Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: vInVVvNXV6w7YB17xSmuzge0IH+HWqvJ7yqD6O9NIIs=
Subject key identifier: 39:D5:22:D0:87:B1:0A:19:1F:C4:93:0D:19:CE:54:13:CA:B3:85:7D
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 019E1F113F9CE89A66F2DB8CC56B67CFFE63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 02:01:24 +0000
Manifest this update: Wed 13 May 2026 02:01:24 +0000
Manifest next update: Thu 14 May 2026 02:01:24 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: e1T78W7sqo+zk0c5Gl8Z3jKZoB18/UlyBAejZ8KS1GI=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:3f:9c:e8:9a:66:f2:db:8c:c5:6b:67:cf:fe:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: May 13 02:01:24 2026 GMT
Not After : May 14 02:01:24 2026 GMT
Subject: CN=39d522d087b10a191fc4930d19ce5413cab3857d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:19:07:ad:22:83:fe:9e:ac:55:ea:8d:d9:cc:
fd:db:5c:19:1e:46:ab:d7:f4:ad:ef:8f:9a:32:39:
52:40:8c:a7:9b:31:74:71:85:22:58:26:c8:4b:4e:
86:1f:0b:e0:87:69:21:a8:e7:e0:76:b0:66:26:07:
c0:77:de:da:f3:4f:e2:c7:27:7e:78:2b:43:7f:b7:
ef:cf:13:90:e1:f5:ab:f0:2e:bf:3d:0d:87:ab:e0:
47:2c:54:5b:8a:62:28:79:85:19:3e:b9:2f:b4:45:
c8:40:ea:f1:20:cc:ca:8f:c3:f1:9d:77:03:b0:32:
f0:93:ad:62:5a:5e:4e:b8:47:60:97:35:4a:a9:fa:
b6:00:91:30:58:c9:c0:d9:75:77:00:ba:80:29:e2:
09:ff:36:42:2e:03:41:60:6a:0b:59:8c:d1:c5:98:
db:06:3c:be:97:cb:4d:02:cf:55:38:51:62:fe:da:
4c:6e:30:fb:61:01:1f:5a:97:5a:fa:15:12:08:64:
ad:50:87:9d:aa:4e:9d:08:8a:41:be:b9:87:41:c6:
28:a2:85:f4:a9:d3:0d:fb:b6:4c:c5:7d:7b:75:4d:
3b:a0:01:cc:95:9d:2f:6d:33:6c:2a:0e:db:e6:f8:
3f:d8:3a:66:74:59:71:a1:09:9c:af:21:19:fd:e9:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D5:22:D0:87:B1:0A:19:1F:C4:93:0D:19:CE:54:13:CA:B3:85:7D
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:15:d1:ab:0a:76:f7:84:c4:2b:2c:12:d4:30:60:e6:bd:d8:
4c:b4:fc:4f:8e:d6:9d:96:d5:5f:7c:19:03:06:36:44:bb:3d:
49:b3:c6:42:38:ce:f6:1f:8c:2e:5a:2e:d7:31:81:98:33:8b:
f1:fe:a0:dc:18:29:d5:11:69:59:90:e0:75:1b:f7:01:f0:6a:
59:e1:cc:42:7a:04:e6:d9:dc:c6:4c:ee:53:53:75:34:95:35:
00:d2:da:49:4f:de:68:72:a5:b5:8b:16:83:63:90:4e:e7:5f:
a7:09:de:03:71:66:4c:cc:13:6c:70:8d:37:0e:c3:a4:32:cf:
ff:05:4f:a7:73:a5:70:80:64:cc:8f:2e:c9:45:a2:e1:bd:96:
48:c0:cf:fc:fb:69:82:c4:76:f1:f6:3c:12:a6:fc:af:9c:bf:
9a:52:06:41:78:82:3a:29:38:31:8e:df:6d:b3:da:33:67:c2:
dd:c0:e2:36:c5:ba:33:3c:8d:27:70:13:c4:67:52:b4:3e:e6:
8b:f3:4b:d6:60:d8:07:ec:ed:90:6e:79:05:88:a3:42:41:75:
5a:04:26:97:00:10:31:86:f7:51:1f:86:c3:8e:21:8c:bb:a4:
b5:5e:a9:2a:20:c7:db:68:72:00:73:12:19:17:79:93:7b:6a:
56:00:d3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:13 2026 by rpki-client