Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
File: I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft (raw, json)
Hash identifier: OJO80FeqcdaQidgCUWrwi3KHGCNGUuf/jC2OKIfN5Tw=
Subject key identifier: 40:70:92:C9:85:21:0A:F5:9A:D5:BB:E7:C1:1B:87:DE:30:87:FA:5C
Authority key identifier: 23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
Certificate issuer: /CN=238857660dc7fa60846f765b94cb69576255adb6
Certificate serial: 019E1FEC64308F4DB6F546D247F9582EC3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 06:00:46 +0000
Manifest this update: Wed 13 May 2026 06:00:46 +0000
Manifest next update: Thu 14 May 2026 06:00:46 +0000
Files and hashes: 1: I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl (hash: DByDJAptY/XTdOcmEicHDefATaF4382oADKCsRV7eVY=)
2: hc6aXK62WoI8LVWQXzH6eABWVV4.roa (hash: VubjcNf1CkPqEAAAxHPS2Rw1XmdvlVTyVEabkLIibOU=)
3: j_dlNBpw9nrxphVhyhTmP13d1VY.roa (hash: b2h18Cq9Or7dr/VEm7f4JBC1yManVn4ntGbbM1+L8w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:64:30:8f:4d:b6:f5:46:d2:47:f9:58:2e:c3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=238857660dc7fa60846f765b94cb69576255adb6
Validity
Not Before: May 13 06:00:46 2026 GMT
Not After : May 14 06:00:46 2026 GMT
Subject: CN=407092c985210af59ad5bbe7c11b87de3087fa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5c:05:c3:fd:38:30:45:ee:9f:c0:d4:1b:7d:
17:16:23:4b:33:f5:bf:af:a2:85:05:99:6d:1b:e0:
bc:1c:f5:fe:af:c6:5b:fd:fb:4d:30:79:4d:13:03:
40:a6:4e:53:ff:e0:00:29:0f:12:cc:0b:f0:c1:30:
50:6c:b1:5a:3c:08:67:97:06:a7:95:12:41:30:89:
68:6f:36:8a:c4:ca:56:a8:6a:e3:4f:74:6a:03:f6:
06:0b:c9:dc:0c:a7:b0:fc:a8:19:4e:e7:74:bc:74:
d5:55:4a:f0:85:81:3a:09:68:68:05:7e:20:09:2b:
53:43:57:9b:bf:ed:69:fc:ca:2d:8f:53:11:b9:f2:
dc:ee:b4:e9:15:a3:cb:e4:f1:70:dc:25:9f:9c:61:
95:47:5b:24:52:2f:14:76:dd:9e:2d:2c:02:84:59:
3a:24:d8:ba:3f:79:f9:78:d7:72:53:35:30:d6:87:
60:22:14:41:14:b4:e6:bc:c9:dd:eb:6a:69:91:35:
25:17:f0:9d:03:4d:59:0d:9b:c5:e3:58:4b:bb:97:
f9:2c:3c:e8:03:2f:78:35:f3:17:a7:61:71:ee:80:
2b:b7:17:79:3a:72:74:f1:9f:47:cd:1d:0c:06:e9:
53:b6:0f:f8:a1:4b:48:17:77:e1:2a:95:71:7c:14:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:70:92:C9:85:21:0A:F5:9A:D5:BB:E7:C1:1B:87:DE:30:87:FA:5C
X509v3 Authority Key Identifier:
keyid:23:88:57:66:0D:C7:FA:60:84:6F:76:5B:94:CB:69:57:62:55:AD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4hXZg3H-mCEb3ZblMtpV2JVrbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/94927f-7e08-4f21-9bba-0f876abd1e30/1/I4hXZg3H-mCEb3ZblMtpV2JVrbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:69:ca:5a:66:27:45:7d:29:87:6b:3a:96:ba:b7:35:09:
52:32:53:0b:0a:08:23:8b:3e:4b:06:88:35:40:af:10:99:eb:
b3:e6:9e:f2:9f:6a:41:34:a9:df:e7:76:ba:cb:52:ae:f7:aa:
e0:d8:1e:13:c2:dc:a4:ed:9f:6a:a5:83:09:90:b0:89:d9:f3:
bb:21:6a:14:84:43:88:16:c0:a7:9f:97:32:e2:11:90:0b:35:
c4:7f:70:1f:7e:53:a2:7d:ba:2c:37:10:90:3b:e0:15:a6:fd:
ee:83:da:50:34:f4:6b:bf:47:59:59:44:e9:1a:fc:0a:27:f7:
02:90:06:43:4f:a7:2f:30:84:24:11:c9:40:0d:ca:5a:55:ee:
d8:a6:98:c9:4a:12:15:fb:48:f0:95:65:60:75:cb:e0:8c:51:
1b:3c:80:bd:32:c5:16:54:08:f1:84:8a:40:c5:3a:55:5b:5e:
7c:ee:40:ac:5e:11:56:f5:0e:c3:c1:6c:62:d4:ad:53:a9:3e:
4d:a6:51:9b:32:f4:6e:bd:1d:c6:81:3a:d2:37:0f:1f:23:df:
85:63:b2:14:23:b3:11:7b:7d:5a:d3:21:81:cf:40:56:96:17:
bb:0e:9f:64:c9:d5:69:56:ff:4f:9e:a2:77:16:0c:a2:9b:66:
f6:99:cf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:19 2026 by rpki-client