Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: u4UhYmRl2lbc7gHEsMqgABOLGb4WgYydgCvEL9WzzQ4=
Subject key identifier: 24:2B:CD:D6:01:21:D4:CD:FA:77:84:CE:83:95:0F:3C:D5:3A:0D:5D
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 019E2FCD5EDE29EA2D8EBFFE1BE8F6D57056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 15E8
Signing time: Sat 16 May 2026 08:00:48 +0000
Manifest this update: Sat 16 May 2026 08:00:48 +0000
Manifest next update: Sun 17 May 2026 08:00:48 +0000
Files and hashes: 1: 1-r4Lv2Rmvz8PS3uEyqLHDg79e6o.roa (hash: Ynnh/ie5fd1c8AWIp3/nOFWKmHgGwnafc2HeQlk9EJ8=)
2: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: W6Wstyo4ZdYgcG+uvDXNSQzDYT6KEocRneTmwlyNLNg=)
3: w3Lux0gfeLL5j0FE93SK7EkO-xA.roa (hash: /yS1rew79qv077Dug+2vMb4pmqIyVizWzCEA9rbz10o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:5e:de:29:ea:2d:8e:bf:fe:1b:e8:f6:d5:70:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: May 16 08:00:48 2026 GMT
Not After : May 17 08:00:48 2026 GMT
Subject: CN=242bcdd60121d4cdfa7784ce83950f3cd53a0d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8d:c1:c0:7f:80:d4:88:ff:d3:86:22:ee:b8:
b8:bf:31:a5:15:7f:c9:ab:4b:5d:69:33:b3:86:d3:
38:9e:5a:59:da:bb:3f:4f:da:2a:27:07:46:a6:7c:
9a:b9:c9:89:72:34:6d:06:67:3b:d6:d4:8b:eb:5a:
c4:3a:39:9e:24:3b:fa:c8:57:ab:dc:81:f0:d7:e0:
6b:e1:94:ab:df:c2:bb:df:ad:79:81:92:d4:0e:ea:
f6:0f:5f:af:0a:0e:fb:71:49:6b:b7:e8:02:b9:87:
63:8f:e5:30:39:f6:01:11:f5:ea:ad:2a:88:6c:f9:
4e:58:3b:e2:42:01:cf:d2:a4:95:33:fb:18:41:4f:
a2:fe:7c:cf:1b:e2:dc:44:11:db:a3:c5:a0:86:a2:
c4:60:e2:2b:39:b0:6f:73:fd:9a:11:95:4b:83:8c:
6a:46:96:d3:b7:5f:b3:ab:a1:ff:ab:39:07:31:74:
19:ef:67:bb:7a:b2:3b:05:8d:3d:09:55:f0:d9:cf:
f5:a8:6a:09:b3:6f:d2:e9:f0:3b:44:ee:5a:de:23:
eb:d5:51:40:df:b3:a7:ff:c1:bc:5b:ad:bc:54:41:
ab:9f:a6:12:ee:ae:8d:8a:cb:fd:89:98:65:d8:16:
bf:0d:13:18:a2:01:52:d0:02:91:9c:7a:30:2f:e1:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:2B:CD:D6:01:21:D4:CD:FA:77:84:CE:83:95:0F:3C:D5:3A:0D:5D
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2b:21:5f:89:68:29:b5:24:96:86:7a:e0:5c:da:ed:81:b2:
14:0c:22:30:10:f7:c0:99:cf:45:f2:ff:21:a0:a3:b5:b1:45:
80:2e:0b:12:27:ee:64:ff:36:2e:af:37:0e:b3:a7:09:a9:e4:
09:38:2a:ad:67:56:97:b3:ce:cd:0a:d4:f3:3d:a2:34:45:de:
61:5a:dc:7c:ce:e4:55:98:37:6b:ee:4d:e9:33:2f:49:80:30:
f1:78:24:32:10:20:94:40:c1:0f:55:8f:db:c4:c3:55:a1:92:
05:97:f0:ed:c5:ce:0e:22:9d:ee:66:39:87:dd:3c:20:4d:7d:
6c:84:d2:53:56:6c:d4:cc:ed:c6:cc:6e:74:10:59:45:27:d3:
b1:c6:4b:a2:96:3a:f4:9f:8b:cf:04:bb:bb:5f:7c:da:99:88:
a5:45:16:f3:c6:df:28:df:f5:e8:21:bc:ec:e0:52:ad:d8:d0:
32:21:ae:19:3e:74:a6:57:12:94:5b:ab:cd:2d:0d:6d:66:60:
c7:68:8f:d7:91:28:1b:92:d4:b2:c2:8f:21:f5:cc:22:ba:b1:
a6:18:92:dd:ea:dd:19:d4:d6:da:62:09:d3:59:43:91:33:34:
88:93:3a:35:86:d2:cf:8f:28:bd:52:d3:f7:5b:be:06:69:21:
a1:2c:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:28 2026 by rpki-client