Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
File: e00xqxjkH42VmgnVVmDdMqqcRfc.mft (raw, json)
Hash identifier: TrjB4wCgYluddU1LfcN+jziiQHh0E+A3K7IOxXXQZFU=
Subject key identifier: 29:71:1E:E8:78:51:21:C7:34:CA:69:84:0A:01:EE:29:08:EB:DC:81
Authority key identifier: 7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
Certificate issuer: /CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Certificate serial: 019E29CC5FE8365151FB023EDF7149A9D325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
Manifest number: 0666
Signing time: Fri 15 May 2026 04:02:00 +0000
Manifest this update: Fri 15 May 2026 04:02:00 +0000
Manifest next update: Sat 16 May 2026 04:02:00 +0000
Files and hashes: 1: 9eLIJ6RTK5BSD3tLbgAyaNclDYI.roa (hash: XSIKM2J7ehZpb0tQX1yj15wm/mofvKw8ffgNRz1IrEo=)
2: bMw_tMgEF3JjkWdlI_kbyhmiZB8.roa (hash: 9tpXPxjrcGnuiYj+mPBltbwiQGnnVBk/rVL0p+GtkMk=)
3: e00xqxjkH42VmgnVVmDdMqqcRfc.crl (hash: VMAOEaji7L29+poCQ5vNffiedex5jRsNaelNVetc3mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:5f:e8:36:51:51:fb:02:3e:df:71:49:a9:d3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4d31ab18e41f8d959a09d55660dd32aa9c45f7
Validity
Not Before: May 15 04:02:00 2026 GMT
Not After : May 16 04:02:00 2026 GMT
Subject: CN=29711ee8785121c734ca69840a01ee2908ebdc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ae:c6:b1:4c:3c:00:f7:2a:a1:5b:4e:68:6b:
f5:60:4b:7c:4e:6c:c3:ea:b0:8d:3d:5a:84:a4:c9:
82:12:1b:31:67:63:19:da:46:03:9f:b3:60:2b:3f:
ec:19:b9:cf:06:01:8d:26:f6:d7:2d:de:d7:e4:8a:
60:25:9a:b7:e1:2a:54:98:96:0a:19:16:77:2f:3c:
e6:bd:9a:01:3d:7d:45:4f:95:fc:a4:62:72:be:a9:
38:c6:f0:87:1f:85:07:64:66:e3:28:c3:0c:97:d1:
af:d5:f0:5d:41:53:87:c4:6e:7a:c1:62:41:c6:cf:
69:d9:c8:15:47:1b:0f:5b:84:d7:c9:9b:87:5a:bc:
4f:62:70:43:fc:f2:44:08:23:65:5f:37:18:f7:0a:
35:c3:44:d1:01:5f:e7:6a:06:03:f7:46:87:05:8a:
9c:d4:fd:d0:71:b6:94:ff:9b:e0:25:01:e7:44:90:
19:56:0a:3f:7c:d0:ac:fc:8e:f3:d1:98:cc:b8:4c:
ef:06:a4:d4:0b:d7:40:60:66:d2:80:b0:ae:2d:58:
8d:db:40:74:cd:a1:2d:97:74:b9:d3:d5:45:51:72:
e6:ea:f3:66:29:c0:67:90:8c:11:a9:c7:e6:5b:89:
35:6d:7e:5a:e8:98:70:38:d3:b5:14:58:28:a0:55:
39:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:1E:E8:78:51:21:C7:34:CA:69:84:0A:01:EE:29:08:EB:DC:81
X509v3 Authority Key Identifier:
keyid:7B:4D:31:AB:18:E4:1F:8D:95:9A:09:D5:56:60:DD:32:AA:9C:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e00xqxjkH42VmgnVVmDdMqqcRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c2508-11f1-4ae7-8720-bff023b344f7/1/e00xqxjkH42VmgnVVmDdMqqcRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ec:3e:e7:28:3e:70:e1:75:31:b8:f4:f4:30:34:dd:cc:8a:
c4:57:7b:b3:d6:dc:b2:b1:77:0a:d1:29:ee:ff:ea:ae:90:93:
4a:c3:07:74:18:30:b6:d2:75:1c:8f:05:79:c0:9f:66:3f:7b:
c9:79:12:01:e1:06:35:f3:87:b7:7c:e8:88:da:ff:1f:58:d0:
74:fb:b7:45:4c:11:c4:cb:d0:6f:5b:0b:83:c6:2f:4b:96:02:
6d:89:aa:1d:3f:4a:0e:62:e9:4e:8e:75:e5:ba:fa:87:b7:99:
d3:01:2f:2d:df:7d:9e:51:3f:e3:85:7a:22:c2:b5:6b:98:25:
8f:4d:61:dc:b4:fe:ee:f8:63:8d:62:e5:9b:c1:7d:c2:ec:d4:
25:81:62:cc:1a:7e:fb:0a:71:c0:dc:00:c7:f7:21:2e:7a:e0:
02:c7:42:1f:7a:ce:09:ef:d0:d3:4f:75:a6:cd:86:52:55:11:
9c:b9:df:53:d9:a1:7a:b9:b3:57:46:ae:ba:96:9e:5f:44:1d:
3d:fe:70:06:43:6c:4c:12:74:59:57:8a:23:66:89:df:4a:e1:
45:0f:ae:1f:95:a9:c3:3b:c0:a6:7b:1f:69:c0:24:fa:cb:33:
c9:1c:29:13:ce:eb:90:fd:4a:3e:9e:83:d1:09:76:0e:10:0b:
28:27:e5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 13:29:33 2026 by rpki-client