Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: J/KbSrI/f9jIJ+Ilg5yZYsYuVa649WXKGD9Tl0Dz+Sw=
Subject key identifier: 7D:FA:98:14:4B:71:E2:E0:2E:D6:90:1B:2F:92:FF:FE:D4:AB:BE:7E
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 019E4EB3E0E14DDC55DAE05CE92CC6969EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 1921
Signing time: Fri 22 May 2026 08:01:11 +0000
Manifest this update: Fri 22 May 2026 08:01:11 +0000
Manifest next update: Sat 23 May 2026 08:01:11 +0000
Files and hashes: 1: _innNg-W71__tEWxWqoYCVwYPLc.roa (hash: UBsc5lS9QgRC7N6kPNc37ofHV3RHdTM0d9hSw9Z1W3o=)
2: aprsdgtKeFBW6dMDyLpO37V7sYU.roa (hash: 04ZHgWeGk6onOBVuETq5g7lFyguxKvrGp3YmU7j5C7o=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: m8u8/w1kiv0HTFrsoTb0JB3jXAN5+qh+VpxetJb3d1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:b3:e0:e1:4d:dc:55:da:e0:5c:e9:2c:c6:96:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: May 22 08:01:11 2026 GMT
Not After : May 23 08:01:11 2026 GMT
Subject: CN=7dfa98144b71e2e02ed6901b2f92fffed4abbe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:ad:60:88:e6:a3:95:e9:74:8c:61:af:cd:
d9:c1:3a:3f:db:32:02:a5:5d:fa:f6:12:b3:13:56:
2a:d2:f0:b4:d6:3d:ee:0a:f6:44:b8:f0:79:2a:b9:
9e:15:38:51:5f:d3:14:e7:63:bb:33:f3:05:2e:84:
d7:d3:99:eb:7f:7d:91:e5:6b:1f:58:c4:16:92:1e:
bc:1d:f3:1e:48:de:16:17:86:d3:a4:7e:59:36:05:
c0:65:13:05:b6:34:71:82:10:2c:2a:7f:58:03:f3:
c2:29:10:aa:2f:7d:75:fd:b8:90:37:b8:61:ed:bc:
3d:ae:b1:b6:1c:bf:9b:64:8f:cf:a2:e9:57:04:c5:
e5:b2:8c:8d:b9:a1:00:67:cb:fd:9f:27:98:7f:b8:
98:26:ea:82:c2:3c:0e:08:83:b9:70:42:b9:ab:e5:
38:70:51:b9:41:51:c1:c9:c7:20:c8:7d:a9:6b:14:
e5:35:9e:69:26:59:ae:be:54:39:c3:75:f2:f7:ea:
02:19:ba:43:91:ae:27:d2:58:3d:89:71:d5:5d:f0:
1d:c2:9e:f8:58:65:c9:21:63:67:00:08:bf:43:18:
1a:3b:fc:af:8a:4d:0c:37:79:c1:f9:68:1f:16:6e:
2e:32:c2:ee:2f:ce:a3:d6:0b:4e:90:f9:64:05:5a:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FA:98:14:4B:71:E2:E0:2E:D6:90:1B:2F:92:FF:FE:D4:AB:BE:7E
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ce:5c:aa:51:11:4e:77:6e:e1:47:31:bd:0c:4b:1a:eb:c6:
d0:ab:be:86:f6:72:16:fa:ba:79:9c:c7:92:ea:e2:5b:4d:31:
95:17:27:e5:1b:49:17:01:9e:de:48:dc:e5:f0:ec:a8:a2:ae:
be:dd:76:1d:39:0c:59:37:f3:a1:98:3b:d4:4f:e1:9a:60:6a:
fa:b5:ce:ca:11:02:3a:76:64:2f:db:9f:65:79:33:1a:0f:1a:
66:ea:77:27:99:4c:c8:18:8a:ca:03:14:3c:a6:ed:c3:58:5b:
cc:70:55:21:66:75:17:e3:66:26:fc:bb:11:fb:44:b8:ae:01:
4d:20:0e:40:a1:7a:d8:75:f8:94:0d:c5:e2:27:f3:ab:36:b3:
57:5f:7a:7e:8c:a7:6c:f6:e8:a5:5e:fc:90:f2:f7:6d:c1:c6:
75:f6:93:2f:9e:e8:67:ec:3c:bc:a4:22:e0:8e:a0:81:05:48:
93:dc:88:c8:51:09:41:57:63:bf:e9:8f:e2:cc:dc:09:23:0d:
a7:58:01:63:05:ee:0a:d0:cf:2b:1d:64:47:bf:c6:fa:2a:8a:
e9:8e:d0:da:58:39:57:1d:85:a1:59:57:23:12:7d:90:7e:ff:
bf:58:66:e0:41:ed:de:e7:8f:b7:6c:00:2c:bd:5a:38:d0:5b:
16:b7:6a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:10:11 2026 by rpki-client