Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
File: tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft (raw, json)
Hash identifier: Wfg4fZGGKV4mr1oYZCqX4g3DcXaXDqoQnVtpk6VEs1U=
Subject key identifier: 67:5C:51:A7:80:AD:30:DD:57:99:D2:10:86:20:A3:0E:82:1E:6D:D6
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019DED11BB9F6A82DE6146E31B3907CB20BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
Manifest number: CC
Signing time: Sun 03 May 2026 09:00:55 +0000
Manifest this update: Sun 03 May 2026 09:00:55 +0000
Manifest next update: Mon 04 May 2026 09:00:55 +0000
Files and hashes: 1: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (hash: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=)
2: i4s5l9_wFVaFafOSJYHgsyCNn1A.roa (hash: bF82/1YCZggtDC3lHHda/rosOkpNsVefBaIOjLK+Oc4=)
3: tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl (hash: WVaHhFJeDfgeo+JAZMarbXRd3cOnw+bxJsqlz47VGU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:11:bb:9f:6a:82:de:61:46:e3:1b:39:07:cb:20:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: May 3 09:00:55 2026 GMT
Not After : May 4 09:00:55 2026 GMT
Subject: CN=675c51a780ad30dd5799d2108620a30e821e6dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f4:55:fe:16:21:2c:1f:12:e5:91:96:16:48:
d1:05:e5:08:f3:8f:74:3c:27:28:ae:bd:95:c9:be:
7a:c0:f3:59:df:8b:d2:be:fb:8a:b7:ba:d2:1b:79:
bd:fb:fe:d7:3a:fa:3d:91:48:15:02:df:e7:2e:e3:
37:9a:dc:d2:1c:67:ae:bf:26:d8:67:6a:32:63:24:
79:7c:7d:b1:48:84:a7:62:2e:14:8e:c1:24:36:99:
47:da:29:a8:e6:be:ed:b5:36:c9:93:c4:82:69:c3:
cc:84:1f:da:3f:7d:94:8d:9c:ae:45:cb:b3:dc:26:
56:50:4d:6b:e7:44:2b:51:b8:ad:ec:e9:ac:3d:0f:
3e:cf:75:2d:f6:d6:64:04:d6:66:8e:ba:b4:15:d9:
d4:d7:3a:05:a9:d0:9f:2d:b2:d0:33:30:bd:95:1d:
d3:7f:88:c4:52:be:d4:93:fc:c2:9f:a2:9e:38:37:
48:a7:cd:c5:a3:c5:43:ae:b8:e7:cf:f3:ed:94:3d:
f3:6d:e5:e6:00:6b:f6:00:99:c6:7e:11:ef:81:8b:
26:3a:c2:40:02:81:90:5f:5b:40:47:fd:5f:00:a4:
79:87:2a:cd:7d:be:a9:f0:66:fc:b3:00:fb:45:e4:
fc:30:4a:39:03:dd:f2:0c:d0:bc:33:8f:55:08:78:
9f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:51:A7:80:AD:30:DD:57:99:D2:10:86:20:A3:0E:82:1E:6D:D6
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:75:be:94:2d:62:57:fe:77:4a:c6:a5:15:ae:30:c4:03:6c:
e9:dd:81:3d:06:eb:8b:5c:48:3b:5d:88:e1:1a:ba:b4:d9:6b:
88:89:96:8f:44:02:6e:94:dc:b0:c7:fc:eb:7f:4b:a1:74:b9:
be:65:08:04:8f:df:44:7f:88:d6:b9:12:2f:87:14:62:2b:3a:
c8:71:66:2c:02:b1:5b:fa:f9:f0:96:71:42:18:2a:74:ac:16:
b9:e2:96:1f:4d:75:c6:c2:2c:63:ef:85:ae:df:f5:b0:d7:80:
84:17:88:bf:25:03:d2:c9:6e:cb:b1:a1:e7:16:35:84:73:53:
70:2f:ca:fc:d9:ca:23:2d:b0:9d:5d:e6:4e:30:6e:0e:f8:62:
aa:95:5c:ee:a9:11:af:f7:a0:03:7e:7c:16:ba:ba:7c:32:71:
9e:19:bf:92:ca:fa:80:ef:fc:7f:42:7c:8e:1c:b8:25:c4:e3:
a8:33:3c:bf:9f:8e:ae:a8:6a:02:7f:5b:1e:95:4b:0b:23:9d:
27:1c:05:83:35:c7:7d:bf:78:73:ac:72:60:81:49:7c:34:03:
97:32:d5:2f:bc:75:8c:02:9c:2e:80:e5:a0:db:ae:23:d4:82:
5b:2d:2a:7a:f3:e0:8e:b9:5c:5f:59:b6:23:36:bc:c6:34:e3:
3c:71:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:31:01 2026 by rpki-client