Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
File: _INSXRQvv0uUs9FpRFNlxm3f3f0.mft (raw, json)
Hash identifier: daHhfw4emy0ODqYODxyG6GnOEXv88/8MQ8Aaqj4bW8A=
Subject key identifier: CB:BF:84:96:99:CF:B8:67:82:AD:79:A3:DB:0D:05:B3:3D:CD:EB:2B
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 019E1FB586A77DDEC488D03278E2B1F79191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
Manifest number: 0EB6
Signing time: Wed 13 May 2026 05:00:50 +0000
Manifest this update: Wed 13 May 2026 05:00:50 +0000
Manifest next update: Thu 14 May 2026 05:00:50 +0000
Files and hashes: 1: OL5rrlXEFbAHEW_QdLIMCi4ecYs.roa (hash: T+xEBt9Lq4aYkhbQVM/xBwICTcb1SM1e4Bt2/nU6Ejk=)
2: S-InCTEVIu9QziCJ2n1NkT5BoKA.roa (hash: xzCaGYolBOI0OvoZsN0FNOCdfRTLrPslHVZ2GGqD0wY=)
3: _INSXRQvv0uUs9FpRFNlxm3f3f0.crl (hash: 2fhZiQ1w9m9dz3NS+JubL9dKk8n8DlaUd4GUrJu8Evo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:86:a7:7d:de:c4:88:d0:32:78:e2:b1:f7:91:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: May 13 05:00:50 2026 GMT
Not After : May 14 05:00:50 2026 GMT
Subject: CN=cbbf849699cfb86782ad79a3db0d05b33dcdeb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:00:86:5e:26:c5:91:90:a1:87:5f:aa:e2:82:
6d:4f:ca:dd:53:69:80:96:d0:97:04:0d:88:1d:ee:
ff:80:a2:37:c2:d9:98:e0:73:63:b6:2b:15:1d:06:
cf:22:73:aa:cb:3f:74:01:99:e1:43:01:f3:bb:af:
b6:bc:24:5f:84:f4:21:6a:14:31:6a:5d:f3:33:96:
bb:65:51:aa:9d:4a:e7:44:c3:13:d0:c8:0a:b0:fa:
05:db:c2:ba:c6:a9:6b:bc:bd:62:62:63:56:4f:a3:
3a:6f:6a:6d:27:fe:2e:4f:48:18:f8:ca:ac:20:6d:
d9:6d:45:16:5b:4f:82:8d:23:03:d7:8b:90:c2:d3:
9d:5f:b3:36:05:e9:e3:08:9e:9a:79:eb:01:4f:1e:
31:4a:a8:2b:93:48:d2:53:bd:df:71:8b:a0:a1:80:
58:2c:5b:a0:14:d4:b5:86:06:a9:44:0f:b9:8f:11:
08:00:b0:e9:b2:b5:35:06:0b:ff:ad:d8:66:7d:13:
24:94:a9:ee:b4:5d:23:e5:4e:f6:a4:0d:17:11:ed:
aa:24:3d:5f:b9:15:b3:1a:10:9e:de:48:4c:95:e6:
69:60:cc:e7:20:5f:76:b3:a0:84:2a:1a:2b:93:82:
db:3d:82:8a:b4:a9:2f:01:76:a0:7f:ff:55:ef:57:
43:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BF:84:96:99:CF:B8:67:82:AD:79:A3:DB:0D:05:B3:3D:CD:EB:2B
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:36:94:78:43:29:ed:79:1f:aa:b7:2e:1a:f9:f1:4c:fc:84:
fd:ec:78:8a:72:47:1c:c0:a9:df:81:8d:2d:42:97:aa:ef:37:
1b:04:de:5c:a5:60:0e:2f:c0:02:41:17:4c:f9:09:a7:4e:9d:
da:8f:45:10:69:27:f1:e1:fa:37:2c:4d:8e:c8:d1:69:32:a6:
9a:db:38:a5:d7:be:29:28:8f:08:d4:be:39:48:a6:b7:89:b9:
f9:98:bd:11:a6:a1:92:3e:da:1b:2a:ba:fb:e7:b2:14:16:c0:
64:82:9e:57:76:3d:7f:5f:a2:bb:21:5c:5a:e1:d8:96:dd:be:
b8:08:60:dc:14:2c:9e:e4:cb:6e:96:74:af:8c:e1:54:d9:5f:
12:a5:bd:66:c2:1d:6c:02:50:3b:41:48:92:ce:44:32:c0:d2:
86:8b:59:17:2a:25:9c:1e:e4:a3:1d:b0:58:9c:ae:fa:91:e9:
fc:ba:17:97:dd:00:e6:2e:f8:6e:e7:d7:60:02:ca:43:83:c2:
ff:df:ea:2f:c8:b3:78:ad:71:87:7d:fc:7e:5d:a1:30:84:83:
b4:d5:8f:06:ea:b6:45:ee:6d:45:3b:10:93:03:2c:89:29:49:
05:97:19:78:7b:f3:6d:c4:24:73:6a:2e:32:b7:5d:ff:de:9a:
fc:5a:43:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:13 2026 by rpki-client