Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: P6BYUTYc+M+IJRc+HqPcCnl+CgW/roNHVJrwSMOwd8k=
Subject key identifier: A0:F0:77:5E:B5:6D:D4:20:B1:11:F2:72:6E:DE:93:D7:0A:47:47:20
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019E55FF355CCF68663F06BACA8FF730225E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0CD0
Signing time: Sat 23 May 2026 18:00:49 +0000
Manifest this update: Sat 23 May 2026 18:00:49 +0000
Manifest next update: Sun 24 May 2026 18:00:49 +0000
Files and hashes: 1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: UJDowFh6Misb6x14q0o2bcMYYtioty7NwQnH68884rg=)
6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:55:ff:35:5c:cf:68:66:3f:06:ba:ca:8f:f7:30:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: May 23 18:00:49 2026 GMT
Not After : May 24 18:00:49 2026 GMT
Subject: CN=a0f0775eb56dd420b111f2726ede93d70a474720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:9a:45:8a:ca:82:02:df:02:39:d5:7d:34:
7e:3e:f5:cc:82:16:d4:55:70:0b:ed:38:2a:51:88:
a6:e4:fe:9e:a1:48:43:19:b6:cc:5c:bd:fe:d3:12:
05:f7:45:31:56:66:54:74:f8:69:2d:77:a9:27:33:
6f:26:ad:b8:ed:64:5f:5d:12:3e:75:3f:26:7c:fa:
53:0a:36:17:a9:15:64:b6:d1:79:7b:e4:a2:0e:63:
12:29:86:36:ad:a0:1f:db:3c:67:13:bd:52:4a:64:
d3:b0:c4:8e:b3:19:ff:6f:51:9c:1c:cb:2b:1b:d7:
78:71:9e:8a:55:57:f5:1c:c1:ac:1b:15:da:a6:03:
48:cc:a9:44:18:a2:37:55:1c:27:1f:ba:20:2d:4f:
4d:8d:84:de:bf:ac:84:61:a4:7f:0d:e1:39:6a:ea:
c1:40:55:4d:a4:a1:72:79:d0:73:6c:5e:38:ef:bc:
33:05:4f:e4:f7:72:b9:f5:f3:73:61:9c:71:31:ca:
87:3a:e1:db:f9:b0:07:18:91:a1:e4:df:74:7d:db:
f1:ac:7a:9e:50:d5:8c:99:d1:50:cb:fb:7b:1b:55:
b9:61:ff:52:ea:88:93:e9:e8:d7:70:a2:92:ce:3f:
b3:19:ef:3b:40:03:d6:17:e4:6f:81:58:47:1e:0b:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:77:5E:B5:6D:D4:20:B1:11:F2:72:6E:DE:93:D7:0A:47:47:20
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1c:6f:4e:2c:ef:e4:32:67:43:02:b3:fc:ff:52:21:b5:c2:
26:f2:60:0e:a9:64:6c:8f:aa:f6:ed:ae:6a:6c:a1:4a:6b:6f:
70:73:46:ae:30:98:ed:73:4a:07:bd:b5:ee:9e:41:c3:db:9c:
79:ed:4e:34:95:92:14:93:84:07:1e:71:c9:10:93:94:2b:19:
18:89:0f:14:42:84:e8:cb:21:fc:3a:73:b3:bc:fd:f0:c8:91:
81:e5:c2:32:36:b1:51:bc:b8:32:ca:25:63:79:c5:4c:ef:b4:
5d:34:7a:a0:b6:02:4c:81:93:f4:3b:da:60:a6:36:b2:72:71:
fa:79:c5:56:0e:4e:9e:6d:c5:64:b4:2c:e4:27:63:db:49:27:
24:bd:4e:c9:db:ec:38:79:ae:b4:88:fa:cc:36:03:44:7b:15:
3d:5f:ce:ba:1a:78:fa:40:84:e7:60:91:7b:84:ce:32:42:8e:
60:3d:31:d0:30:62:44:5f:00:dc:8a:2e:0c:14:e5:df:0d:24:
8b:90:f0:e9:b8:26:cc:fb:07:06:e7:3f:72:90:56:c2:77:7d:
9c:a9:a2:1a:6d:11:35:08:a1:6c:7b:a8:55:71:d7:e4:24:1d:
fb:6a:31:c1:36:4c:59:ff:da:78:2b:d7:0c:ec:a7:29:8d:86:
3c:3b:dd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 21:01:04 2026 by rpki-client