Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File: I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier: dXOkvhorBlJ9gUPUFtW6oxroyFo+QkQx3SwXzUgbENY=
Subject key identifier: 81:AA:55:42:4A:91:5D:F3:88:CD:7E:F7:AB:DA:80:43:1B:2B:07:0B
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer: /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial: 019E1E6C4803ED8DD352A6C9BB0163AAEFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number: 134F
Signing time: Tue 12 May 2026 23:01:13 +0000
Manifest this update: Tue 12 May 2026 23:01:13 +0000
Manifest next update: Wed 13 May 2026 23:01:13 +0000
Files and hashes: 1: 1RriZf_G6a5fiIgqSsiVHC2xloA.roa (hash: qktLxOpEQif1HcKz+YuiexbELL1xls3mW6RuMkPJWuA=)
2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: nuWe+qOdeZsWe4lM+nP8D93J/OwFBIoz5AqFYzOkwNI=)
3: wYpHa59YPrwp7w7D2dTnVQglgA8.roa (hash: BD7Ds/9U/dBV0/NTSSvHr9U29EXY5C+d+r87UR7HX3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:48:03:ed:8d:d3:52:a6:c9:bb:01:63:aa:ef:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Validity
Not Before: May 12 23:01:13 2026 GMT
Not After : May 13 23:01:13 2026 GMT
Subject: CN=81aa55424a915df388cd7ef7abda80431b2b070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:dd:e0:68:60:b1:9b:bd:0f:b4:7d:a1:3e:
a8:0b:85:5d:31:0d:62:81:74:bc:8f:e2:ee:83:d4:
02:a4:a7:4b:dc:00:7a:39:3b:38:7b:2d:95:1d:0c:
23:dc:aa:f5:2d:89:03:b7:ba:6c:48:e6:b7:4e:26:
f9:fc:5a:26:fc:06:3f:28:ca:1f:38:2f:9b:23:c1:
0e:b6:e2:4e:75:07:c5:63:0d:6a:c2:ee:57:7d:b2:
46:49:96:e3:6f:df:c6:82:b5:4d:1c:ca:1b:98:74:
5d:cd:57:8d:05:c3:72:2d:7e:c1:9f:5a:f9:87:ad:
c5:b1:18:ed:20:85:d4:d7:45:59:8b:ab:50:8a:6f:
ca:87:81:b0:98:e7:7f:ac:8c:8d:4d:98:a7:06:39:
c1:dc:c9:23:0e:fd:03:92:63:1c:59:53:df:b0:d6:
d6:69:42:7c:7b:de:3d:54:e7:8a:a5:b8:58:69:27:
52:db:34:d7:4f:ab:98:11:a3:03:57:f1:a1:47:d1:
6f:9a:3b:ef:8a:1c:aa:c7:28:ea:43:a9:93:5a:9f:
2d:f4:41:f9:f7:d9:11:0e:46:2a:02:50:c3:2d:fe:
01:96:6a:78:8d:01:6b:58:f7:f6:ab:e3:f4:1f:bf:
75:1d:bb:bf:23:4d:9c:7a:4e:a1:ea:64:e1:ec:b0:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:55:42:4A:91:5D:F3:88:CD:7E:F7:AB:DA:80:43:1B:2B:07:0B
X509v3 Authority Key Identifier:
keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c4:00:29:d9:45:62:9f:cf:d9:e5:21:fd:13:a7:e9:83:73:
8a:f4:65:17:dd:cd:bb:34:ad:3b:a1:2c:f0:de:9b:53:fd:20:
d7:3f:eb:bb:c4:5b:b2:df:27:2b:b1:61:8a:13:65:21:39:5b:
75:91:33:7d:76:d2:54:a7:3c:ea:94:d2:3e:21:5b:fe:5d:91:
58:1a:7d:02:43:3f:5a:af:f4:28:e6:ff:e1:81:ba:a3:49:c9:
25:32:f3:e4:39:e7:61:69:c7:80:24:00:3d:c3:87:62:9b:e9:
e8:7a:34:6f:6d:f6:ad:29:ee:74:13:95:d7:f4:0b:6d:47:14:
35:4d:5d:d4:15:b8:27:86:16:c4:1f:97:74:af:77:1c:1b:a3:
b2:fc:a5:9e:68:bf:b3:3f:8d:30:03:c0:39:de:d4:03:d9:f4:
4f:ed:35:d7:79:87:2f:da:a9:c4:11:de:3e:46:a5:4f:f3:e0:
20:9b:24:3e:6f:03:41:05:dc:98:d3:8f:8e:ca:f6:17:e8:16:
c9:76:31:4d:29:17:9f:95:72:df:e9:13:ca:de:5b:4d:f3:56:
d0:40:54:5a:90:12:3e:5b:45:db:06:31:fb:10:20:02:a9:cf:
ad:17:74:75:a5:c0:44:a6:44:1f:3b:b9:06:7f:19:5c:fc:2f:
e1:fe:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:55 2026 by rpki-client