Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
File: 41oFbIJClx0akLC_qYsbepMFKIQ.mft (raw, json)
Hash identifier: c88UIXuLa/0L/fmBBY0rkmRdbuT+4HBr4h84Cc6h2vI=
Subject key identifier: 5B:55:D8:BA:AB:26:06:D8:4B:E2:05:A6:6F:83:D3:FE:81:B2:41:8C
Authority key identifier: E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
Certificate issuer: /CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Certificate serial: 019E1CB50EDA92708717EC5DAAE9FDA64079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 15:01:28 +0000
Manifest this update: Tue 12 May 2026 15:01:28 +0000
Manifest next update: Wed 13 May 2026 15:01:28 +0000
Files and hashes: 1: 41oFbIJClx0akLC_qYsbepMFKIQ.crl (hash: wKezvoNvvXa5xrt1i5Uul/FMgGoauTVh5uPDoCkeYE8=)
2: 6L2DF24h5kP__h0ZXcHhhgUtOHE.roa (hash: k3rPz38ZgJPfjpSFDtarFqrK6I1kr4U/pIOZrMPrf6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:0e:da:92:70:87:17:ec:5d:aa:e9:fd:a6:40:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35a056c8242971d1a90b0bfa98b1b7a93052884
Validity
Not Before: May 12 15:01:28 2026 GMT
Not After : May 13 15:01:28 2026 GMT
Subject: CN=5b55d8baab2606d84be205a66f83d3fe81b2418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:a0:32:a5:29:b5:d4:26:5a:24:67:20:c3:
3b:0f:99:98:02:58:5b:0c:3e:cc:7b:17:65:33:3b:
36:36:2a:52:03:0a:f2:d4:d1:c3:fd:06:94:65:eb:
96:6d:e0:2d:a8:9e:f9:eb:3a:e1:ad:33:04:80:ae:
8d:bd:7f:5a:a1:07:47:ba:54:68:90:8d:be:0f:ee:
8d:fb:f0:2c:44:1b:7d:ce:fc:ca:95:00:37:e7:76:
58:3c:0f:ee:5a:4e:1f:0f:c6:fd:b5:df:24:d4:73:
20:b2:80:ec:59:e5:df:6e:56:bb:b4:ac:a9:cc:ba:
4a:b2:89:fa:ce:b8:1c:76:9b:ea:00:35:f3:71:a8:
3a:70:8c:a0:67:45:9b:bb:e1:da:66:05:12:d3:1d:
f5:c0:12:e1:9d:48:da:4d:48:a9:a6:20:b8:39:62:
0a:41:70:f6:7d:44:3d:95:da:ff:83:28:0d:f0:2a:
04:11:60:dc:14:10:a6:45:bc:9b:b2:8b:92:c8:88:
ea:a9:12:82:08:7e:16:61:f9:21:c7:8b:72:db:22:
f6:d9:b8:56:79:64:a2:77:dc:56:82:29:dc:03:00:
6d:33:71:3e:07:11:ae:08:bb:61:77:8a:89:23:0c:
f3:95:32:72:f0:75:73:46:70:c4:7c:50:be:24:f0:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:D8:BA:AB:26:06:D8:4B:E2:05:A6:6F:83:D3:FE:81:B2:41:8C
X509v3 Authority Key Identifier:
keyid:E3:5A:05:6C:82:42:97:1D:1A:90:B0:BF:A9:8B:1B:7A:93:05:28:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41oFbIJClx0akLC_qYsbepMFKIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8cd3ba-9d72-434f-8f82-aab4bd8fce9d/1/41oFbIJClx0akLC_qYsbepMFKIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:99:6e:f6:44:79:a6:35:d9:47:64:5f:15:bb:aa:6c:48:1c:
e3:f5:8a:bc:0c:9c:6f:dc:81:bd:4d:72:85:fe:80:ee:bc:82:
9c:2b:d5:0e:91:d0:f2:a9:36:6b:29:aa:4e:77:5c:53:ae:90:
d9:79:f6:62:e6:8d:d6:e2:9d:50:c8:7c:bc:eb:a4:08:ee:a7:
8a:29:bc:56:02:c7:2e:f2:a6:36:4d:b0:e2:f1:55:b3:c5:79:
41:57:39:f4:09:ba:50:18:16:74:d5:bd:91:ab:f0:20:65:8e:
a1:21:c4:de:94:ca:c9:8b:16:f0:cb:f9:2b:46:f3:76:b3:d8:
27:aa:ad:e8:0b:5b:4b:0f:e8:f7:ff:ab:ef:b4:f5:62:5f:c6:
05:5a:2e:26:a2:1e:40:55:4f:49:75:1b:95:63:99:8a:0c:14:
fd:c1:9f:53:35:a1:7e:62:69:84:40:df:10:5b:f9:72:f8:4e:
54:85:af:2f:3e:5a:7e:29:a9:0c:c3:82:9c:5b:d6:d4:9b:5b:
18:b3:ad:ec:c1:d8:96:62:7a:53:f2:02:d2:51:08:1b:27:ff:
e3:c6:3b:60:b0:36:a5:53:4b:3e:33:d2:dc:bf:ae:a6:bd:5c:
39:36:8c:1d:c1:de:e1:31:98:9d:40:8d:39:ae:78:e4:f2:35:
f0:20:46:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:06:09 2026 by rpki-client