Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
File: piEYZBO7394g5ZL75VU95_lOWYc.mft (raw, json)
Hash identifier: u1XkqGCWMWWRzSiusCxCnZoeLg8buckSUoN+A6erfsU=
Subject key identifier: 24:A7:FE:D1:F5:58:FC:D4:99:71:CD:43:B5:D3:85:B9:97:A4:93:89
Authority key identifier: A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
Certificate issuer: /CN=a621186413bbdfde20e592fbe5553de7f94e5987
Certificate serial: 019E4E7D59F1B2BB48BBB671D00D29FF6FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
Manifest number: 07F5
Signing time: Fri 22 May 2026 07:01:38 +0000
Manifest this update: Fri 22 May 2026 07:01:38 +0000
Manifest next update: Sat 23 May 2026 07:01:38 +0000
Files and hashes: 1: 1FR5ZpZwPSxvOqUqxpmnyVdoI2Y.roa (hash: Uc2np6So5kLYsA5QE2lGHUyNPrOYT/fABQqkzzDnXDo=)
2: Z48YcacIdaFOrbU7hl0nBrBdOnE.roa (hash: mNCCj8yHct24e5aYcSn4spJlToJ33LdwEpzI7Aa7J4o=)
3: piEYZBO7394g5ZL75VU95_lOWYc.crl (hash: 3qkY5Y7ZMggnR81vLYPIEpWcj/hjloOpr4IDqHP3aas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:7d:59:f1:b2:bb:48:bb:b6:71:d0:0d:29:ff:6f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a621186413bbdfde20e592fbe5553de7f94e5987
Validity
Not Before: May 22 07:01:38 2026 GMT
Not After : May 23 07:01:38 2026 GMT
Subject: CN=24a7fed1f558fcd49971cd43b5d385b997a49389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:71:a2:de:2c:98:80:4d:b4:8e:3b:24:0b:
1e:88:57:3c:b9:9d:9c:f8:81:c1:6d:ca:37:01:90:
6f:55:bf:65:fa:67:c3:ba:8a:09:7f:cd:e5:35:cf:
67:8e:e7:64:65:41:6d:b4:8d:02:21:5e:a7:e3:0b:
65:91:c3:4e:45:f2:b8:46:c7:57:55:82:e2:e8:5f:
8b:98:6c:89:01:6d:e8:6a:a2:a4:1d:10:56:09:97:
ab:fd:86:4c:36:26:21:86:ae:31:f4:fe:56:5d:af:
5b:80:30:2b:f6:68:8e:13:3a:b5:6a:0f:38:bb:d2:
06:36:c4:e4:eb:3a:ed:62:f8:e0:9b:00:81:58:c9:
30:1d:ee:5c:d4:32:e8:3c:6c:00:48:6d:59:03:cb:
4e:90:3f:ad:40:e5:55:d2:aa:d1:59:fe:57:ad:90:
55:94:dd:10:74:ac:16:93:5d:f2:e0:03:27:81:5b:
b1:aa:7b:17:0d:46:f5:eb:03:78:c2:ae:d9:54:cd:
33:02:03:ba:aa:4b:b9:3c:b7:52:f0:af:70:22:fa:
d1:0a:7c:49:d1:fb:d2:7c:19:5e:6f:33:9c:32:01:
c1:03:c3:c0:b0:fd:f0:e9:30:aa:b4:4a:94:4c:6a:
f3:82:95:5f:91:33:52:ee:70:c4:b4:eb:60:18:97:
94:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A7:FE:D1:F5:58:FC:D4:99:71:CD:43:B5:D3:85:B9:97:A4:93:89
X509v3 Authority Key Identifier:
keyid:A6:21:18:64:13:BB:DF:DE:20:E5:92:FB:E5:55:3D:E7:F9:4E:59:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piEYZBO7394g5ZL75VU95_lOWYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0396ad-dda7-4600-8f66-f56c779b142f/1/piEYZBO7394g5ZL75VU95_lOWYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9e:8a:05:96:c8:2d:77:e9:4d:e2:9a:5f:4a:00:2b:d8:aa:
ee:d8:d8:65:4f:1f:ed:ee:f9:65:33:db:4b:ac:2b:ea:d0:2c:
61:b1:bb:82:5e:6d:11:79:95:55:d7:78:53:9d:04:72:03:7c:
25:2d:3b:a8:03:c7:c3:2a:01:3b:3a:8d:3b:7f:9c:11:36:6c:
fe:f0:52:48:58:2e:ef:d5:f0:f9:6a:d8:7c:3b:44:c9:a9:6f:
93:65:8e:38:c3:d7:d4:16:67:36:41:d5:a2:24:d5:20:ab:66:
c9:6c:3c:65:92:db:30:89:b9:30:ee:b5:c3:a3:4a:4f:ba:cc:
f1:3b:4a:31:98:04:53:3e:c3:0b:2f:c8:49:7e:1a:92:49:4d:
24:c2:fe:c7:76:f9:9e:0f:18:d1:df:de:43:a6:9e:8f:85:59:
03:2a:4e:dd:22:6a:38:9c:aa:e2:3c:6a:8a:8f:a7:08:b6:57:
f5:a2:17:a4:38:ec:da:d1:4f:14:fd:aa:1a:0c:18:81:4f:6e:
1e:01:1a:2f:ae:d9:44:c9:78:1d:5c:c0:4c:35:1e:c5:92:a1:
ba:6b:07:a8:69:d0:da:df:ea:c4:76:61:2a:00:18:18:66:df:
e3:2d:9c:70:66:58:bf:f8:e3:f9:df:b7:f3:84:34:5c:97:91:
f2:fb:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:18:50 2026 by rpki-client