Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: a/x6jqjBSYzsTSFnwbhkAmUCV6bRfr7kEKx27BH+ByA=
Subject key identifier: 2A:5C:11:D1:A4:6B:D7:4F:B8:36:81:45:A4:41:46:AA:FA:5C:8D:03
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 019E2ADE3BE355728CC8EBAA24674BB21EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1919
Signing time: Fri 15 May 2026 09:01:07 +0000
Manifest this update: Fri 15 May 2026 09:01:07 +0000
Manifest next update: Sat 16 May 2026 09:01:07 +0000
Files and hashes: 1: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
2: Uxztf7U023GXGEUScmTqEO_gfGo.roa (hash: gGrsr7XyuRi6jd4l0HrWabkhCAVylFI6zYe23gYxDXw=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: 4948zs2VC1NZVm+1ezTeocY15SaOJbe4ikHjvD92lSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:de:3b:e3:55:72:8c:c8:eb:aa:24:67:4b:b2:1e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: May 15 09:01:07 2026 GMT
Not After : May 16 09:01:07 2026 GMT
Subject: CN=2a5c11d1a46bd74fb8368145a44146aafa5c8d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:b6:c6:a1:73:fb:08:db:cf:94:99:96:b5:
0c:4c:58:c7:27:11:5d:fb:2d:b2:1f:1d:62:4a:83:
62:b7:b7:85:74:77:bb:09:f3:45:fd:b3:ae:a0:f2:
d6:2a:ee:ec:8f:41:27:be:a3:f6:60:3c:2d:a8:f0:
06:24:96:98:e8:a0:3b:4a:51:33:b4:fa:44:f3:77:
eb:27:1a:b3:64:d3:4f:5c:61:85:d7:0e:dd:48:8b:
b3:42:1b:7a:57:34:ae:74:bf:23:5b:f5:fd:9d:8d:
b2:87:bd:d3:76:a0:65:1b:a1:8a:f4:db:ff:d9:2c:
b1:ba:10:36:73:fd:ca:dc:9b:dc:64:50:a2:9f:42:
8e:31:f3:52:d9:ea:22:47:47:4f:48:18:c0:a3:90:
a5:54:3d:71:05:48:b0:2a:2a:50:64:37:7b:c8:b0:
14:9e:f8:af:10:4a:05:df:f2:8b:21:a6:a4:85:57:
90:e1:1d:a8:ee:3e:ed:56:1c:a7:de:69:d8:2d:b6:
3c:fd:05:82:c7:2f:43:1c:10:98:b9:b9:48:83:92:
bc:8b:39:78:12:be:1f:3a:59:fc:5a:b1:ec:7a:e2:
16:29:90:d2:33:11:68:24:de:01:f0:bf:84:be:39:
5f:13:88:db:6b:a4:41:02:56:47:5e:bc:c2:4f:80:
87:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5C:11:D1:A4:6B:D7:4F:B8:36:81:45:A4:41:46:AA:FA:5C:8D:03
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f9:9f:01:59:6e:82:8c:4c:97:38:42:47:36:fe:98:38:79:
b1:04:90:6e:f5:6a:d0:e2:da:a8:f8:c9:27:4a:7c:0c:a3:35:
a8:61:ac:9a:dc:71:d1:af:7f:1b:fa:5d:a7:8c:d6:e4:d9:d1:
78:94:6b:4d:f1:32:50:85:db:34:6d:70:b5:19:02:0b:a7:c7:
af:2f:81:e1:45:ce:8c:84:c3:b5:cc:9e:d4:f1:8c:68:b5:0e:
b1:61:79:da:7e:17:16:7a:44:da:20:7e:ee:31:56:62:99:f7:
01:b7:8f:d8:c0:3e:2b:f6:3e:9b:b5:0b:50:5d:80:60:6d:ca:
b7:3a:bd:b7:0c:7b:fd:1f:89:cb:a2:70:db:66:83:62:90:a2:
a6:1c:95:74:5f:1c:1f:da:1e:9e:ae:14:dd:6c:8d:61:be:aa:
ad:47:08:bf:21:d1:0e:e2:6a:f5:e1:b0:71:1b:07:b2:41:47:
fc:96:c2:d9:c9:ee:2a:35:45:57:3b:b8:30:62:0e:d7:36:80:
c8:62:93:b4:f5:e8:10:93:d2:5b:93:da:69:83:94:e7:29:84:
12:a7:f8:a6:ca:88:95:cb:24:ea:8c:54:77:0a:6c:f5:64:4b:
8b:83:00:94:d0:6a:9e:59:4b:b6:51:e4:ac:f3:d6:e5:41:f1:
e4:f6:44:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:01:57 2026 by rpki-client