Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: Hf26QLf/sZ+lWFfN71DlLazHroNvmVtZUsvBw+erUUE=
Subject key identifier: 5B:08:C6:9D:4E:B0:C5:2D:05:00:AA:A2:B2:15:AD:66:30:2F:5F:46
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019E20FEEF2220C1CAE0C17E0A47FC4BF0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 11:00:38 +0000
Manifest this update: Wed 13 May 2026 11:00:38 +0000
Manifest next update: Thu 14 May 2026 11:00:38 +0000
Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: EYBDTrOdIVFwQNDKGzQhfHMXQ7+T3w2mJueXSfm/C0s=)
2: gFOjbWB7I_w-vrenN-Bunfa99k4.roa (hash: jwgceh/3ITVpquNuTB6w5OIjCduknP3STqxn7Za9hOo=)
3: yDOczuJC_WLHV4Ya3yqTtThAzjc.roa (hash: rUsqBRYV5w6oIt/F9qarEoMetvvYx4/9g1ZMzy8MePc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:fe:ef:22:20:c1:ca:e0:c1:7e:0a:47:fc:4b:f0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: May 13 11:00:38 2026 GMT
Not After : May 14 11:00:38 2026 GMT
Subject: CN=5b08c69d4eb0c52d0500aaa2b215ad66302f5f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:28:61:2e:fb:c0:3e:bd:3a:ca:37:02:1a:
9b:33:d2:80:d8:77:14:84:bc:b0:ae:44:5a:bc:64:
20:97:16:70:e1:7f:fa:75:32:78:80:8b:51:14:ff:
d0:b3:66:15:94:60:f6:ee:89:f1:e4:8a:23:ca:96:
c2:ae:ff:d7:2c:73:8e:b0:1b:84:d4:eb:d8:a1:0e:
78:9c:71:08:37:f7:b2:ff:c1:81:51:e1:2b:f7:1f:
2f:c6:b1:d4:b5:b7:16:f1:6e:e3:14:11:39:1c:02:
c6:90:7e:19:90:9b:af:b3:6e:22:35:c1:69:d9:3d:
35:b6:39:da:e0:f8:08:06:ed:3d:9a:e2:6a:e4:6a:
2a:4b:1f:de:d7:82:de:b1:6c:42:e0:c1:6e:47:40:
bd:86:dd:4c:15:95:ab:60:51:b1:da:98:f6:57:a0:
20:3b:29:fc:da:e9:f3:cb:b6:83:da:91:de:94:3a:
25:77:e1:8e:ee:e2:0e:99:dc:b4:38:41:d2:5f:6b:
db:53:51:9a:84:31:5e:b6:5b:0b:0d:8c:d0:a8:a8:
01:3d:2e:cd:a1:b5:5f:e8:4c:98:78:1a:11:6a:56:
8d:fe:69:00:2a:a5:fd:a8:f1:c4:67:75:e0:e0:42:
c2:d5:73:1e:8a:aa:c8:64:a5:48:13:94:1c:a0:78:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:C6:9D:4E:B0:C5:2D:05:00:AA:A2:B2:15:AD:66:30:2F:5F:46
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:05:94:ef:16:cb:8b:65:ef:46:47:d3:a7:21:b8:dc:11:dc:
bd:02:2e:d2:ee:2a:d0:7c:8e:76:a7:60:33:64:ff:5a:53:73:
44:ff:97:6e:69:d8:32:e8:c1:8f:f5:65:dc:69:3d:95:30:d2:
83:01:fc:d7:6a:be:59:e4:1b:1b:d8:c6:ad:e8:ba:dc:8a:5c:
04:ce:5e:f7:c0:7f:92:58:c2:4e:52:1d:15:37:3f:f4:e6:24:
c0:73:fc:47:26:a4:e9:ea:f4:c2:6a:63:97:85:f0:43:54:ec:
01:4d:f9:66:c9:26:97:19:84:b3:87:69:b7:39:76:4a:34:0b:
26:6b:8d:8a:56:8a:94:8e:43:01:a7:5c:1f:34:e1:d3:33:f2:
e5:5a:c6:a9:a5:bb:f9:05:63:c6:99:97:91:22:f7:7e:c3:f5:
14:76:21:8c:d0:a2:b3:24:54:85:a2:4e:c3:97:4d:97:68:f7:
d9:9e:06:27:f3:25:a1:24:69:ba:0f:3e:ff:c8:eb:1b:4a:cb:
23:b5:4f:1c:33:b0:d3:8b:68:c6:b3:5d:c5:ef:60:2b:80:e5:
55:78:d7:9f:e0:57:a3:db:aa:ba:0e:91:2c:01:7e:33:6f:e5:
64:da:3d:17:89:f3:82:b3:5a:62:f0:44:ca:56:57:e2:8b:3c:
4e:c8:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:09:02 2026 by rpki-client