Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: ffsfHbX18Fx8PU1T5ipzb9IPTY/1whUMdwOWCbM4K70=
Subject key identifier: 3C:9B:58:18:32:C6:59:5C:3E:67:E3:51:D8:A4:AB:CB:D8:1B:05:2C
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 019E2091AD604261CCBACB45183BE6EE877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 09:01:18 +0000
Manifest this update: Wed 13 May 2026 09:01:18 +0000
Manifest next update: Thu 14 May 2026 09:01:18 +0000
Files and hashes: 1: PtYo6MwEWy1vpndhzACUN02erEo.roa (hash: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: m94SskJNwUTsHHcfc5uALZSN77cSo+QfsEgWrLQ8upk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:ad:60:42:61:cc:ba:cb:45:18:3b:e6:ee:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: May 13 09:01:18 2026 GMT
Not After : May 14 09:01:18 2026 GMT
Subject: CN=3c9b581832c6595c3e67e351d8a4abcbd81b052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f2:0a:cf:d9:ce:58:fb:95:b4:15:2e:2a:d4:
8b:5d:34:32:b8:0e:08:15:d4:7c:be:89:46:f2:d0:
aa:fb:6f:34:94:eb:b1:eb:b8:ce:2f:e0:f1:96:a5:
e9:10:c9:44:4a:4e:38:e5:88:d8:d2:e0:b8:2f:d8:
ed:01:f4:b4:b2:d1:37:aa:97:0e:0f:a6:08:e2:62:
85:15:30:76:25:d0:98:9a:f2:cb:88:3e:a1:28:7a:
44:1a:81:b7:c8:f8:23:4c:48:be:3f:4b:a2:26:b5:
b3:71:ad:54:07:f8:30:de:7a:f5:5e:ed:d7:f3:b4:
2c:82:25:b7:f0:fc:7e:1e:30:4f:05:97:78:53:0e:
66:2f:77:78:b3:94:3d:11:bf:21:b0:df:66:4f:b0:
98:e3:9f:fe:b5:5d:ba:0a:fe:4f:da:61:a2:68:8e:
9e:39:6a:23:c1:ea:ab:61:53:a1:b3:f6:82:3c:90:
f4:39:c5:63:19:ec:a5:cd:cb:a2:21:cd:cb:f4:d9:
b9:8f:b9:ae:2f:9e:75:9f:ab:07:c7:55:ad:fd:22:
37:f3:47:b8:23:01:83:a2:e9:69:11:e3:81:53:27:
7b:d9:81:62:de:73:83:22:9a:57:97:3d:ed:b9:3b:
ce:3c:24:c2:b6:9b:ab:26:af:e4:e9:6b:cc:2f:41:
4d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:58:18:32:C6:59:5C:3E:67:E3:51:D8:A4:AB:CB:D8:1B:05:2C
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:07:99:92:09:d3:bb:9d:aa:af:9a:7e:5c:aa:c8:a2:a8:76:
d9:0d:09:d5:aa:ca:12:c3:52:dd:58:06:7c:fe:c2:1e:56:01:
2c:29:ef:74:0b:c8:62:1b:ea:d2:2e:02:97:e3:61:f4:20:e8:
3d:57:c6:7e:b5:d7:cc:a2:c8:de:f3:76:1d:cc:34:1d:58:c4:
65:ee:f2:af:c6:a0:8c:2f:3b:aa:5c:de:c1:d2:c2:07:d6:1f:
e2:88:63:9f:76:f3:04:aa:be:24:f5:2d:bc:cf:3f:a8:a4:82:
60:bb:89:3b:d7:0b:60:0e:bf:16:d9:bd:0a:78:bc:2e:4b:4d:
02:64:03:9a:ad:12:4f:96:b8:df:b2:1f:70:84:32:69:c9:dc:
0b:18:1b:cb:ba:4f:1c:6d:d3:94:d3:6e:c5:60:06:22:28:61:
f7:57:b2:56:b6:04:f3:27:9b:4b:c7:ce:e3:7a:54:02:00:f2:
89:e8:c1:bd:fc:4b:28:77:15:22:83:80:eb:f5:e8:d6:67:dc:
5d:60:7f:3b:b0:ba:a1:df:0d:0d:d1:d3:75:d3:68:01:0d:6e:
1b:46:c7:30:a3:57:f5:e6:93:e9:12:d6:b3:da:95:c8:ef:6b:
65:65:ca:98:4e:7c:7b:51:1c:ad:54:54:0b:0c:59:a3:b8:a1:
fd:6a:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:40 2026 by rpki-client