ycO2B+FB12IZHKiAK8=
Subject key identifier: D9:A7:B5:43:84:D8:A6:1D:01:05:2F:AD:09:56:71:FE:B7:95:E0:FB
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer: /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial: 019E6504D00D47081F7C0F71802FA438BA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number: 0A68
Signing time: Tue 26 May 2026 16:01:14 +0000
Manifest this update: Tue 26 May 2026 16:01:14 +0000
Manifest next update: Wed 27 May 2026 16:01:14 +0000
Files and hashes: 1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: U/dJH5UbIej1OPJ9AedrnFnZ0ky3gAAmxvnPY9WcLOs=)
3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:65:04:d0:0d:47:08:1f:7c:0f:71:80:2f:a4:38:ba:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Validity
Not Before: May 26 16:01:14 2026 GMT
Not After : May 27 16:01:14 2026 GMT
Subject: CN=d9a7b54384d8a61d01052fad095671feb795e0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:72:d5:7e:6a:81:46:1e:b5:93:04:44:82:
97:f7:6b:65:63:97:7c:b0:a7:62:39:4b:e0:41:ed:
12:55:85:24:91:82:dd:a0:43:53:cf:fd:c3:93:a6:
bc:0a:c0:d0:26:11:90:85:0e:f5:9b:57:ba:18:e6:
fe:3b:f2:b9:65:26:58:64:75:ac:7b:f4:db:5e:cb:
bc:0b:00:6b:e9:b4:5b:41:9e:0f:ca:a9:c8:84:d8:
1a:17:23:ec:01:8c:a7:d7:82:c4:39:9d:93:0b:a5:
02:ee:b2:a3:e6:e4:d8:56:e2:bc:b1:0f:da:9e:7c:
db:97:ab:e2:10:86:ed:59:10:9b:ba:5b:8a:61:35:
15:39:83:f9:d7:84:dc:04:96:0e:e6:4c:53:a1:92:
c3:63:f3:c6:7c:cf:b2:35:e7:36:b5:19:45:05:fa:
36:2b:27:c1:6e:6e:46:ab:58:12:bd:6e:9b:de:6f:
cc:97:5d:18:13:08:97:d9:d2:36:68:4c:66:c2:a4:
8d:a2:dd:9d:ad:e8:b6:62:e4:a0:56:03:32:ab:57:
82:12:56:e8:8f:eb:85:76:7a:b4:4e:69:4c:89:6f:
23:47:de:65:a2:c1:8b:90:90:2c:9e:d0:40:1c:ea:
ec:cb:e8:a7:af:36:41:db:f7:e4:f6:d6:9c:1b:f4:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A7:B5:43:84:D8:A6:1D:01:05:2F:AD:09:56:71:FE:B7:95:E0:FB
X509v3 Authority Key Identifier:
keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d6:dd:4e:42:a7:23:a9:f9:eb:79:cd:cc:1f:1c:cc:82:e4:
36:2e:57:e2:8e:4a:41:ae:3b:6a:38:fd:eb:7c:fc:42:93:6d:
40:40:a5:5e:f5:de:28:e8:b3:d2:a8:9f:04:f3:db:1a:13:aa:
2a:de:c0:5a:a3:56:ef:b2:5e:0d:35:33:78:6d:cd:4d:be:29:
29:b1:35:ce:be:37:9e:94:c1:b3:39:c9:45:7b:c7:4e:04:0a:
98:88:75:a3:74:a8:82:d0:1e:b6:f3:1a:31:a2:ae:60:94:62:
3b:c8:d8:c9:36:8d:2b:71:5b:d0:2c:c2:bb:c5:ad:80:9f:f6:
2d:05:57:20:e2:45:42:f1:a9:ff:e8:7e:47:6c:c1:82:91:e9:
84:35:0d:aa:33:b4:a6:27:f8:c2:e1:5f:60:3f:04:55:2f:a7:
3b:77:84:72:36:96:20:2c:1c:7f:00:71:70:2d:3b:03:40:3b:
1f:81:f4:1e:4f:68:3a:96:90:49:d0:6d:91:bd:77:dc:fb:89:
7d:98:b0:b5:3a:e5:56:d8:7c:54:61:33:94:5d:f2:77:4a:e1:
82:1a:39:7e:21:fa:48:f7:f4:00:25:56:4e:b9:95:08:f9:93:
dc:7f:87:20:ce:d9:2e:14:85:57:48:58:29:19:7a:82:59:dd:
14:a4:bf:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5lBNANRwgffA9xgC+kOLpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwNTI2MTYwMTE0WhcNMjYwNTI3MTYwMTE0WjAzMTEwLwYDVQQD
EyhkOWE3YjU0Mzg0ZDhhNjFkMDEwNTJmYWQwOTU2NzFmZWI3OTVlMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17By1X5qgUYetZMERIKX92tlY5d8
sKdiOUvgQe0SVYUkkYLdoENTz/3Dk6a8CsDQJhGQhQ71m1e6GOb+O/K5ZSZYZHWs
e/TbXsu8CwBr6bRbQZ4PyqnIhNgaFyPsAYyn14LEOZ2TC6UC7rKj5uTYVuK8sQ/a
nnzbl6viEIbtWRCbuluKYTUVOYP514TcBJYO5kxToZLDY/PGfM+yNec2tRlFBfo2
KyfBbm5Gq1gSvW6b3m/Ml10YEwiX2dI2aExmwqSNot2drei2YuSgVgMyq1eCElbo
j+uFdnq0TmlMiW8jR95losGLkJAsntBAHOrsy+inrzZB2/fk9tacG/RqjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmntUOE2KYdAQUvrQlWcf63leD7MB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9bdTkKn
I6n563nNzB8czILkNi5X4o5KQa47ajj963z8QpNtQEClXvXeKOiz0qifBPPbGhOq
Kt7AWqNW77JeDTUzeG3NTb4pKbE1zr43npTBsznJRXvHTgQKmIh1o3SogtAetvMa
MaKuYJRiO8jYyTaNK3Fb0CzCu8WtgJ/2LQVXIOJFQvGp/+h+R2zBgpHphDUNqjO0
pif4wuFfYD8EVS+nO3eEcjaWICwcfwBxcC07A0A7H4H0Hk9oOpaQSdBtkb133PuJ
fZiwtTrlVth8VGEzlF3yd0rhgho5fiH6SPf0ACVWTrmVCPmT3H+HIM7ZLhSFV0hY
KRl6glndFKS/Xg==
-----END CERTIFICATE-----
Generated at Wed May 27 03:02:27 2026 by rpki-client