Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: HUNs61ESCxvJvrNSNYBEX6wNsRv0v0uQGFikcpfpa3Q=
Subject key identifier: 59:35:F3:DB:36:05:1D:74:B9:1E:BB:11:35:B1:2F:9D:F6:9E:F4:F3
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019DF04A7A0518A809D919B0AA1533FE53E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 18F0
Signing time: Mon 04 May 2026 00:01:45 +0000
Manifest this update: Mon 04 May 2026 00:01:45 +0000
Manifest next update: Tue 05 May 2026 00:01:45 +0000
Files and hashes: 1: KaT0sW3jh_PPKcDRHkAr_6LGbFg.roa (hash: 4tEmgwJp5TqeJVAPv5jHwB4A533Y/KCzgRQwAZ4AUmA=)
2: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: wRB27Ownbnsu0cpPMnhCdCkLhbMialxfFxpf/w52hr4=)
3: YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa (hash: 54/I0U+2gsfxDHjTGitToFh36OuJx0rhyc8ObFsTIiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f0:4a:7a:05:18:a8:09:d9:19:b0:aa:15:33:fe:53:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: May 4 00:01:45 2026 GMT
Not After : May 5 00:01:45 2026 GMT
Subject: CN=5935f3db36051d74b91ebb1135b12f9df69ef4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:7a:0d:c7:1f:f9:39:90:64:74:92:fb:58:
4e:1b:8f:b5:43:35:a0:95:f9:55:39:e3:e1:44:98:
20:72:54:b1:3e:e5:9c:60:bb:0c:76:b0:07:77:09:
f3:82:00:0b:2d:81:5d:d1:3d:4b:fc:15:43:89:ff:
1f:2a:29:bb:59:7c:2b:1c:e1:e9:76:0e:b9:44:31:
1a:af:2c:e4:27:44:d9:f7:1d:ad:85:4c:3b:e4:6b:
a4:97:83:e0:3d:6a:17:72:e7:10:dc:d0:9f:12:f6:
49:67:dd:8d:ee:9c:44:ac:f6:74:01:79:a2:18:75:
4e:dc:2e:96:a8:f4:8e:1d:15:13:3b:df:ff:91:e9:
90:b5:06:e1:33:52:24:99:d0:47:9f:e8:f4:cb:64:
2d:ed:8e:75:ab:c4:ae:0d:1c:4d:8c:a2:c6:9b:4f:
ad:12:ac:de:f8:2d:96:a4:7e:75:4a:2e:0a:51:2d:
06:aa:b8:6f:28:de:12:ec:2d:86:18:95:1b:92:05:
6b:c9:ad:5e:33:05:72:d7:dd:2c:60:af:39:64:45:
ff:6e:09:87:fc:90:b7:8a:fb:aa:b1:58:0f:28:9e:
3f:8e:42:0d:b0:fc:63:b8:95:f9:34:3f:ff:38:83:
a2:7f:64:9d:f4:d6:ff:4b:12:10:80:2d:da:13:a0:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:F3:DB:36:05:1D:74:B9:1E:BB:11:35:B1:2F:9D:F6:9E:F4:F3
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:16:6e:6d:3e:01:7a:5f:52:ac:f9:a5:07:3a:a5:8c:26:f7:
26:78:16:79:b5:cf:80:66:4c:3c:f1:3e:62:20:26:11:0f:70:
79:06:5b:a9:d9:6a:36:29:d3:77:76:c7:48:05:83:03:3a:b6:
c1:4e:1a:9d:08:b3:fb:7e:a5:15:ec:f8:a8:15:ec:eb:ca:34:
81:e3:9b:4c:da:dd:c9:ab:1c:8a:d4:a7:cc:7e:22:03:89:f0:
cc:47:d1:75:98:1d:69:2d:d5:22:12:8c:3a:be:67:14:d2:dc:
2d:88:11:61:f3:5a:cd:93:e2:ec:b5:f6:72:69:47:09:ac:60:
7b:23:f9:cd:65:0b:f7:ed:61:d4:90:ba:9e:06:67:3d:35:61:
3e:d3:6a:58:e4:af:96:70:2b:50:b5:7d:76:32:8f:51:d9:03:
84:d0:3f:47:f4:ec:0d:f7:65:bc:f8:d4:73:6f:a1:e3:5e:a9:
67:b4:4f:14:1d:9b:5e:37:69:64:82:e5:07:10:02:48:72:ea:
23:6b:11:48:6f:17:97:ab:2e:d8:15:ee:d4:0a:0b:47:93:3e:
e9:2b:1b:93:35:38:ea:05:c3:96:7a:cc:61:39:b6:8e:e7:98:
f0:65:24:4a:ce:03:53:34:e1:66:d1:55:bd:55:d5:4a:b8:35:
af:92:49:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 08:37:27 2026 by rpki-client