Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: Tr5njx5xu2jv0MOZtwkJnR6ukSPieP0f79F/SbJmp6o=
Subject key identifier: 2F:41:01:6C:BE:AA:ED:9E:75:45:C6:E2:96:B2:67:8B:04:20:1F:C5
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 019E322A2A530F013B3FEFC3E64B47135DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 1619
Signing time: Sat 16 May 2026 19:01:24 +0000
Manifest this update: Sat 16 May 2026 19:01:24 +0000
Manifest next update: Sun 17 May 2026 19:01:24 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: UvogVQiFlOzL1lQpufyLEmyZKjQ.roa (hash: cIiYR4bOC43Bt+bdDmmyoUYytMbqFO52hP62NEaq3as=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: pJfdED/xnm+lHU8p2Eheaybm+g/CkZMq1b8qj0qafJI=)
6: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
7: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
8: yvpIZfiXJrwugGnY8W0FyE6MSYY.roa (hash: DTFYVK7K9TZPbDz7/73V8tXEHb2zMN5hyl3mObjqscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:2a:2a:53:0f:01:3b:3f:ef:c3:e6:4b:47:13:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: May 16 19:01:24 2026 GMT
Not After : May 17 19:01:24 2026 GMT
Subject: CN=2f41016cbeaaed9e7545c6e296b2678b04201fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:19:d9:42:e1:3c:37:6f:8d:4b:d5:a2:70:f1:
b3:f1:37:ba:00:54:6a:d3:9e:32:f5:c1:ab:5e:a1:
1e:50:6a:79:4a:b4:0e:85:6b:52:4e:ce:1a:d7:97:
fe:64:97:e6:ca:27:da:4e:a6:0c:a0:86:99:85:f3:
cd:d9:4e:cc:6c:39:47:7f:e9:0b:50:d6:da:43:43:
b7:e1:0f:fe:b2:f4:d7:ca:65:91:28:cc:9f:2e:99:
de:72:11:86:8b:0e:c6:59:0e:12:72:e6:4e:af:ff:
a6:22:97:78:31:1f:5f:bc:af:fb:ac:7b:8e:f0:59:
70:e5:2d:66:85:dd:04:e0:de:e0:21:38:a1:31:cb:
24:cf:7f:19:25:42:5c:98:c8:f8:8e:77:99:85:7f:
17:85:ef:17:4d:e7:a5:82:e3:b2:52:b4:d0:2a:8f:
6b:2e:70:6c:51:6f:30:cb:7c:0d:a5:90:7f:10:0f:
91:4b:31:53:5c:e5:2b:3a:ac:bd:b0:86:70:74:4a:
6c:03:38:94:46:7a:c1:af:27:12:6b:9f:12:8d:de:
69:cf:10:a1:ae:b2:03:7e:4c:0b:91:55:8c:b7:e1:
cf:65:9f:3c:14:5b:bc:fe:ca:86:83:4a:d4:23:b1:
0b:44:d5:5b:d4:a3:eb:43:ac:74:12:4b:fb:a5:75:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:01:6C:BE:AA:ED:9E:75:45:C6:E2:96:B2:67:8B:04:20:1F:C5
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f2:11:4b:c4:06:d6:f6:f2:21:85:1d:1c:42:71:5d:04:b1:
38:2b:83:41:6f:1e:bd:c9:c6:58:3f:31:fb:de:14:a7:0b:fb:
bd:0e:3d:0e:9c:1f:12:8d:20:cc:bf:d3:00:1e:1c:5d:41:23:
c3:9d:f6:60:e7:08:5e:d4:ba:29:a6:ca:71:51:f7:e3:53:a0:
06:10:3c:cd:5f:4a:08:d1:d8:87:a3:35:76:16:e7:31:84:18:
0e:15:d7:83:a1:ff:e3:4f:41:49:25:8b:91:a4:ac:5b:26:a0:
58:3c:7b:4b:f4:82:9a:95:9a:7e:13:28:97:1d:3d:16:84:d1:
2c:c8:fb:1e:54:5a:d1:71:a8:a6:80:aa:4e:f7:dd:38:3f:7d:
85:72:c4:b7:0a:17:99:a1:df:15:d6:c2:a4:57:ef:cc:7b:0f:
ca:99:71:3d:d2:46:a4:e5:6b:b7:65:a3:8c:ea:80:da:55:d5:
29:9b:56:c8:41:b4:9d:84:a3:67:49:6a:b6:0d:7f:3e:c2:7b:
a1:24:41:e9:9f:fb:fc:bb:53:bb:c1:b0:65:3b:24:04:17:b2:
2a:34:f1:e7:31:c2:56:7a:e4:99:f2:25:59:fb:d4:e8:85:d3:
39:76:0b:39:b1:3e:bd:af:90:61:2d:28:01:f4:0a:7f:31:fb:
cf:f1:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:09 2026 by rpki-client