Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
File: iuqCkaUdU780Tc2HYs22gp0eS8A.mft (raw, json)
Hash identifier: DBYKVJxHJl6HyuD4upIv0r9DkpHlA1btHSDoqE0k+eo=
Subject key identifier: 01:5E:9B:53:53:06:C4:ED:57:EB:7F:AE:C0:DD:19:3D:9E:02:CF:FF
Authority key identifier: 8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
Certificate issuer: /CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Certificate serial: 019E1F47A7960F602A1AB740B06C62F35A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
Manifest number: 2C
Signing time: Wed 13 May 2026 03:00:50 +0000
Manifest this update: Wed 13 May 2026 03:00:50 +0000
Manifest next update: Thu 14 May 2026 03:00:50 +0000
Files and hashes: 1: FvTUXze2cP2KDGx2hRq_w_Z-9N0.roa (hash: Gp1g8k1CPQjLn91bFZfvO5ChcN4hmVKIBnTLXnXZ2/M=)
2: iuqCkaUdU780Tc2HYs22gp0eS8A.crl (hash: TPin+neubcS4pkZrk0T8PMFUpme4KokvVHb4eh+eM/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:a7:96:0f:60:2a:1a:b7:40:b0:6c:62:f3:5a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aea8291a51d53bf344dcd8762cdb6829d1e4bc0
Validity
Not Before: May 13 03:00:50 2026 GMT
Not After : May 14 03:00:50 2026 GMT
Subject: CN=015e9b535306c4ed57eb7faec0dd193d9e02cfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:f3:2e:0f:a2:c0:dd:38:6c:a4:cd:ab:a4:
b8:69:21:87:76:cc:d4:c3:bf:79:50:ef:06:f3:c1:
b2:1e:59:f7:93:24:e1:ad:11:3f:8a:cd:5a:74:bf:
ea:a0:72:8e:ac:71:90:51:e4:e8:3a:72:46:3c:55:
98:69:13:98:7e:b7:83:f4:0d:ec:3f:81:8f:9a:49:
94:95:05:78:c9:5f:fe:1a:3b:ed:b6:32:ed:9c:ee:
42:7a:a7:20:24:92:58:fa:dc:f0:40:ed:53:20:16:
34:5d:41:3b:e2:85:35:51:bd:3c:d6:3a:b3:65:7d:
0e:2b:8a:d8:32:76:ba:f7:f9:bf:eb:8d:a7:7a:de:
1d:5e:e3:98:95:f3:30:73:64:fc:26:0a:d4:07:23:
25:86:db:58:5f:e6:5e:c2:a2:8f:7c:da:ed:dd:8f:
58:8e:f6:61:7e:21:77:85:f3:05:27:57:02:58:f5:
17:9c:4c:78:11:0b:9c:f2:fd:44:66:65:54:2b:a2:
b9:3f:c2:70:47:75:9b:e9:c2:34:e3:3d:49:0a:e4:
55:e6:36:8d:c0:5e:50:cb:e3:58:d3:8c:6c:6b:ad:
a3:b3:b8:11:9c:02:b8:e5:cf:ac:8d:69:f5:00:bb:
e5:de:e5:b4:12:4f:b1:13:5d:3e:ca:a5:95:80:e7:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5E:9B:53:53:06:C4:ED:57:EB:7F:AE:C0:DD:19:3D:9E:02:CF:FF
X509v3 Authority Key Identifier:
keyid:8A:EA:82:91:A5:1D:53:BF:34:4D:CD:87:62:CD:B6:82:9D:1E:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuqCkaUdU780Tc2HYs22gp0eS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bb05ac-4b92-4fde-9260-d2fb0a3201b8/1/iuqCkaUdU780Tc2HYs22gp0eS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4e:6c:a2:e5:43:62:50:ed:74:b7:33:13:b4:6f:33:3e:90:
4e:cd:b0:85:d8:82:28:ec:ca:04:3f:ce:8c:88:13:25:c6:a5:
e3:dc:ae:58:f9:07:ee:12:db:b1:f6:55:c2:05:3d:cd:c0:cc:
f6:a8:fc:27:f5:af:36:59:83:57:7f:8e:1f:80:cd:be:bf:cb:
12:2a:11:82:92:c8:6e:33:2a:a0:22:84:8c:3d:00:bd:71:58:
07:c5:ae:89:6b:93:69:e4:ac:3f:83:bc:ee:c9:79:cc:94:01:
a9:f0:91:95:94:7f:fd:af:4f:ab:6e:76:dc:b6:ca:83:49:fd:
af:cd:d9:60:eb:70:40:6e:a3:64:2d:a5:91:8b:d0:da:49:59:
44:25:cd:6d:ec:e1:d5:b3:58:d8:3c:87:64:5f:79:32:00:fe:
e0:5b:f2:1d:6b:85:d9:82:a7:d5:1f:e6:b5:43:93:6e:2b:1c:
d7:02:29:eb:80:7e:09:27:f5:e7:d2:7b:6b:d0:6d:6a:eb:af:
5f:a5:b6:d2:e2:f1:e2:a9:cf:0b:4b:d6:ae:d7:08:26:24:64:
b9:85:90:dd:2d:15:f2:ac:49:8e:1a:7e:d4:d7:59:9d:04:b3:
f8:82:8c:96:b6:90:68:a8:95:23:af:e6:95:13:8e:58:38:a6:
dc:bf:5f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:33 2026 by rpki-client