Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json)
Hash identifier: E64SJ8tTOgAzaLGR7WKGRN6NfTTXOZf5OJakIzjde18=
Subject key identifier: 4D:86:D5:7D:FC:DC:A0:08:48:B5:B2:E8:40:6C:17:15:9E:BA:60:90
Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457
Certificate serial: 019E216DEC2EEC989DE1852B400F22A6033A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 13:01:52 +0000
Manifest this update: Wed 13 May 2026 13:01:52 +0000
Manifest next update: Thu 14 May 2026 13:01:52 +0000
Files and hashes: 1: 07lXNimrQBF3__ddGT3TZzLhskg.roa (hash: eoEGjhgMY6OcoxgLUe7rr3k+ew/IBEiDnKUPvz0TNYw=)
2: T3vBUADVziYVCPfMjFB5sh1dYd0.roa (hash: K9dDJUVzUK8TiZfC61uyK9tw2jY/KL9Z0G2brWNRTIY=)
3: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: T/POV3FvCFE1lVI0kYQGH3qyVfR3ew0zZrN4JFzdk/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:ec:2e:ec:98:9d:e1:85:2b:40:0f:22:a6:03:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457
Validity
Not Before: May 13 13:01:52 2026 GMT
Not After : May 14 13:01:52 2026 GMT
Subject: CN=4d86d57dfcdca00848b5b2e8406c17159eba6090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:20:77:76:c4:3e:9a:75:ec:0e:6f:b2:17:d2:
89:22:ec:d1:46:0a:f8:79:d5:4a:98:90:d2:18:a2:
b9:c1:8f:f7:9f:a7:6a:38:02:88:bf:4e:18:ed:36:
52:47:b6:81:79:32:11:32:75:b8:1e:54:02:42:88:
ae:5d:9f:bd:07:60:a4:f4:2c:19:91:a2:cb:fa:b4:
44:0c:58:a0:c2:cb:44:b5:31:da:68:78:cb:d9:b6:
57:6d:66:2b:8c:34:94:f8:04:eb:e9:2d:c4:d6:8d:
5f:7c:f6:85:10:8a:06:5a:83:87:a8:61:56:de:7d:
46:1c:b3:05:6e:be:7f:a4:21:14:59:bc:7e:cd:44:
cb:30:df:6b:b1:42:83:3f:19:9e:03:b9:ac:0c:41:
b6:aa:c7:11:cc:70:09:b6:cb:fc:e6:e4:f2:ba:aa:
0e:c1:82:1d:4c:aa:b0:6b:0a:ab:13:fd:58:48:50:
07:65:a3:3a:db:21:8b:65:52:dc:01:25:5b:98:82:
ee:d1:78:fd:ec:89:22:6a:56:95:4c:6d:cf:fc:32:
9a:8c:72:c9:7d:45:95:9f:79:99:46:d3:8a:e1:cf:
09:a4:ea:20:a6:8e:dc:49:dd:72:a5:e8:a2:7f:6b:
e7:b0:ed:57:84:25:16:e2:1e:9a:18:43:3d:68:b0:
b9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:D5:7D:FC:DC:A0:08:48:B5:B2:E8:40:6C:17:15:9E:BA:60:90
X509v3 Authority Key Identifier:
keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:86:ec:0e:73:b3:31:bc:87:89:02:4a:10:fd:75:a1:7e:dc:
7b:04:2b:39:cc:8b:a8:8f:fc:7f:e6:da:6e:24:ae:e7:ea:63:
d7:fa:f7:89:a5:22:e4:e6:a5:24:26:72:50:2b:b1:e7:f8:6d:
ef:33:2f:2b:4a:d1:71:4d:63:05:48:ae:19:73:e1:cd:93:54:
20:72:1a:ca:c9:ef:54:7b:33:58:89:20:e4:0d:3c:1c:76:58:
ea:02:dc:81:eb:90:8e:08:c6:00:96:96:9d:b1:d6:5b:02:bb:
84:4b:7a:93:bd:3e:af:de:c0:46:66:0c:e9:90:c2:a5:c3:4c:
14:ec:98:c5:bf:51:f5:fb:1a:fd:0f:4f:f2:bb:3b:eb:c7:08:
3b:23:9b:75:ef:ca:c4:30:cc:e8:9c:4e:64:09:c5:6d:96:e6:
f1:13:16:9b:d4:43:37:19:a7:5f:4b:78:90:c2:e9:7b:3a:50:
5b:6d:22:f9:04:6c:73:f8:14:17:d9:1d:c5:c3:cf:41:d0:5d:
89:cd:5b:fd:8b:dd:cf:0b:59:cc:9b:1d:d2:f7:ea:65:cf:c5:
8d:1b:9b:29:f7:91:11:4c:97:7a:84:02:b9:81:f9:38:7a:fd:
c0:45:a8:01:cb:d3:94:7a:94:70:64:19:1b:4f:45:1c:d2:91:
bd:e5:73:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:00:30 2026 by rpki-client