Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: TMT5WWWhhA5GbWuj/StXPcrHKzS3CsLaIebSW9Vex0Y=
Subject key identifier: 56:91:30:50:7D:17:E7:2C:CB:4A:F7:8F:4C:45:4F:7D:98:44:F0:B8
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 019E1F4826AD250AA7FDDBDB45022CBE67BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 03:01:22 +0000
Manifest this update: Wed 13 May 2026 03:01:22 +0000
Manifest next update: Thu 14 May 2026 03:01:22 +0000
Files and hashes: 1: 8Ae2bQe1uFjZZo0F1tnzO2BTYdM.roa (hash: 5M5PrQ6jblQ4c8/6XrFcJktYLAM5nwbgehPaHFmA10E=)
2: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: jsJCe6gtzPYKni5UjbP++zG//UuQn4W3nSmIKhvWKgU=)
3: wHRMABRpMiyEtjejskYT70NitKw.roa (hash: uaVh9YOmPZr43rpaKkgfhS6YH1UUI05Pvf24DvQSZqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:26:ad:25:0a:a7:fd:db:db:45:02:2c:be:67:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: May 13 03:01:22 2026 GMT
Not After : May 14 03:01:22 2026 GMT
Subject: CN=569130507d17e72ccb4af78f4c454f7d9844f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:99:e0:31:19:5d:e6:02:cf:16:2d:47:53:
71:b2:2e:c1:15:f4:2b:67:d2:85:bf:5e:92:38:c6:
17:e4:07:cc:8a:61:13:51:5f:7f:f0:93:90:f8:cc:
ee:5b:50:9c:4f:0b:84:a8:4d:ce:9d:54:55:ea:74:
32:65:c6:af:2c:42:12:54:e6:94:47:46:fe:96:92:
75:ae:fd:4d:fb:c0:61:25:81:96:69:62:52:cc:79:
a2:40:45:8a:6a:81:f1:9e:f0:43:aa:fd:b8:47:17:
b7:90:cb:d2:cf:74:a2:43:69:f3:d8:4d:f0:b9:ac:
98:55:ec:39:7d:b4:f2:eb:61:09:4a:6c:28:6b:d7:
b2:bd:ec:49:b8:b4:7d:85:3e:db:63:c2:3c:8d:d4:
e8:93:3e:4c:68:e3:09:ec:d5:62:4b:ca:81:3e:dd:
00:60:22:e2:99:2d:ec:b1:c8:d0:16:a4:09:1c:bd:
72:a2:af:2b:5d:5e:2b:d4:2b:ad:72:40:5d:b8:72:
be:6a:73:a2:56:02:b5:64:f0:be:09:6e:d3:cc:65:
b5:96:38:6a:f1:51:d0:20:ae:96:55:07:92:cb:fd:
15:19:6a:83:14:56:7a:41:ea:40:f8:98:d2:77:4a:
05:6c:8f:b6:fe:cb:ba:ca:6b:bd:3e:6c:54:b4:b6:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:91:30:50:7D:17:E7:2C:CB:4A:F7:8F:4C:45:4F:7D:98:44:F0:B8
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d4:d2:5a:d4:7f:d2:c1:f1:81:dc:13:26:5d:cc:a4:70:f2:
85:f3:42:ac:ed:70:b2:34:e2:34:5e:16:27:d6:87:54:ac:92:
e5:52:6d:53:e1:88:82:90:4b:7b:a9:b9:45:02:96:31:7a:bf:
ee:a9:b4:b1:41:5e:6d:fa:84:12:ee:37:9f:30:e9:54:f9:20:
16:31:b7:5c:13:48:8f:34:e1:eb:dc:6f:d1:be:c8:1e:01:bc:
dc:9b:20:c6:7e:b2:2c:5a:27:7f:71:4c:99:d8:20:98:2b:bf:
52:62:30:38:9e:a7:02:11:fe:21:25:ce:d5:dc:db:e2:dd:19:
ca:d5:55:f3:cc:b4:4b:3d:65:0a:be:40:6e:ab:85:d4:4f:26:
6c:1d:8f:71:3f:b9:b5:c0:c1:1c:9f:84:dc:eb:74:23:fe:4b:
71:1a:2a:be:95:ed:5a:be:ea:14:4a:4d:ac:36:37:2a:9c:03:
38:50:b5:6b:46:99:c7:f1:1b:4b:5e:42:5b:61:72:4f:8a:5b:
8a:fe:9d:3c:fd:f7:73:57:33:b9:0f:96:de:b6:4b:b9:90:4d:
31:8a:64:57:85:3c:b4:b2:57:0d:dd:8d:21:72:80:87:fb:ea:
77:7a:52:4a:18:ae:86:88:6c:d0:8d:32:7e:7a:85:d2:83:13:
76:b2:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:28:47 2026 by rpki-client