Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: HUSUdp9jI8bcYz154cxcNxvtV/KyPpR5CbM2innLssw=
Subject key identifier: A7:4C:CB:4E:D4:23:08:5F:05:42:4B:CC:70:D9:60:81:43:F5:53:DF
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019E1C0F80FC62BF4BA4556BB6C080571A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 116D
Signing time: Tue 12 May 2026 12:00:38 +0000
Manifest this update: Tue 12 May 2026 12:00:38 +0000
Manifest next update: Wed 13 May 2026 12:00:38 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: 74p2kwMRu+XnKNf67b/GuXZwARYuqOiUFEvH6CuNRQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:80:fc:62:bf:4b:a4:55:6b:b6:c0:80:57:1a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: May 12 12:00:38 2026 GMT
Not After : May 13 12:00:38 2026 GMT
Subject: CN=a74ccb4ed423085f05424bcc70d9608143f553df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:51:92:1a:c2:ab:8a:bc:ea:dd:a9:45:e7:88:
30:03:20:ab:f0:f0:04:a8:5f:ab:78:9d:0f:9b:62:
05:20:ff:90:c4:53:ca:5c:2c:3a:be:81:15:df:8f:
b0:df:b4:e0:10:0c:e0:3d:77:40:3f:62:51:89:ef:
da:1f:49:e9:02:1f:87:a0:ec:bf:5c:71:02:f6:8e:
5c:11:34:32:d8:6d:f6:67:8d:ee:70:0e:99:f4:25:
c4:88:4e:e9:43:61:b2:2a:79:d9:ad:52:fe:53:bc:
89:f3:11:47:83:6d:43:64:25:f5:20:cd:4f:47:6f:
8c:81:3e:68:02:74:1f:04:56:a2:49:f4:7d:37:3a:
ca:f5:56:d2:75:d3:e3:31:8b:f7:2d:47:8a:93:52:
65:01:1f:9f:da:63:38:02:83:2a:f4:d5:0b:7f:30:
b7:85:cb:95:1c:5f:06:c2:59:ce:1c:92:f2:ab:12:
8e:ff:e5:66:46:41:ad:af:34:ee:63:55:a1:77:a8:
5c:1c:47:ef:66:14:54:a2:44:86:81:a7:ac:b0:68:
a2:93:da:e0:34:89:36:9d:d4:54:e7:a7:12:8d:1c:
10:6a:58:c5:91:c7:27:01:ad:cb:79:4b:5b:4b:2d:
b4:82:b5:a2:e7:d3:26:3a:ec:04:ff:64:8f:c0:d7:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4C:CB:4E:D4:23:08:5F:05:42:4B:CC:70:D9:60:81:43:F5:53:DF
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:71:d7:d1:3a:1b:cc:a5:78:db:d5:0f:99:1f:0a:f7:9a:33:
65:08:b3:fc:e2:ad:af:ea:25:08:1d:0b:8b:e4:de:f1:93:7e:
f5:7a:31:4e:6a:a5:b9:0e:11:66:cf:e2:71:d0:1d:b3:f6:c2:
97:60:10:d6:34:51:e6:9c:c7:43:ba:1e:6b:2c:a9:a6:27:09:
99:42:95:0a:24:b2:66:8c:ff:b9:ed:8b:ab:89:33:5d:43:9f:
67:e5:8a:b0:49:ae:64:f9:85:fe:16:06:67:c1:65:55:4d:41:
b4:f3:46:c0:af:81:b3:1d:2c:3a:98:c4:47:31:e0:92:61:bf:
45:ed:95:0a:d4:e1:79:d8:21:25:2e:c8:fb:5c:25:74:ae:57:
0d:77:26:b6:d9:8a:50:0b:4c:95:c1:6f:78:cc:33:7b:93:50:
17:f5:e6:45:56:06:af:31:e8:17:36:fc:2d:18:3e:ce:ad:2d:
06:29:68:46:62:9a:1d:f0:14:8e:69:73:1b:2c:7e:ac:95:a9:
3d:77:23:4a:12:3f:ad:23:41:f1:ef:02:ae:af:fc:56:31:f1:
bf:0a:65:af:4e:fe:e5:42:3e:f9:f6:3f:13:bd:ed:d4:40:16:
da:f5:34:68:6f:39:5a:4c:e1:67:a1:c7:0c:04:d8:f7:85:21:
20:81:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:01 2026 by rpki-client