Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: c7H5AtMHooE9GOXO14pijNLoGCmPy8OeajUsP6fVMzE=
Subject key identifier: 14:3F:76:7F:91:CF:84:4E:06:EC:E5:7A:00:3D:79:56:E7:91:F9:11
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 019E295E0E8F339B459733A8EB62DB70C498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 0590
Signing time: Fri 15 May 2026 02:01:30 +0000
Manifest this update: Fri 15 May 2026 02:01:30 +0000
Manifest next update: Sat 16 May 2026 02:01:30 +0000
Files and hashes: 1: 8ysjWfo50oYB18bxQ9D9a3-kZCE.asa (hash: 3Bf1TDm5M4w9EIZ76rBYWXtw2Bws6ycg1lO/t+ClFIU=)
2: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: rK83EeCP4v37qCVJ7ngkC3wBF/bHRveBCpjDfLhkVxI=)
3: DBrxR8mTi6SEhBmvb30k8Eb8j2s.roa (hash: h24c3qKtryXONntLsae9vJY3swqsjyg/ugcW2+IoENk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5e:0e:8f:33:9b:45:97:33:a8:eb:62:db:70:c4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: May 15 02:01:30 2026 GMT
Not After : May 16 02:01:30 2026 GMT
Subject: CN=143f767f91cf844e06ece57a003d7956e791f911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:38:8e:22:39:47:b6:dc:ad:3c:be:c0:e6:17:
05:33:b7:88:df:15:d1:d4:6e:b0:bb:4e:65:47:14:
87:9b:9e:62:2e:05:95:47:94:2e:95:c1:f0:d7:97:
41:32:3d:46:35:79:0d:eb:29:69:5d:a5:0f:f5:f7:
24:71:b2:42:68:ac:e4:79:e4:e5:e2:2c:e1:2f:57:
c8:37:da:d7:dc:9b:98:d1:d8:86:2e:12:93:f8:cd:
a9:da:ef:6e:e6:0a:1e:63:bf:61:2f:98:4f:20:3b:
4d:e9:bb:58:84:30:2c:21:50:cf:3a:30:6a:0c:69:
35:ed:0c:90:a2:e0:e6:98:e6:73:75:16:3c:07:4b:
c4:1e:41:3f:62:c3:e6:ff:b9:6c:cf:34:38:d1:7d:
37:be:2e:08:be:ee:86:ab:9d:d9:ad:48:19:00:27:
75:ff:b9:80:b1:27:9f:30:cc:f6:60:1e:4c:b1:0d:
8b:f8:4d:0f:1b:e5:7c:65:5b:c1:73:bc:62:fa:b7:
81:bd:f8:71:91:09:cb:fa:50:b7:90:2c:86:f3:5a:
aa:68:50:a6:ef:bd:b8:b1:38:0f:09:a4:88:2a:be:
cc:8f:13:31:20:1d:4c:14:25:ae:d0:df:61:29:4d:
5e:eb:ff:9c:0b:b6:f4:8e:37:6b:b9:d7:46:df:aa:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:76:7F:91:CF:84:4E:06:EC:E5:7A:00:3D:79:56:E7:91:F9:11
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e0:1a:a9:57:da:7e:2b:b3:c1:20:8c:8a:f7:33:4c:ca:64:
9f:3a:76:bd:53:cf:8c:d8:03:8b:2c:f2:40:07:f4:28:b9:6a:
17:45:b7:7e:88:e6:20:8f:96:4d:7c:a5:f1:c8:7a:b0:22:e3:
5f:0a:04:22:d1:7e:57:d2:04:55:67:85:f7:86:8c:f4:59:db:
fe:2b:73:b2:68:51:30:87:47:85:64:a4:fa:99:e2:aa:07:16:
0e:4c:e5:35:15:57:65:7a:87:e4:e5:25:0f:8f:69:cb:5d:d9:
3b:a1:db:bc:1e:6b:1a:da:4a:5c:ef:fb:35:f2:15:7e:01:6c:
fa:e8:43:47:87:53:08:af:bc:bf:8f:f7:3f:87:b4:07:97:33:
35:64:70:c1:8d:47:6e:97:a1:83:b8:20:32:3e:27:6a:52:0c:
92:86:fc:53:d9:8a:c8:c9:a5:45:21:d3:ee:c3:c3:c1:69:8d:
53:60:5b:e8:fe:f4:ab:68:ba:36:4c:e7:f3:df:e7:18:bc:3e:
07:c9:a9:16:e2:2d:f9:50:6d:7b:ed:c1:09:35:b7:2f:28:2a:
db:f2:da:aa:97:f5:91:c7:8b:26:d0:ba:0a:3a:61:68:e0:80:
b1:03:04:ee:d9:33:fe:b8:54:a3:63:a6:b9:d1:2d:87:0a:b7:
51:d2:cf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:59 2026 by rpki-client