Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
File: 53OfCEQuIkRmIbiaV2ObNUK6NNw.mft (raw, json)
Hash identifier: kSNnc0Ml3EWK/J6Tt6MJod5XdiKjNWkzqvs4Ve/67tk=
Subject key identifier: 08:EA:5F:AC:FA:7F:7C:A0:F9:E2:C7:BA:67:12:8C:64:D5:15:21:CF
Authority key identifier: E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
Certificate issuer: /CN=e7739f08442e22446621b89a57639b3542ba34dc
Certificate serial: 019D98BD16D6AEF742BB3650338FB3DC2420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
Manifest number: 06DE
Signing time: Fri 17 Apr 2026 00:00:22 +0000
Manifest this update: Fri 17 Apr 2026 00:00:22 +0000
Manifest next update: Sat 18 Apr 2026 00:00:22 +0000
Files and hashes: 1: 53OfCEQuIkRmIbiaV2ObNUK6NNw.crl (hash: VNcsvBw3vUnI5dDmkLAmCMkUH2gmxW2PYBfp3zsC09M=)
2: nS12X_FMQVUUwkWnLYmgJW732kk.roa (hash: GXbiX9J7KWPFCiPzKs7zINZFOvfmZgRDxvmBON8Kk10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:16:d6:ae:f7:42:bb:36:50:33:8f:b3:dc:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7739f08442e22446621b89a57639b3542ba34dc
Validity
Not Before: Apr 17 00:00:22 2026 GMT
Not After : Apr 18 00:00:22 2026 GMT
Subject: CN=08ea5facfa7f7ca0f9e2c7ba67128c64d51521cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:a3:cb:bc:7d:db:6d:65:3d:0e:1e:58:25:
36:c3:c3:14:1f:43:85:f5:3c:24:bd:b5:41:a9:3f:
75:d7:a7:ff:1a:99:51:84:a7:2a:0d:4d:a9:bd:80:
ae:57:8c:da:b2:1c:7a:c0:8b:61:04:3e:d4:d9:67:
56:01:4f:95:d7:05:47:0b:8e:ab:a6:a5:82:1c:92:
0c:d9:af:18:7a:a0:b5:56:1b:06:c4:2a:a5:f4:33:
98:89:54:fd:30:7a:35:a4:4d:7a:ca:1c:0b:21:d4:
1e:8b:89:03:c2:5f:50:95:49:15:13:ea:c9:30:cc:
c9:2c:90:32:05:43:c3:ba:68:e4:c8:e8:66:1d:6e:
da:ed:d2:48:e2:c9:7d:05:10:6e:ef:aa:00:73:6d:
c0:c6:06:64:01:01:2d:08:03:ae:f7:12:14:71:21:
a9:68:3a:b5:5c:67:31:de:99:da:f5:fb:a7:24:c8:
34:19:a7:7c:57:71:26:f9:97:d4:d7:68:57:4a:0a:
91:3a:cf:7b:9e:bc:bf:e1:1d:72:6a:88:ba:a1:f0:
aa:02:9d:cf:77:a8:b6:2d:4c:26:2f:b8:55:44:7c:
2b:a5:5a:ba:a9:ca:7f:a9:c6:27:d4:35:45:73:f4:
49:ab:01:d0:26:28:a2:b7:47:97:a2:ab:55:41:dd:
9a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EA:5F:AC:FA:7F:7C:A0:F9:E2:C7:BA:67:12:8C:64:D5:15:21:CF
X509v3 Authority Key Identifier:
keyid:E7:73:9F:08:44:2E:22:44:66:21:B8:9A:57:63:9B:35:42:BA:34:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53OfCEQuIkRmIbiaV2ObNUK6NNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e20d59-4454-4ec8-9677-5f2bf22e189d/1/53OfCEQuIkRmIbiaV2ObNUK6NNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b4:b8:6b:12:ce:d8:3b:5e:ef:71:d1:50:e3:02:f4:51:cd:
7d:cc:87:19:dd:17:07:72:b0:69:38:20:2e:10:74:f7:ff:f0:
ca:3f:1c:5c:58:df:ca:68:99:7d:51:12:38:b1:55:e8:e7:56:
38:f2:8f:a8:9e:e7:78:da:e2:7d:21:14:fd:31:a7:35:fb:11:
41:59:f1:63:ba:4d:a6:58:82:2f:0d:9c:80:7f:fc:ee:1c:2f:
1e:87:1b:8e:38:aa:1c:f0:9c:0f:3b:2e:85:a6:8b:53:f4:b9:
c9:7b:ff:36:b9:71:87:9f:d8:62:3f:ac:27:f3:15:5c:25:89:
5c:41:e9:25:5f:c5:f8:a7:00:0d:0b:72:66:ff:a6:4e:c7:cc:
5c:66:8c:07:1e:fa:f5:49:f8:f8:46:d7:de:5a:f1:db:7b:12:
38:fd:46:4c:37:0a:4b:c7:4c:84:d7:88:fc:fd:26:b9:bc:ef:
43:3d:e7:94:2e:dc:2c:2b:0d:49:52:c1:c1:88:07:32:3d:84:
03:6a:00:43:f9:76:45:f1:48:00:00:25:9d:9c:8d:c2:45:10:
47:83:d9:12:6f:89:31:15:b6:45:b7:5e:79:4e:b7:03:6f:18:
d0:14:48:6c:ff:44:b6:46:f8:de:4f:50:d9:4c:1f:d8:66:ac:
6c:ec:b6:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvRbWrvdCuzZQM4+z3CQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzM5ZjA4NDQyZTIyNDQ2NjIxYjg5YTU3NjM5YjM1NDJi
YTM0ZGMwHhcNMjYwNDE3MDAwMDIyWhcNMjYwNDE4MDAwMDIyWjAzMTEwLwYDVQQD
EygwOGVhNWZhY2ZhN2Y3Y2EwZjllMmM3YmE2NzEyOGM2NGQ1MTUyMWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs+jy7x9221lPQ4eWCU2w8MUH0OF
9TwkvbVBqT9116f/GplRhKcqDU2pvYCuV4zashx6wIthBD7U2WdWAU+V1wVHC46r
pqWCHJIM2a8YeqC1VhsGxCql9DOYiVT9MHo1pE16yhwLIdQei4kDwl9QlUkVE+rJ
MMzJLJAyBUPDumjkyOhmHW7a7dJI4sl9BRBu76oAc23AxgZkAQEtCAOu9xIUcSGp
aDq1XGcx3pna9funJMg0Gad8V3Em+ZfU12hXSgqROs97nry/4R1yaoi6ofCqAp3P
d6i2LUwmL7hVRHwrpVq6qcp/qcYn1DVFc/RJqwHQJiiit0eXoqtVQd2a6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjqX6z6f3yg+eLHumcSjGTVFSHPMB8GA1UdIwQY
MBaAFOdznwhELiJEZiG4mldjmzVCujTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMjBkNTktNDQ1NC00ZWM4LTk2Nzct
NWYyYmYyMmUxODlkLzEvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lMjBkNTktNDQ1NC00ZWM4LTk2NzctNWYyYmYyMmUxODlk
LzEvNTNPZkNFUXVJa1JtSWJpYVYyT2JOVUs2Tk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYrS4axLO
2Dte73HRUOMC9FHNfcyHGd0XB3KwaTggLhB09//wyj8cXFjfymiZfVESOLFV6OdW
OPKPqJ7neNrifSEU/TGnNfsRQVnxY7pNpliCLw2cgH/87hwvHocbjjiqHPCcDzsu
haaLU/S5yXv/Nrlxh5/YYj+sJ/MVXCWJXEHpJV/F+KcADQtyZv+mTsfMXGaMBx76
9Un4+EbX3lrx23sSOP1GTDcKS8dMhNeI/P0mubzvQz3nlC7cLCsNSVLBwYgHMj2E
A2oAQ/l2RfFIAAAlnZyNwkUQR4PZEm+JMRW2RbdeeU63A28Y0BRIbP9Etkb43k9Q
2Uwf2GasbOy2xw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:26 2026 by rpki-client