Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: fhgajV8x3b1rOYYkH+g7E/cS5FNlNHEO40egesXh7Pk=
Subject key identifier: 26:A4:53:38:F6:E3:2E:C5:34:F1:7C:E2:06:F7:71:F2:A2:62:B7:56
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 019E1FEC7D09B022C6DCF82DC682CFFF44B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 1898
Signing time: Wed 13 May 2026 06:00:52 +0000
Manifest this update: Wed 13 May 2026 06:00:52 +0000
Manifest next update: Thu 14 May 2026 06:00:52 +0000
Files and hashes: 1: RI1PUJj0Q_MD3P8uweukuXuYhlU.roa (hash: Udb4Yel6QV6x+EojTVD0SPU2vkANJh/DkSOzlaEFuOQ=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: QnKVsqrirnIgIWVcPOig9zVTZNgoTeQsRJSaVAN++uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:7d:09:b0:22:c6:dc:f8:2d:c6:82:cf:ff:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: May 13 06:00:52 2026 GMT
Not After : May 14 06:00:52 2026 GMT
Subject: CN=26a45338f6e32ec534f17ce206f771f2a262b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:f7:ef:f2:88:46:24:30:b2:4c:ab:51:1e:
ae:12:7c:d7:a4:28:5d:01:bd:b4:6d:7b:69:5d:72:
bb:d1:46:76:23:9c:b9:4e:cf:2e:31:e9:b0:5a:6a:
e5:2e:01:a8:fd:09:c8:4d:bb:93:27:62:6e:76:15:
aa:c8:20:b8:bd:de:53:e5:ff:cb:c3:67:48:56:b9:
cf:ab:34:df:1e:26:7d:67:3b:47:1b:d4:05:8b:25:
be:6f:f0:14:ee:83:24:e4:0c:2e:5b:06:a6:fd:b5:
80:42:27:5b:5f:bb:79:84:2a:a9:79:3f:8d:69:82:
24:e9:c0:cf:42:6e:d0:d7:41:53:c7:4a:d6:32:90:
16:ab:d2:07:82:eb:00:98:49:fc:32:44:a8:4f:34:
6d:10:a4:46:a1:1c:47:f4:5c:d4:01:b6:03:28:45:
83:9f:60:db:81:70:de:fd:98:26:d7:7c:c9:d9:7f:
f2:34:4c:36:61:14:e9:25:7a:0b:cd:0d:f9:eb:30:
03:a6:b3:7d:6a:38:c7:40:c3:be:e8:e5:1c:19:cf:
65:9b:ad:8a:f9:b3:74:fc:d8:52:2d:8c:5a:5e:c8:
40:fa:91:82:4e:86:93:72:0c:ad:1b:3e:15:d1:f2:
a0:f2:70:07:ca:e4:08:1a:3e:fc:a6:1b:67:85:27:
dc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A4:53:38:F6:E3:2E:C5:34:F1:7C:E2:06:F7:71:F2:A2:62:B7:56
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:03:09:47:f7:d9:84:97:ac:31:c1:63:4c:e2:35:f4:d2:60:
02:98:d7:61:75:6c:21:1f:7d:4a:6c:eb:5c:b1:56:14:da:29:
aa:95:ba:e4:f6:3c:94:48:06:2e:a4:cf:5b:cf:e2:4f:00:49:
35:e1:ff:31:7a:68:fb:5c:ef:fe:ad:70:30:5c:b4:19:a3:1e:
50:c3:8f:c6:d4:78:4d:7d:ee:4f:20:65:fa:10:93:c2:4e:5d:
f0:a2:c3:3a:26:57:e5:2a:da:a0:54:bf:bc:e6:d6:43:56:77:
58:00:15:f7:19:ea:11:68:1c:22:db:74:d5:8b:25:1f:49:3b:
b0:b8:e1:19:f8:43:d5:70:dc:9d:a2:15:ef:80:97:4e:b6:ed:
e7:1f:1e:2f:44:35:15:8f:71:1b:ee:28:25:a6:c0:29:f4:90:
d1:df:e4:73:92:02:9e:0d:11:e6:f6:2b:cd:04:7d:a8:61:3b:
a0:51:38:44:06:44:4f:a5:e7:d0:76:e6:69:ae:ff:87:ac:d6:
b8:e2:d2:03:ab:3f:45:80:11:9f:30:05:3c:ef:a3:8c:40:92:
34:32:93:ab:9c:d1:db:f6:a8:20:e2:8d:2f:9e:ad:79:30:37:
52:28:0e:4c:fb:71:93:05:8e:ba:99:68:8b:bc:c9:39:41:0c:
71:9b:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:01:14 2026 by rpki-client