Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: KK8nEcIO/96eTFfOVAdHoKKW1wQfJFJfrJTL2U1fBG4=
Subject key identifier: F2:08:8C:32:0C:FD:45:4E:CC:4F:D6:A2:29:5A:37:DE:A6:D2:9D:DA
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019E1F10939218C9F137B111861F6A1DE7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 02:00:40 +0000
Manifest this update: Wed 13 May 2026 02:00:40 +0000
Manifest next update: Thu 14 May 2026 02:00:40 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: pNSLUVB4QBdsYiWFkQU8kqCegS8S9rgWvAO4pwaMb14=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:93:92:18:c9:f1:37:b1:11:86:1f:6a:1d:e7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: May 13 02:00:40 2026 GMT
Not After : May 14 02:00:40 2026 GMT
Subject: CN=f2088c320cfd454ecc4fd6a2295a37dea6d29dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:f4:82:fc:bc:01:4d:25:96:72:aa:cb:35:
44:67:9a:ce:8b:e2:e6:ce:2f:10:d4:5e:e4:f9:f0:
24:00:3c:76:60:74:c4:8c:d1:de:81:3c:21:d1:4e:
8d:2c:54:bf:75:7b:0e:e0:ed:56:e1:6e:8c:50:82:
2e:bd:6c:51:60:03:11:ff:60:2d:a8:fa:57:cb:77:
9e:d9:0d:97:81:c8:97:62:2d:16:5f:a2:7f:87:44:
6a:fe:9c:9b:fb:4a:09:f6:1e:ce:f2:05:44:03:a2:
b1:ab:f0:fe:0d:48:79:b1:d0:60:c4:60:89:d4:c9:
6c:55:76:cb:2a:50:02:04:6a:f9:05:5e:f7:6a:b4:
f1:9b:84:e1:24:95:d5:85:c9:66:58:02:b0:9d:97:
f9:9c:57:a6:9a:2f:24:1c:de:2e:3f:af:e4:01:8e:
4b:e2:bf:18:bc:9d:e2:8f:1c:22:f4:10:4b:00:0b:
d1:32:e5:3b:4e:b2:38:94:00:b1:a1:ac:74:40:5d:
c2:f5:cd:33:d0:36:15:f8:3c:af:25:ad:02:05:c5:
16:e4:5c:64:da:12:c5:a3:01:ce:9b:3e:81:e7:8d:
98:8f:4c:34:02:4b:0b:5c:c9:be:a4:b2:ac:5a:50:
72:0b:05:3c:0c:fc:53:74:e2:99:0c:7f:ea:60:a5:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:8C:32:0C:FD:45:4E:CC:4F:D6:A2:29:5A:37:DE:A6:D2:9D:DA
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:33:88:fb:90:dd:15:5a:b2:0e:09:9f:d7:c6:e6:0e:f1:e8:
f9:6d:9b:d7:fd:32:ce:98:c7:35:4e:48:49:1a:4d:e3:0b:d4:
9c:e0:3f:32:4f:4f:95:5a:27:d0:37:db:d6:21:d1:a6:84:c2:
27:0b:2d:d0:53:c6:ce:86:b8:eb:50:49:c5:94:1f:e1:4d:10:
40:f3:fd:64:57:6c:d6:b8:dc:1f:72:45:5a:34:f3:fd:c8:2d:
20:67:16:46:5a:99:b5:dd:0a:d3:39:e6:45:6b:d9:c7:e1:78:
c4:67:9e:11:e5:17:1c:be:5a:30:35:2f:3d:b2:2f:0f:2b:ce:
d0:78:09:7f:71:3b:b1:8b:f0:36:b1:be:37:25:90:93:07:5b:
de:24:f5:06:48:07:22:ab:56:45:02:73:15:70:71:16:37:6a:
59:46:18:e8:0b:1f:3d:07:0c:7b:3c:db:29:dc:53:f8:5f:81:
fd:ac:3e:e7:02:68:1d:c1:e3:6b:c4:fd:9e:b3:fe:e9:59:9a:
a6:7b:d7:5c:e0:d8:51:f4:39:84:88:1f:3f:24:54:6c:6b:33:
cf:46:0b:9d:65:ca:d9:47:00:d7:44:29:00:a3:b5:a5:d3:82:
26:3a:94:62:2a:5e:ab:7f:12:77:41:80:b1:40:88:33:c1:4c:
37:d0:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:46 2026 by rpki-client