Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: Mn1cbs6vmqLJicdBVlIEh3l4a5+J6OSyPZEGSK5wF2Y=
Subject key identifier: 9C:21:18:CA:13:43:CE:07:3B:42:93:37:33:9E:38:32:6A:E2:29:38
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019E1FB5E4D5030F7BC1423BE0D3D1340218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 05:01:14 +0000
Manifest this update: Wed 13 May 2026 05:01:14 +0000
Manifest next update: Thu 14 May 2026 05:01:14 +0000
Files and hashes: 1: MBje2Kaa62IBDG3vLdQ11jbu-BY.roa (hash: gjY1RtH2j/aQua697MsSq0fqSF6zUpGLdhWZ8DhMdzU=)
2: Ww9xlTTYnd90caDgEeVmTVfm-BE.roa (hash: 7JRO1QHni0n7t5LFba599MfSp8my+dFKoYt3fvY4Y8A=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: 1mVTSq670qUzUB+lx/ctyjtJT/f0uArf+TrKYn5ZDE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:e4:d5:03:0f:7b:c1:42:3b:e0:d3:d1:34:02:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: May 13 05:01:14 2026 GMT
Not After : May 14 05:01:14 2026 GMT
Subject: CN=9c2118ca1343ce073b429337339e38326ae22938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:ca:0c:69:51:33:ce:0a:e9:af:6c:08:45:
66:e1:73:c7:b4:24:95:14:46:3f:00:ce:2c:29:2f:
38:19:1e:4f:19:33:b9:80:20:da:48:47:94:a8:65:
b7:5b:ae:20:5d:90:bb:97:90:bf:23:1a:84:53:5e:
03:49:ff:a5:2c:8a:4f:77:6a:90:28:95:03:e4:9f:
14:f2:58:26:7a:c8:d5:d5:49:7e:54:36:79:7a:61:
ec:6f:c2:09:d2:17:6b:99:5b:b1:13:2f:9c:db:81:
6e:74:33:0c:b7:9f:bb:85:2f:ad:2a:b7:f7:4d:ef:
d1:38:36:8e:0b:96:53:60:f4:76:20:be:df:71:fa:
91:5b:da:26:bf:de:37:75:f2:19:ba:df:70:3c:30:
f5:d4:b8:4a:5b:03:0c:9b:e4:1f:71:c7:cf:53:48:
47:78:6a:f6:5e:f1:06:a9:f8:19:59:bb:c9:77:f4:
26:d8:03:2d:9d:1e:07:25:c7:6d:73:06:fd:e4:29:
e1:3c:e4:61:ab:f9:86:87:46:38:21:52:de:e3:8e:
c5:f9:8f:ce:0d:56:3b:fe:59:0b:fb:5b:8b:84:31:
ce:c3:26:48:57:eb:c8:3b:b1:cf:ad:6a:aa:49:ae:
c9:77:49:30:4d:e5:c3:ca:92:70:0f:9b:de:8b:4a:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:21:18:CA:13:43:CE:07:3B:42:93:37:33:9E:38:32:6A:E2:29:38
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:16:66:ce:c7:43:27:a2:40:a5:8c:97:23:fd:78:e4:ea:16:
19:4f:fe:e0:e7:23:5d:f2:db:4c:98:3e:07:c1:00:4b:1d:e6:
cf:53:9b:75:8f:e4:1b:2f:c5:ea:c0:f2:44:b3:89:fd:ef:95:
72:b7:ab:ab:52:15:45:87:e4:45:bd:b5:13:43:0f:96:3e:48:
5b:bb:84:35:cb:30:cb:ac:c2:d3:a1:23:28:7c:78:de:24:f3:
c3:b4:38:db:93:0c:61:56:27:d3:26:cf:b9:85:a1:f4:a8:df:
70:ed:03:53:d0:0a:93:70:4f:e2:7e:16:82:95:68:c5:1a:59:
c2:85:9c:42:c6:d3:87:c6:cd:0a:63:99:18:54:0c:e5:d6:f3:
15:b5:ee:b8:76:c7:a8:28:83:08:8c:8c:37:7d:d2:c1:20:3e:
6e:be:90:35:92:41:70:22:de:58:69:e0:aa:9e:42:34:93:21:
d7:8c:2f:45:dd:c9:1b:73:07:5e:d9:7f:57:c9:59:28:3d:4f:
03:0e:93:83:57:05:e4:48:f6:e5:5b:dc:65:13:3f:58:3a:35:
31:e9:04:ea:a6:88:a3:ab:98:bb:68:c0:33:94:c1:2b:b7:08:
64:cd:5f:84:40:53:25:1b:04:18:c4:78:57:7b:11:b7:d0:48:
8d:18:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:46:29 2026 by rpki-client