Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: DnL6E9rjEUM5qBO1jaFafsb1c5Kmgp9DINCBU65yzOs=
Subject key identifier: 91:72:17:75:90:B6:3B:2E:CE:BD:08:AC:D2:1C:E7:BA:CB:26:03:F3
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019E205A53932AE417E5A9966D2F4EA7CC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 08:00:50 +0000
Manifest this update: Wed 13 May 2026 08:00:50 +0000
Manifest next update: Thu 14 May 2026 08:00:50 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: SuaVtBgBBlj2AyZzY3GVTZOjtiPdsr++fET7uzUlAss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:53:93:2a:e4:17:e5:a9:96:6d:2f:4e:a7:cc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: May 13 08:00:50 2026 GMT
Not After : May 14 08:00:50 2026 GMT
Subject: CN=9172177590b63b2ecebd08acd21ce7bacb2603f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:54:9c:45:c8:52:da:b6:51:49:8a:9c:6c:
2b:35:c5:d1:ea:ff:14:f3:c4:9c:f5:d8:0c:59:2d:
af:5f:ee:7a:84:34:4b:a8:43:8a:e3:1d:b1:db:2e:
d8:d8:e6:23:aa:57:8f:1e:b8:71:27:e6:8c:06:eb:
60:ee:38:1c:7a:0d:9e:89:70:b4:15:a8:c1:55:3a:
f6:74:76:95:01:59:57:2d:7d:5f:dd:58:30:99:18:
cd:48:ca:c7:dd:5f:84:ab:34:9e:9f:50:14:93:5e:
b6:11:38:aa:46:02:41:e0:ba:0d:59:6d:47:65:f0:
2b:bf:91:8c:10:b6:56:13:6f:98:82:f5:9c:aa:28:
11:cd:87:81:02:61:4f:84:02:09:59:6b:90:1b:6c:
2f:a0:76:19:17:8c:4a:eb:be:4f:d4:16:28:55:81:
47:df:ed:0c:d0:21:88:ca:0e:4f:c9:7f:e9:cb:57:
a8:1c:13:3e:1c:4d:3f:57:4b:ce:5d:9d:8a:ed:fc:
27:31:c3:3c:69:c3:63:f4:c2:35:f2:b4:c7:9e:17:
81:13:a8:1c:30:bd:d5:20:12:46:e9:14:ae:61:0d:
01:56:30:47:72:32:fc:ea:6f:67:cd:96:f3:ba:b0:
4e:2c:6f:95:10:47:5b:bf:22:ef:b2:3d:37:ef:7e:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:72:17:75:90:B6:3B:2E:CE:BD:08:AC:D2:1C:E7:BA:CB:26:03:F3
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e5:4d:0e:6b:1d:d8:9d:8b:89:ef:8c:d1:df:f3:fa:e0:3f:
c4:40:16:4c:0d:37:3b:a9:e6:8e:7d:66:3c:d2:4d:a6:d0:b2:
bb:1d:f4:bd:f6:c6:fd:13:4e:ae:88:2e:d6:05:43:57:f6:02:
fe:04:45:57:21:26:bb:7d:10:0d:0b:07:10:35:55:9a:d0:d3:
bf:86:c5:3d:2c:25:d7:6b:35:1e:a8:b7:64:89:f8:7c:8f:1d:
8a:f2:67:08:04:9e:f2:3d:22:00:d2:20:85:bc:7c:58:dd:ec:
8f:2f:0f:72:ac:73:3b:a0:0d:37:66:c2:39:df:4d:a6:1e:46:
ac:68:2f:37:e4:72:b4:7a:b5:42:94:22:ef:89:9f:6e:80:d7:
0a:64:02:43:30:1b:96:b3:34:33:cb:10:68:ac:71:72:c1:62:
60:9c:0e:2c:24:8b:e4:4f:9f:28:10:05:83:d3:7d:96:c5:1d:
f1:a8:73:db:82:77:74:15:2b:20:e4:21:eb:1e:02:34:3c:8a:
65:b6:a6:4d:ec:24:80:1c:2f:52:f7:6e:3e:68:88:2b:65:58:
97:c4:17:42:f4:cb:90:20:a9:4b:91:ff:e5:da:df:72:d0:07:
48:01:a1:3f:22:a6:f0:57:75:33:ed:90:07:06:bf:69:bd:dd:
ac:f6:60:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:24 2026 by rpki-client