Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: 7adWtwDqvZ30ZSyAU+sdUjOWHfENmQATiE8sh4cwD9g=
Subject key identifier: 3B:5D:C6:B5:3B:D3:1A:19:A3:C0:E3:FB:0F:AC:53:17:F6:12:E6:A2
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 019E20FF142C1CF0E44B46B43AF83938F6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 11:00:48 +0000
Manifest this update: Wed 13 May 2026 11:00:48 +0000
Manifest next update: Thu 14 May 2026 11:00:48 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: 6+8ZI8dADuYPkwfnKgG356wmk1/4exOsUYQVHNMFV90=)
2: ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa (hash: F0+H6qDixU/03vN/UlEJN6xAxFU7ewgK1yqAztFgQS4=)
3: fSmn7fdIQV-BhV-TX9ikmCr8pz0.roa (hash: aPwivrJczNCFzMJcf0LFQLamq3ppdLsG7e6V+tPBFE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:14:2c:1c:f0:e4:4b:46:b4:3a:f8:39:38:f6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: May 13 11:00:48 2026 GMT
Not After : May 14 11:00:48 2026 GMT
Subject: CN=3b5dc6b53bd31a19a3c0e3fb0fac5317f612e6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:73:70:a2:8a:99:a6:62:12:3f:91:e1:f8:43:
8c:50:63:4b:9d:10:0e:1a:22:6a:21:40:27:5c:d7:
6d:e5:df:a4:c9:ac:aa:5e:8d:a9:43:28:74:5c:06:
5b:52:d3:02:0d:41:42:8d:be:46:d2:c5:1d:4a:01:
e2:b2:cb:d5:f1:e3:5f:0d:3a:cd:12:01:e3:70:3f:
b4:dd:3a:55:ff:e9:0e:8d:f5:73:17:24:39:3a:f1:
dd:b9:42:c2:b7:66:bc:01:98:b9:69:aa:37:aa:02:
8f:f2:b9:58:2a:40:df:4b:67:94:a6:26:d6:19:83:
a7:0e:54:af:2a:7d:e6:4a:17:b5:8b:7b:b6:22:70:
44:95:26:69:f8:f2:ec:64:00:66:60:79:35:ea:44:
0b:14:63:3e:7d:88:07:bd:3d:34:26:ca:f6:4a:e8:
db:0c:d3:4f:44:c7:b1:b3:a5:d9:5e:31:39:18:9b:
d4:84:90:27:f7:1e:a7:f9:fb:87:a8:7e:37:92:42:
fc:02:cb:3e:d6:da:4a:69:1d:f9:11:13:f1:a7:ae:
31:3d:96:8c:c9:01:41:e0:ab:e2:2a:78:bd:1c:64:
75:c5:a3:43:c6:d4:37:98:8e:3d:e0:62:76:79:25:
b4:b9:5a:3c:72:b8:cf:3a:99:56:31:69:a0:ae:29:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5D:C6:B5:3B:D3:1A:19:A3:C0:E3:FB:0F:AC:53:17:F6:12:E6:A2
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b7:0d:d9:4b:f9:fd:6b:b3:e2:35:20:79:f2:f7:e8:0e:05:
8b:64:41:b9:1f:ad:34:75:29:d7:0b:e2:2a:bd:4b:df:78:c9:
bf:f1:57:5f:57:71:4a:25:76:78:a2:3e:8c:77:10:89:aa:82:
83:3a:c3:ff:e5:1d:06:e3:60:56:37:cb:2d:e8:98:72:67:c6:
5e:c7:d1:18:d0:f0:1c:a2:4e:68:eb:9a:35:76:cb:2e:ec:39:
2b:9b:ff:63:a8:70:8d:7b:b5:b9:37:c0:42:f5:69:8f:6a:e0:
20:d8:7d:7b:00:8b:f9:5f:f2:5e:83:bf:47:df:6f:e3:b4:fc:
87:87:b0:81:9b:d0:59:41:a7:a3:f9:45:ec:5d:86:14:7c:22:
5b:28:39:69:b4:5c:60:0c:58:b5:5a:4b:f9:79:f9:7e:1f:7e:
87:db:c1:d3:fb:1b:50:1a:f6:9d:e7:8a:fd:f6:61:df:e4:7a:
4f:1f:4a:57:8e:58:8b:af:97:91:0f:75:54:89:3f:ab:7d:90:
d4:62:3c:4f:2c:36:11:ac:20:e3:91:9c:90:1a:db:9d:01:3b:
cc:b7:f0:a1:44:7a:85:7f:a9:06:a1:bb:f3:af:8e:0b:80:c8:
35:cd:21:bb:c9:1c:34:e4:fd:e4:2b:df:3e:31:40:63:4f:c2:
4e:a7:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:38 2026 by rpki-client