Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
File: lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft (raw, json)
Hash identifier: xRggBcey2xd8MppKJmaUnoiy5NVdyu/jTaex55iPx1Y=
Subject key identifier: 45:B1:B9:1F:D3:CA:BB:17:BB:D4:1A:98:60:A8:CA:05:37:5B:83:BB
Authority key identifier: 94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
Certificate issuer: /CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Certificate serial: 019E1F47AEA67F4F6123B834721888DE326F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 03:00:51 +0000
Manifest this update: Wed 13 May 2026 03:00:51 +0000
Manifest next update: Thu 14 May 2026 03:00:51 +0000
Files and hashes: 1: ecQlKj5CIp8VLDI4rKO0OH9DeqI.roa (hash: iQJDM30z8fYynMrfjXIbza+TCD7vD5Lcd4NjgJS6pYQ=)
2: lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl (hash: WSYkp71OLecBuWcNZ2KZf//95D3Yl0ZqO4h/xfGBCnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ae:a6:7f:4f:61:23:b8:34:72:18:88:de:32:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948d45cfe3482b8f61dae000b007a467ecdd4ee6
Validity
Not Before: May 13 03:00:51 2026 GMT
Not After : May 14 03:00:51 2026 GMT
Subject: CN=45b1b91fd3cabb17bbd41a9860a8ca05375b83bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a9:3c:3f:06:cb:92:29:da:9b:0a:87:36:11:
f5:73:70:8e:eb:2f:7e:87:c0:1c:f2:ae:c8:2f:d1:
bb:fb:39:4f:f3:72:12:f3:06:58:3f:27:0f:57:7a:
ce:96:55:19:56:d5:08:3c:03:b7:e3:a4:39:fa:67:
32:1d:c8:36:1a:b6:cd:c0:a0:85:92:f5:01:55:ef:
4f:58:b0:38:38:ab:86:11:a6:48:98:15:4f:c2:3b:
c9:b8:54:25:37:72:7c:ae:1b:35:cd:ea:e3:cc:60:
65:cf:d7:47:d6:bf:17:c0:11:13:86:c5:23:c5:75:
8d:8b:fe:d7:83:f4:bd:d3:a9:f2:90:e7:da:53:fa:
ef:3a:27:dc:f4:b3:e7:68:71:f7:50:a3:fe:87:0a:
ea:94:7c:0f:38:39:df:1d:c6:76:ec:78:38:19:53:
3b:3c:8e:b9:6c:a8:a6:b2:b0:ca:fe:22:86:5b:dc:
d0:45:d5:0c:5b:08:f0:2b:f4:64:97:64:a0:76:d2:
f5:4f:72:7f:53:03:07:cb:9c:4f:ab:d9:b2:b0:ae:
2d:1b:8a:25:01:d0:74:aa:39:58:51:7b:a2:75:a3:
4b:65:31:19:ad:f8:d7:77:01:85:0d:b9:b6:38:ff:
b5:53:2c:54:d2:a1:c8:e5:db:85:46:59:d9:6e:02:
e3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:B9:1F:D3:CA:BB:17:BB:D4:1A:98:60:A8:CA:05:37:5B:83:BB
X509v3 Authority Key Identifier:
keyid:94:8D:45:CF:E3:48:2B:8F:61:DA:E0:00:B0:07:A4:67:EC:DD:4E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lI1Fz-NIK49h2uAAsAekZ-zdTuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f89b2e-53a3-4157-a960-42dafb4b51d2/1/lI1Fz-NIK49h2uAAsAekZ-zdTuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:64:4f:f4:96:d7:54:08:c0:d0:f3:8c:7f:28:65:df:fd:9c:
43:6c:31:52:5a:ff:47:9b:67:76:1c:ef:7a:57:2f:b7:d5:b9:
7b:c0:e3:a5:de:90:36:0e:ee:90:82:0a:81:c0:ce:46:21:bb:
a5:b3:bb:77:af:04:f9:6f:b4:58:60:5f:8d:94:b1:e1:10:36:
92:83:23:d2:7e:55:14:96:e4:7d:9e:1d:a6:70:be:62:22:a6:
88:de:3c:73:3a:67:dc:e1:4a:63:dc:56:47:77:71:f4:31:16:
68:3b:07:69:0e:fd:ba:07:8d:fd:fa:c0:90:a5:65:88:0c:84:
51:55:8c:e5:38:a2:65:b0:b7:3d:4e:0e:c3:89:de:2f:e0:fe:
16:c8:ca:74:33:28:30:7b:bb:ac:97:b0:42:50:42:2b:f3:5f:
9e:89:7f:d4:33:5d:de:4d:27:ef:4f:5e:0b:0a:01:2d:24:cf:
b0:88:8e:61:cf:2c:fc:2d:a2:b2:c8:43:48:c7:80:c9:60:7a:
f6:71:62:29:8f:42:b2:6e:10:bd:b5:34:12:fa:1c:5e:91:40:
05:61:d6:a6:8c:95:f1:72:40:f2:04:2f:56:59:a0:63:d5:bb:
30:96:0a:b4:41:d6:4a:c3:35:f8:f5:18:0e:09:90:3a:2d:75:
20:88:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:17:31 2026 by rpki-client