Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: i8+1b8AVV06NCis7Atkrgv8PHVLjhpSNZ6guXPHAL9E=
Subject key identifier: 2B:98:44:AC:7F:73:C5:43:D3:24:13:C1:11:1B:2F:45:66:46:0F:79
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 019E1D901EC76BF896B59E8EBB86FC3BD1AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 19:00:44 +0000
Manifest this update: Tue 12 May 2026 19:00:44 +0000
Manifest next update: Wed 13 May 2026 19:00:44 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: iAlvH1+xQfKF+ANxxK99p1rzNqHKxRh1yVqFdXp9Zcc=)
2: _X4eAftjp_R6giU6rV2GZ0FQz9k.roa (hash: VsMljmTZjJFOFhFmrTsEwtE5iJWXUJLVzyxqYH1Mkto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:1e:c7:6b:f8:96:b5:9e:8e:bb:86:fc:3b:d1:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: May 12 19:00:44 2026 GMT
Not After : May 13 19:00:44 2026 GMT
Subject: CN=2b9844ac7f73c543d32413c1111b2f4566460f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:28:4f:c4:fd:cf:f7:3e:36:0d:ac:78:ac:
59:bf:3d:8f:ed:91:19:39:48:c5:67:82:c3:4b:a8:
ad:d4:5e:69:b4:e1:13:4f:ec:80:a4:32:60:e2:76:
6e:b8:59:59:c1:ba:2e:56:60:9a:e9:b8:4a:86:b7:
6b:35:71:8a:c7:1f:7b:e6:a0:cf:e0:69:f0:16:6b:
10:c4:aa:25:89:1a:c5:5c:b6:16:6c:f2:1f:aa:bf:
7e:43:b6:5c:f6:7f:12:5f:78:08:d0:bd:50:14:f5:
90:7f:31:1c:f8:9a:61:63:88:99:81:0f:6b:e5:4b:
39:a9:16:66:8b:aa:73:a3:e7:fb:d0:4f:f6:31:33:
70:95:fc:92:f1:b7:bc:95:68:77:f5:75:cf:4a:45:
37:82:23:79:6c:90:3b:08:d2:fe:15:79:11:93:7d:
bc:9e:89:d8:dd:9c:0a:c2:f9:2c:8b:f7:75:ab:20:
0d:6e:76:40:7e:30:65:64:81:a3:2b:f2:1d:2f:23:
dc:71:ec:13:6b:f6:4b:82:e7:7b:02:00:41:79:40:
8a:45:f8:6e:8f:98:96:69:46:de:80:38:48:d9:45:
3e:60:cf:65:05:0a:58:7a:f6:ca:fa:f1:4a:df:62:
aa:4f:a7:2d:27:e4:3a:6f:e6:3d:ed:fc:33:28:50:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:44:AC:7F:73:C5:43:D3:24:13:C1:11:1B:2F:45:66:46:0F:79
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c9:eb:78:7a:fe:ad:91:a4:83:77:c8:7a:d8:51:b8:4f:b8:
5c:59:d3:8d:a8:e7:ba:a3:76:64:3d:09:e5:39:9d:23:15:81:
6b:c0:2d:73:2b:c6:12:2e:56:00:68:40:7d:30:de:db:91:a3:
9d:e1:29:00:46:b4:0b:8a:32:06:89:4e:ec:49:76:e8:65:19:
93:68:ba:11:92:c1:d0:ac:93:e4:09:8b:33:b3:62:c4:37:f7:
b1:7f:09:2b:b8:59:f2:e0:45:cf:b2:26:18:d3:1c:8a:f0:77:
5a:b6:ec:c0:75:67:17:92:29:61:de:2e:92:dd:dc:86:48:ec:
60:5e:b7:54:fe:d0:d4:0a:df:cd:0a:bf:e0:35:cf:f8:b2:4c:
09:01:be:43:1b:c6:ed:62:8b:eb:1d:97:e1:9e:43:2a:c7:59:
9b:4b:f1:11:bf:ce:36:60:eb:4a:30:44:0c:bc:61:2a:ba:db:
11:56:0b:9e:61:36:b8:e0:97:da:4c:21:0f:83:18:ce:82:3a:
ba:ee:48:7e:25:a8:e5:fe:d5:6d:42:f5:cc:9a:0d:8d:82:89:
38:50:c4:7b:5b:d6:a7:31:6e:c0:e9:45:47:48:6e:3f:e3:35:
16:76:d1:71:25:43:cc:21:f3:ac:c4:81:63:e4:fb:a9:3e:6c:
3c:af:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:47 2026 by rpki-client