Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: hphA5bLOXsGTA4cvVcAYS4ljNiSxPUsbn36hKF+W5lM=
Subject key identifier: 7D:5F:A1:34:91:E0:6C:0D:1D:B4:0E:CE:8D:F0:43:9D:7D:10:65:70
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 019E1EA314C6B8429D490119965ECCC84DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 16CB
Signing time: Wed 13 May 2026 00:01:04 +0000
Manifest this update: Wed 13 May 2026 00:01:04 +0000
Manifest next update: Thu 14 May 2026 00:01:04 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: iUyK1OOA1eeRlShKul1FdKDsVE7KiNJNICn8JB99EnE=)
2: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (hash: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:14:c6:b8:42:9d:49:01:19:96:5e:cc:c8:4d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: May 13 00:01:04 2026 GMT
Not After : May 14 00:01:04 2026 GMT
Subject: CN=7d5fa13491e06c0d1db40ece8df0439d7d106570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:89:95:c7:a1:e8:3a:48:5b:85:ae:17:5f:
a7:2a:ba:e3:19:fc:79:ee:dd:9d:db:3a:cc:1d:28:
44:e0:04:7e:12:be:72:d9:2d:95:03:07:80:66:19:
45:94:df:7d:c7:4f:6a:9e:d0:89:3c:09:d9:d0:ef:
18:92:fc:04:22:ed:ce:ef:4a:1c:eb:a6:91:b3:34:
38:50:c7:a6:59:12:9e:16:6d:62:aa:0f:ca:f0:b5:
f9:1a:59:fa:c9:e5:ff:04:bd:17:04:a3:f1:28:cf:
f4:b6:1d:2b:5a:ba:78:21:6d:56:1a:1b:fe:39:37:
3e:83:7d:06:d5:15:a6:9f:55:8a:5a:87:c2:e1:b2:
6a:b2:42:94:1e:de:df:98:a4:49:6f:a2:90:96:02:
27:fa:67:3a:0e:69:31:dc:63:ce:1d:e8:98:44:38:
4e:43:15:26:9e:b6:2b:df:b5:7b:b7:82:c2:d8:17:
66:60:16:47:a8:ed:b5:53:42:f9:90:74:45:7e:39:
b3:60:fc:cc:16:84:58:f5:00:c6:a3:3c:c5:10:47:
fa:b9:58:33:b2:6c:e2:71:fc:79:a0:34:4c:4b:1e:
c3:91:50:0a:88:1c:5b:17:cf:a9:94:24:7b:7b:b0:
40:46:fd:0f:1c:3b:06:41:8b:31:d9:7a:87:0d:80:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:A1:34:91:E0:6C:0D:1D:B4:0E:CE:8D:F0:43:9D:7D:10:65:70
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:61:2a:6d:f0:01:f2:4d:92:7f:d8:a0:6f:ba:48:47:74:d2:
df:b8:bb:4b:4f:f9:52:9e:d2:ac:05:d4:17:da:2f:a7:e8:3f:
9f:d0:a8:b5:40:9e:83:db:97:43:12:d8:f2:39:13:da:9f:40:
86:c3:29:38:b3:73:1c:71:b6:9c:bc:43:a9:d8:28:23:84:f7:
70:e9:0b:5e:6d:46:02:d0:23:3e:66:1e:13:76:a3:ab:66:51:
6b:12:75:95:f7:cf:54:7e:68:c3:ad:db:0d:e5:a3:a8:c9:d2:
72:88:dc:6d:73:b6:82:f6:b0:f0:ce:0d:35:7d:e8:a9:f4:4e:
66:aa:79:54:14:3d:74:dc:b6:2b:5f:d1:a5:60:96:49:75:5b:
08:3c:7c:4a:fc:7c:e9:61:d0:07:0a:09:18:d9:08:23:71:4a:
4e:da:ff:d3:f4:cb:ed:c0:45:c9:f4:33:4e:f6:d6:e8:17:6c:
74:4b:f8:be:c3:c6:1b:7a:c1:98:be:3c:5a:8b:51:de:e6:7b:
1b:9e:22:61:65:8c:50:aa:34:a0:7a:9c:62:c3:03:e0:97:98:
12:61:34:fa:83:65:68:f1:6f:45:d6:96:87:3e:ee:81:bc:90:
de:3b:64:cf:d6:68:89:82:10:46:f2:b4:59:fd:4d:2e:6a:f5:
41:c9:4c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:19 2026 by rpki-client