Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: 5/z9p3wEACU4BVtd2tBzSAE38tyPHxmI7YuQ1WvBmlg=
Subject key identifier: 69:F6:E5:8F:21:92:2B:C6:D7:0D:EA:0E:FF:45:3A:C3:D8:D6:76:6C
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019E295DCF3527DA5717BE09B600175C138E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1916
Signing time: Fri 15 May 2026 02:01:14 +0000
Manifest this update: Fri 15 May 2026 02:01:14 +0000
Manifest next update: Sat 16 May 2026 02:01:14 +0000
Files and hashes: 1: O0zdzMf69p1geR9BzbHj8H6216Q.roa (hash: gB3ykbY7Zy2yOIDfRVoU3HqEBAgziuKZvTGr//ZJWIo=)
2: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: nPIOFoQxTc9Ko20dwsevEV938HojxzRXWH57HJeMzu0=)
3: sYgcwFmXC21qQr4HaIkoLUDZGq4.roa (hash: o16QA0TxR5R2SVkQH4tgiDW7/Tyeif3rP5L2akN0sow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:cf:35:27:da:57:17:be:09:b6:00:17:5c:13:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: May 15 02:01:14 2026 GMT
Not After : May 16 02:01:14 2026 GMT
Subject: CN=69f6e58f21922bc6d70dea0eff453ac3d8d6766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:cb:b8:75:cb:ef:43:65:87:95:22:1a:44:
9e:ff:57:a4:3a:e1:90:c6:ab:04:43:ea:5b:95:66:
72:65:5b:ff:96:21:b5:cf:7f:19:fb:38:ca:50:c6:
50:ac:ab:c4:9a:83:a7:b9:55:59:07:6b:7a:6e:73:
00:df:09:b0:c0:67:d5:fa:16:25:a9:e2:ad:6c:65:
1f:2b:1d:28:35:a7:0e:e0:47:b1:9e:cd:ac:e7:c5:
07:2d:6f:d9:f7:ce:6c:7f:f1:6e:a2:d9:35:ea:ee:
7e:ca:87:5d:65:0e:f7:93:04:dd:04:e2:74:ee:8c:
f0:97:07:34:35:16:80:66:df:1c:a0:8c:64:a0:af:
eb:35:62:e0:ba:68:f9:18:00:94:02:97:09:48:7c:
97:0f:f3:83:9e:7b:05:33:e3:d8:a6:24:bb:69:c4:
23:18:e7:84:76:ca:da:d8:64:14:a8:c0:0b:3a:bb:
10:ac:a6:f2:1e:29:d7:73:8f:a4:7e:66:69:b1:c4:
26:9e:24:7d:b9:59:e4:58:71:1a:11:06:8e:b6:24:
5f:f8:7c:76:f4:12:87:22:c4:e5:9f:b7:bb:fd:47:
c1:b6:b1:fe:2f:3f:8f:0e:5c:99:6a:86:29:81:a0:
cb:74:9b:ad:aa:c9:56:bc:d8:d0:2c:7a:23:9e:a6:
ee:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:E5:8F:21:92:2B:C6:D7:0D:EA:0E:FF:45:3A:C3:D8:D6:76:6C
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:61:7b:ef:9e:4e:d7:4e:1f:e7:08:e9:1b:ac:bb:df:6d:60:
99:38:63:a1:24:a0:14:45:d5:d4:b7:e2:08:2f:60:09:e7:1d:
39:a0:7e:ff:97:eb:bd:11:95:31:06:e1:10:43:31:8b:12:e8:
7e:71:52:46:fe:42:4b:0e:3c:07:27:13:76:c6:90:ce:af:e8:
ad:05:5c:f6:e6:9f:5f:86:6e:01:2a:d4:ae:a1:58:db:87:a3:
84:3f:65:f2:d7:c4:6a:c5:1d:78:98:d8:82:b9:70:72:0d:8b:
1e:4f:d6:82:ec:52:9f:98:8e:aa:a4:e1:fb:f2:2e:bd:b0:c2:
2a:ca:e1:32:47:1d:aa:b8:ef:4f:7e:8c:79:44:08:c1:58:68:
d2:21:a6:89:26:72:f8:40:e7:b6:88:b5:d0:d1:62:b6:cc:01:
92:27:42:17:b1:cd:62:de:37:ef:2e:34:cc:79:49:ff:7e:32:
e5:13:77:f8:35:4a:64:f9:90:7f:db:58:3a:99:33:9c:77:ee:
a2:1b:35:57:ac:d7:c6:4b:db:c8:ca:f2:24:1a:9e:7b:8f:77:
73:bd:b5:87:1d:2c:18:37:d8:f6:11:60:bf:68:56:1d:8e:60:
a6:35:b9:23:3d:1e:7a:88:07:1a:b3:86:76:e7:31:81:20:4a:
e0:5c:5c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:26 2026 by rpki-client