
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier: vSI98e4nIzxXjz+M92guakU9tcS6/DpYUnynWzeP7w4=
Subject key identifier: 41:B4:25:C5:F6:6F:B6:EE:AC:D6:A5:FF:9F:32:2C:A6:2C:03:C7:59
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial: 019E1C46B99FF7FF23BD494764AC94C5F367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number: 189A
Signing time: Tue 12 May 2026 13:00:57 +0000
Manifest this update: Tue 12 May 2026 13:00:57 +0000
Manifest next update: Wed 13 May 2026 13:00:57 +0000
Files and hashes: 1: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (hash: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo=)
2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: qP6Kuj7KSkeEaRNcy870dCqyiRZ+lS3ksQaBXgq20QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:b9:9f:f7:ff:23:bd:49:47:64:ac:94:c5:f3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Validity
Not Before: May 12 13:00:57 2026 GMT
Not After : May 13 13:00:57 2026 GMT
Subject: CN=41b425c5f66fb6eeacd6a5ff9f322ca62c03c759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:c6:a9:11:e5:51:5d:35:9f:40:7a:14:28:
90:96:11:28:ae:ef:67:20:39:a9:c0:d9:cd:0b:6b:
fd:f8:53:91:83:97:be:ae:96:64:d0:3e:8e:f0:78:
15:af:1a:88:c1:87:83:ca:a5:a4:e2:b7:83:bc:b1:
bf:c2:0f:89:2b:02:9f:d4:4c:4a:19:1c:6a:82:69:
7c:3e:9d:14:f4:e0:a8:fa:0e:e0:22:65:0e:14:01:
87:7b:b7:ba:f6:b0:b8:ac:4e:6b:e9:55:28:dc:8e:
98:20:b8:5f:f6:0e:44:96:b9:a1:8b:83:2a:16:78:
34:a1:b6:ff:81:73:06:d2:4e:c7:ff:77:bd:24:f2:
2f:e4:65:4d:f3:1b:07:38:da:52:ed:7d:cb:49:7c:
56:34:fb:c6:66:ac:03:bb:9a:95:59:ba:dd:e7:5b:
a2:64:6d:ba:12:ff:9e:f2:05:64:63:84:55:57:af:
56:34:dd:9d:dd:44:c5:d8:1f:72:98:78:ed:9f:5b:
36:44:4b:23:70:b6:11:87:8d:ee:1d:b2:43:1a:8f:
5a:86:c6:51:f3:26:54:e2:39:30:9e:e4:a9:13:ec:
78:df:8d:53:72:d6:e1:4b:12:f5:56:24:fa:29:31:
e0:f8:7c:2a:cf:41:f0:82:17:c0:ad:b4:79:41:33:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B4:25:C5:F6:6F:B6:EE:AC:D6:A5:FF:9F:32:2C:A6:2C:03:C7:59
X509v3 Authority Key Identifier:
keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:89:3a:db:74:d3:82:5a:8b:49:1d:10:f6:50:f4:7a:93:36:
71:69:ae:2c:87:8d:b8:9c:10:1d:76:c4:11:c5:18:04:20:3d:
c7:a7:0a:2a:f3:aa:ed:ec:3e:b9:7d:7c:76:b4:55:27:08:6f:
7f:c2:32:b7:bc:42:35:fb:32:fa:f5:a1:19:74:61:a0:e7:2a:
fd:8a:5a:aa:5c:04:75:18:c4:4b:ae:e9:1f:28:51:b6:5b:67:
ab:d7:eb:f3:9d:ce:09:41:d0:c1:db:fb:70:43:4c:e9:a2:9e:
33:91:bb:9a:d4:73:cb:31:64:fd:9e:51:f3:8b:25:82:08:fe:
ff:cb:36:60:65:88:73:bb:76:3a:e6:c4:6f:ad:5c:ce:b8:31:
28:59:65:52:f2:9e:a7:46:84:5c:ce:26:a2:81:53:a9:c1:44:
cf:a4:23:e7:2e:ee:4d:d4:90:87:72:98:76:d5:06:f6:fb:47:
c2:c5:aa:b8:00:17:09:79:7e:19:dd:d6:a8:f5:42:a4:9b:60:
9b:55:25:c0:4e:40:aa:12:8d:3f:d9:ee:00:a4:15:97:95:12:
47:12:8c:e6:55:b5:d1:af:fd:31:eb:92:49:fc:f9:10:c8:04:
87:7f:6c:8f:5b:24:d8:64:bc:c9:6c:80:46:4b:6e:c1:b8:9c:
03:85:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:40 2026 by rpki-client