Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: FY09LNsETnVKL1rUtuB+SbqgiCWLikaygKXSYFkYSk0=
Subject key identifier: 33:3D:71:30:95:08:4B:3F:0B:21:BE:30:FD:4E:C3:0C:48:05:B8:D8
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 019E216CE169A2199B365AF9EB66EEEF6475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 13:00:44 +0000
Manifest this update: Wed 13 May 2026 13:00:44 +0000
Manifest next update: Thu 14 May 2026 13:00:44 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: v6TXt10cvBbGcNg9XOcbmqIVjO2CT1qj5P6gdxwcBmE=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6c:e1:69:a2:19:9b:36:5a:f9:eb:66:ee:ef:64:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: May 13 13:00:44 2026 GMT
Not After : May 14 13:00:44 2026 GMT
Subject: CN=333d713095084b3f0b21be30fd4ec30c4805b8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:74:68:75:72:ed:45:02:f0:53:6d:42:93:
66:af:e1:58:83:6c:eb:b7:45:8e:5c:78:43:bc:03:
23:24:5f:e8:e9:2e:d4:b7:95:fd:2a:50:db:9d:11:
cb:2f:45:c5:74:66:79:60:87:96:f3:72:18:3c:06:
a0:90:7f:fa:49:10:f4:ac:69:4c:1a:3f:5c:1f:5a:
d4:d2:48:b7:0e:f3:ae:4b:4e:5d:6a:81:06:72:2a:
d9:67:64:a3:52:eb:42:44:86:d0:96:e4:ef:61:ff:
2f:76:52:f5:8e:01:6b:b7:53:eb:94:9a:ae:b7:ba:
24:09:2b:3a:91:15:04:c4:ad:7d:da:fb:38:de:57:
61:9d:3d:f1:4f:fa:c3:aa:00:85:48:36:04:d8:f3:
20:98:93:db:c5:72:55:47:6d:3f:75:7c:3e:aa:2c:
a3:87:4e:a2:40:28:a0:9b:5d:b6:b9:e5:5b:0a:22:
b0:e1:a0:df:c5:db:85:fe:a9:e8:fc:61:b0:3d:46:
de:c3:31:25:47:e2:78:d2:bf:22:da:e1:61:0b:35:
b3:68:cd:94:82:21:0a:c5:5d:2e:c9:14:e0:b7:81:
95:d6:fd:12:3b:23:28:e5:80:4e:d6:35:fc:c2:6e:
26:bc:f2:0c:a0:2f:9f:c8:0a:59:f0:4a:a9:d0:51:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:71:30:95:08:4B:3F:0B:21:BE:30:FD:4E:C3:0C:48:05:B8:D8
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:98:c8:a5:67:2a:5a:40:88:cb:5f:55:b1:52:4a:f7:a0:73:
43:c7:33:08:fe:36:24:b9:3f:aa:31:16:10:17:19:9f:95:a2:
3e:64:09:10:fb:ba:ae:30:66:96:0f:93:fc:84:89:81:e7:fa:
80:03:a7:ca:1e:04:f1:83:f1:e3:c8:36:65:4c:2b:c7:74:59:
71:52:a1:0b:5e:02:13:02:03:08:e8:ec:77:4e:da:1c:45:7e:
cf:97:f3:00:ad:9b:a9:73:2f:08:55:5c:95:b0:ff:72:9c:a5:
65:aa:58:73:f6:26:6f:1f:0e:57:57:b4:8f:7a:50:e0:ab:3b:
12:dd:9d:6f:52:ec:86:12:0f:f9:a4:0a:1a:4a:ca:9c:4e:fd:
10:5b:50:92:eb:dc:a4:bf:31:48:54:a1:e3:32:fb:d8:21:2c:
2a:b9:a8:3d:67:27:26:be:21:76:b2:e7:21:48:01:5a:bd:a4:
be:07:2c:3a:da:31:ac:d8:31:07:63:af:34:00:03:ba:b6:c1:
d9:a7:e4:eb:3a:0f:d9:ad:c6:21:a8:4e:b2:1b:4c:58:c5:69:
f3:db:1e:34:d3:85:5e:10:b8:bf:d3:e0:aa:36:90:24:54:7f:
bc:54:8b:11:03:a0:ae:37:85:8e:4b:15:e0:45:06:33:b1:84:
6f:d4:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:14:45 2026 by rpki-client