Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
File: pH9wjDSl5x2vPS5UuZq3Twae-As.mft (raw, json)
Hash identifier: igPRV4LYYUG9237fImfdrfT8LrgBieqG81G/dqjP0DE=
Subject key identifier: E0:27:7C:86:35:37:4D:29:0A:59:1D:9E:3D:23:30:73:26:7B:DC:1F
Authority key identifier: A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
Certificate issuer: /CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Certificate serial: 019E517DEEC8EF2DA49EFB2AA81DEBCB95F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
Manifest number: 0EBB
Signing time: Fri 22 May 2026 21:01:08 +0000
Manifest this update: Fri 22 May 2026 21:01:08 +0000
Manifest next update: Sat 23 May 2026 21:01:08 +0000
Files and hashes: 1: A6bS9MJ8yre_3dAu3nPGm8Z-iC8.roa (hash: aAYbB32YuDe6wK9PH2k9OTcq9zpop8zHvpCVPrmNr5w=)
2: IGrzDBTp7WeP7TiBE_F5uUv9_o4.roa (hash: BP1wezzsyhWU23ICMkBjQqvAxLHe4ED89SFQ2RP2Mlw=)
3: pH9wjDSl5x2vPS5UuZq3Twae-As.crl (hash: ItKy/XL8beiNM3fQOta4OJWpScJqwdt7nCYLMaQhyVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:7d:ee:c8:ef:2d:a4:9e:fb:2a:a8:1d:eb:cb:95:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47f708c34a5e71daf3d2e54b99ab74f069ef80b
Validity
Not Before: May 22 21:01:08 2026 GMT
Not After : May 23 21:01:08 2026 GMT
Subject: CN=e0277c8635374d290a591d9e3d233073267bdc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:28:a2:ab:ad:d4:44:82:f3:54:3d:0d:8b:7f:
58:c6:54:3c:d5:9f:ca:62:ac:56:2a:46:e6:2b:6d:
8d:b1:f3:54:67:b5:e0:01:7a:ee:37:ec:45:10:3a:
62:25:76:e3:22:d0:98:79:47:76:fb:16:04:7f:4e:
49:83:28:ab:90:2f:fc:d3:ab:f3:f3:c2:21:38:0f:
c4:58:e7:25:a2:6b:92:e7:20:7a:97:d1:7c:05:87:
6c:b9:d3:89:56:c1:ec:e6:4e:90:7f:be:d8:a9:64:
9b:d8:9f:01:0f:1e:d1:28:c5:c1:25:e9:9a:16:87:
be:7b:a6:50:99:0e:b7:68:ef:8a:52:99:e0:e5:a8:
28:bf:7b:61:53:a4:dc:41:da:b8:ea:12:d6:3e:4e:
37:e2:41:9e:35:c0:4e:d0:e4:d8:25:7f:9e:21:45:
52:9f:b0:f7:90:ba:d3:cf:2d:14:91:7f:be:9c:36:
92:00:05:1b:17:8d:1a:5f:e1:0f:27:91:11:20:96:
cf:f7:8e:16:b3:46:35:24:3a:cf:59:6e:57:43:fc:
7d:20:79:4c:1b:2b:d2:d2:09:03:57:2d:92:23:54:
2b:22:d5:29:4e:44:0c:d6:6e:a9:d5:e4:f7:c1:10:
8a:12:c9:b5:51:6c:bb:da:59:7b:bc:f1:0d:83:88:
41:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:27:7C:86:35:37:4D:29:0A:59:1D:9E:3D:23:30:73:26:7B:DC:1F
X509v3 Authority Key Identifier:
keyid:A4:7F:70:8C:34:A5:E7:1D:AF:3D:2E:54:B9:9A:B7:4F:06:9E:F8:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pH9wjDSl5x2vPS5UuZq3Twae-As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/019a1e-be98-414c-8c2c-6b27ff2257c6/1/pH9wjDSl5x2vPS5UuZq3Twae-As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0f:88:19:e6:a8:e8:50:a6:b5:9f:a4:25:7f:53:6e:dd:c9:
76:5f:ae:06:9e:5b:c1:8d:d4:52:c2:ae:d9:c8:e2:7b:ec:c9:
f9:e2:c1:ff:57:ac:8e:40:d8:46:f1:25:7d:cd:cd:4a:dd:1b:
31:50:c7:15:2c:7b:c2:6c:cd:7a:44:e6:22:07:b0:93:c6:22:
cb:a4:ca:3c:7f:a9:b4:5e:a6:fb:89:93:b0:23:af:81:72:87:
be:d5:32:7b:0c:35:74:2f:48:f9:ca:5f:d8:9a:20:c9:92:e2:
18:71:2d:fa:29:c6:40:08:c6:92:7a:94:7c:4c:0c:7e:5f:0b:
65:ba:d7:1f:58:0e:4f:5f:5a:bc:ba:16:c7:7c:2a:f5:d3:ad:
71:8e:99:94:c3:95:b9:3a:97:a4:a2:8a:73:dd:ba:b9:93:01:
6e:56:a7:b5:48:8f:d9:69:68:f6:a2:76:e7:76:36:ce:10:39:
17:52:d1:70:03:ce:bd:95:dc:2f:63:73:d8:ab:9c:ad:a4:46:
92:b9:e1:8f:bc:38:eb:93:a5:ed:77:63:89:c0:96:ad:22:5f:
b2:c1:5f:2d:d6:0d:4b:fb:21:e0:1a:02:8b:6b:a9:6f:2f:db:
59:d6:aa:35:2f:fa:58:07:9d:89:25:64:ef:c8:70:d8:75:2d:
4b:24:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:12 2026 by rpki-client