Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: nAa/qRESJh/3GLTGkaGkUn1fuRxt7f6hVbl+zNJGI6k=
Subject key identifier: 4A:24:88:CA:A5:AB:E8:D3:2E:24:F3:3A:59:4F:5A:D0:0D:51:91:3A
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019DE28EA89FA1D8D82EA443F4AE1D7D514C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 18E9
Signing time: Fri 01 May 2026 08:01:33 +0000
Manifest this update: Fri 01 May 2026 08:01:33 +0000
Manifest next update: Sat 02 May 2026 08:01:33 +0000
Files and hashes: 1: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (hash: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ=)
2: sudPoVqFg1PQZP7-xy4v565d_SM.roa (hash: tABC2SMeyK75v3oh2kumS0Pn8iv5DPrW8wlj3JIpyAM=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: 9NTmr/tv+aM2sZF1db+L8S2sbe+W5e68zR8i+lAG69I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:8e:a8:9f:a1:d8:d8:2e:a4:43:f4:ae:1d:7d:51:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: May 1 08:01:33 2026 GMT
Not After : May 2 08:01:33 2026 GMT
Subject: CN=4a2488caa5abe8d32e24f33a594f5ad00d51913a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:8b:24:85:98:6e:3c:89:be:ad:bb:94:e1:
4a:7d:2e:56:86:b1:c5:7f:56:67:0f:f8:97:26:78:
f0:87:92:53:fe:29:65:30:68:80:5f:d1:7b:cb:42:
8a:75:4b:5a:1f:17:e5:50:63:0d:ce:a7:3e:49:a5:
3d:0d:d7:77:f1:65:6a:1b:79:37:2a:a5:ab:d4:a4:
fb:ed:7c:2c:83:ef:69:34:a7:11:e4:24:e8:60:16:
94:69:d5:36:9f:93:e1:6e:06:16:e5:94:76:fd:99:
59:59:92:b2:78:4b:d1:00:af:f9:d1:45:28:c0:dd:
c1:e5:2d:d6:aa:a4:e8:74:93:bd:4d:84:38:aa:2c:
61:0d:f5:cc:a8:84:16:ec:69:5b:38:24:54:0f:25:
dd:d9:d7:28:ec:21:7a:6b:8f:4e:66:c2:2e:1c:1d:
67:54:a3:6b:e7:33:00:da:bd:90:48:e1:43:f4:f0:
bf:49:34:4b:8f:80:70:d1:41:ad:18:2e:1e:1e:8a:
68:05:69:4d:37:2d:c3:06:88:5f:03:3f:88:16:9f:
0a:5b:74:6a:5e:24:a7:4d:8e:26:85:06:09:dc:c0:
67:81:6f:ad:59:9d:17:cf:ee:f7:db:bd:c4:a1:30:
6a:72:c1:0a:cf:f8:ec:c3:98:05:75:84:e7:e5:78:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:24:88:CA:A5:AB:E8:D3:2E:24:F3:3A:59:4F:5A:D0:0D:51:91:3A
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c8:81:46:13:ad:e4:f4:e1:78:69:8f:81:0a:8b:f4:36:cd:
25:66:43:7f:e3:f9:db:36:fe:74:fe:f6:79:be:f4:62:c1:ed:
c5:80:e0:24:6e:05:f7:42:f8:fd:6d:bd:43:82:e9:06:81:d5:
ac:1c:d7:93:d9:7e:57:73:7e:6b:db:37:fe:f7:b3:f8:3c:c5:
31:1f:4a:23:ff:d0:0d:88:02:e1:ad:5d:d6:01:48:a0:52:7a:
c0:00:59:47:38:59:a3:9e:f1:c2:49:72:80:82:10:2e:b5:5d:
2c:69:c0:28:46:ed:37:4a:3b:74:00:21:e3:11:1b:d3:88:a6:
74:68:1a:b3:d2:0c:56:61:17:a8:6f:25:07:36:70:8d:1b:c2:
b3:2e:ad:91:b4:51:6d:1d:93:30:22:76:51:00:5b:60:35:08:
89:63:9d:19:af:c8:b3:ea:72:b3:bf:12:3b:9a:60:a2:94:51:
f0:96:7c:03:b0:aa:86:e4:99:af:54:b3:c9:92:91:46:94:37:
fb:fa:11:a6:18:b7:40:ca:9c:5a:c1:d1:5a:10:be:83:d0:8b:
f1:2b:f2:6d:23:ab:e0:e5:f7:ca:d7:94:1b:80:05:a4:1d:16:
9a:ec:00:0c:ae:ec:30:2a:80:fb:87:bf:42:19:1b:53:d0:3a:
e5:96:14:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 13:51:25 2026 by rpki-client