Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
File: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft (raw, json)
Hash identifier: kBxf69EEYKzzhGf5xypoL0FpN7ZyqRLVXjukVOk+KQ4=
Subject key identifier: 7E:7A:D8:2E:65:B6:59:FC:E9:78:DB:3D:CE:A8:97:95:28:63:AE:BD
Authority key identifier: 4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
Certificate issuer: /CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Certificate serial: 019E29CBE21BF6894E9C0260504AD58C83E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
Manifest number: 0CA1
Signing time: Fri 15 May 2026 04:01:27 +0000
Manifest this update: Fri 15 May 2026 04:01:27 +0000
Manifest next update: Sat 16 May 2026 04:01:27 +0000
Files and hashes: 1: 4vUJXm8eNnXrmzWPEJu4hyJ74bE.asa (hash: E4sIlw3AAVJ0Z5hHy6GY0z+mLPDpAHtRm2YAKcmDuRI=)
2: S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl (hash: VROfvucDDfcYyL3Wnf3VdNSrJZOUvd8fi/DnmIw7Ko4=)
3: q7Y942LXE7VDqi3CVQGg7s-T4B4.roa (hash: um+Nzf6xvoV3Y4Z8bfjOD2xB6Pty18EAptHerBiWZz4=)
4: sN_A4_afKTzrbujkvLlFerai1cc.roa (hash: kT/3kMd3FSxH/sNDt/AGCw6+mNMLymdiF+y0wVoZofk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:e2:1b:f6:89:4e:9c:02:60:50:4a:d5:8c:83:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b53f9567f6d6ad89412c0515f74647612dce04a
Validity
Not Before: May 15 04:01:27 2026 GMT
Not After : May 16 04:01:27 2026 GMT
Subject: CN=7e7ad82e65b659fce978db3dcea897952863aebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:e0:9b:f2:2f:47:37:53:3f:4f:e9:c2:1f:
1f:df:bc:16:b5:89:53:e8:d1:4d:ec:49:2f:06:ba:
ee:7c:14:e9:ae:95:f7:d8:57:a7:ea:70:9a:7e:69:
e7:40:11:70:d6:c7:7a:36:6b:1c:da:86:f1:9e:2a:
ef:7e:3f:f7:d9:9c:10:64:04:39:09:dd:ec:82:f3:
6b:f0:4e:da:cb:87:61:51:fd:ad:bb:00:91:01:89:
24:e5:7a:b5:68:77:bb:b0:16:ea:52:5b:83:b4:28:
15:14:d7:d4:40:9d:ba:66:38:c7:ae:f6:4f:c1:2f:
85:97:93:c2:8a:af:30:a1:ed:18:75:9e:72:fb:7c:
33:dd:05:36:53:fb:8a:02:8a:5c:ab:99:cb:3b:fb:
bd:0f:09:e8:74:aa:4a:7b:6a:92:56:47:c7:a0:13:
8c:ee:ee:c2:2b:d7:59:03:3b:c0:fd:e6:9a:7e:c8:
79:e3:f4:0c:a3:27:81:f5:3b:e0:c2:e8:46:1a:c2:
56:86:a9:84:09:9a:f9:07:85:68:7e:3a:87:6f:34:
37:96:3b:27:8d:cf:18:97:37:9f:9a:7a:92:c1:74:
2f:e6:68:36:3b:9e:e0:22:61:05:61:6d:fa:71:a8:
17:b0:46:39:e2:a9:3c:fe:8f:6f:56:b8:ac:86:41:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:D8:2E:65:B6:59:FC:E9:78:DB:3D:CE:A8:97:95:28:63:AE:BD
X509v3 Authority Key Identifier:
keyid:4B:53:F9:56:7F:6D:6A:D8:94:12:C0:51:5F:74:64:76:12:DC:E0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6e9804-8a07-4238-b9d1-1fa522a05795/1/S1P5Vn9tatiUEsBRX3RkdhLc4Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:48:d5:31:2f:b7:01:3a:73:5f:41:42:90:80:79:cc:a9:d7:
a4:d5:fc:bf:ef:6f:db:b9:2d:ee:06:d2:40:05:40:3a:5c:ee:
ff:83:76:d9:e4:50:81:7a:10:ab:8c:2e:e4:0f:ba:be:57:c4:
07:36:0f:70:04:36:e6:3d:b4:24:d5:f4:b8:af:10:df:a7:67:
b6:c6:fd:f3:03:c3:81:89:11:3b:da:1e:d1:02:a4:2c:6f:9d:
9b:3b:81:0f:ea:66:8f:de:e4:ac:01:88:42:bf:38:f0:fc:66:
27:c9:8c:5b:08:83:8a:0a:ea:81:90:7b:6b:f9:e1:e9:04:c0:
eb:61:8b:69:81:3f:5b:33:62:41:cf:59:b4:4d:dd:cd:fe:37:
21:e1:22:3b:60:7f:07:dc:2a:c3:e1:14:95:35:5d:52:c5:ed:
0b:b1:cd:d9:5e:3f:85:d6:80:20:9e:df:3b:3c:db:e7:48:dd:
5b:75:44:44:a8:28:24:67:b6:de:b1:00:51:94:6c:95:d5:31:
a0:21:a0:f8:75:5b:a1:08:0e:05:ff:36:58:7d:8b:c9:94:79:
7a:3f:43:ad:cf:f1:a5:08:0d:32:28:cf:c4:d1:95:4f:7e:a7:
b2:9e:7a:d8:f0:68:e8:d8:f3:b4:6d:ee:6c:e3:9e:62:ab:a8:
68:6a:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:38 2026 by rpki-client