Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File: s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier: Kv0WOnHrh1FBbuyRZoqMA3QYIArEMJg4iBBB357i1rQ=
Subject key identifier: 5A:0B:F4:15:00:D0:5F:85:3C:F7:B1:83:44:FE:F8:97:2F:EC:B4:93
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer: /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial: 019E1CEB592312A101E94BBB910527B88B67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number: 191A
Signing time: Tue 12 May 2026 16:00:46 +0000
Manifest this update: Tue 12 May 2026 16:00:46 +0000
Manifest next update: Wed 13 May 2026 16:00:46 +0000
Files and hashes: 1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: FwOC2umH/kACGnqxEiIyPHBE2fYqTLjnT5xrCZMJgKg=)
4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:59:23:12:a1:01:e9:4b:bb:91:05:27:b8:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Validity
Not Before: May 12 16:00:46 2026 GMT
Not After : May 13 16:00:46 2026 GMT
Subject: CN=5a0bf41500d05f853cf7b18344fef8972fecb493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:ac:e1:3e:e6:cb:0f:ab:a5:d1:a0:a2:a3:
1e:d7:47:e5:24:9d:62:10:15:3d:ae:20:6a:b2:37:
b4:e8:68:b6:6c:56:1a:0b:7c:b6:6e:9f:73:65:d7:
a5:c7:f9:54:4e:bb:72:ba:15:a8:d7:89:83:da:53:
6e:3f:13:c9:51:57:48:03:82:36:2d:6e:7f:79:ec:
7c:56:38:81:34:68:05:4e:39:96:4e:5a:85:fa:42:
a9:5e:29:f9:8f:dd:37:2c:b2:92:88:dd:d2:e9:3f:
dd:c7:d2:87:5c:d9:58:34:57:af:4c:d6:07:da:30:
c6:5d:f1:a9:48:39:9e:68:72:f0:f6:40:33:cc:5f:
9e:0b:50:81:b8:a8:a7:4a:91:0e:12:fd:b3:79:ba:
a6:7d:cf:0e:34:b2:b2:80:0b:87:33:f7:ea:ad:86:
ff:db:21:b9:20:ba:e6:e2:e7:d4:08:99:01:68:51:
a6:51:79:6c:62:51:29:5b:2c:30:1f:e6:d2:4c:c5:
48:dd:e6:20:15:58:a8:18:c9:65:c8:6d:76:5c:75:
9a:fa:a2:3e:e7:56:a8:e5:9b:ce:69:cb:e4:18:8e:
85:7c:03:8e:9d:e7:c1:ab:6a:3f:70:d2:74:c0:e0:
f9:c1:6b:fe:36:b7:bb:6d:62:9a:7b:63:ef:07:5a:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0B:F4:15:00:D0:5F:85:3C:F7:B1:83:44:FE:F8:97:2F:EC:B4:93
X509v3 Authority Key Identifier:
keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:e9:a5:aa:e1:9d:95:1f:3c:8e:3a:31:b3:fe:41:ad:47:
3c:75:57:95:94:2e:00:b7:e0:61:79:9d:ac:42:cd:da:36:49:
0d:ca:d5:ec:fd:c8:1f:95:41:31:49:a7:63:d6:e2:e8:d8:01:
9f:a9:b5:ba:9b:ee:e9:dd:22:09:88:ae:f8:8a:47:6f:62:86:
86:58:d0:7f:a1:1c:2f:25:aa:3f:bb:7a:d8:ac:a3:56:18:ca:
e6:fc:1f:8f:4d:f1:ff:f6:8f:49:19:28:bc:14:ae:d9:34:13:
db:e4:c4:9c:ac:6e:fc:96:b0:b1:34:cb:23:0e:38:3b:93:f4:
e4:0c:46:6a:b6:ae:7b:53:c3:a9:42:77:46:ce:03:9a:a7:48:
d8:c5:84:1f:ab:a6:32:36:a5:9d:62:e3:0f:ec:da:63:8e:c0:
db:f0:a3:24:37:b7:b5:55:c4:d2:d0:4a:54:14:e5:7d:97:97:
db:67:69:a9:45:c9:e9:67:65:73:62:66:06:ee:26:09:e6:8f:
91:4d:35:40:24:86:80:7d:7b:f3:e1:3d:e8:5a:3b:2b:98:2f:
54:0a:34:5a:10:61:54:4e:01:7e:2b:0f:48:d9:56:6f:b5:3f:
c2:48:dd:2e:85:ba:e8:6e:2e:da:95:ca:20:90:08:f1:8f:bf:
3e:9b:fd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:14 2026 by rpki-client