Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: QB8gqXK9FtmDaE0AHwyxosYh3NQVE4oMcO1mnrQi4kc=
Subject key identifier: AD:28:42:BC:DA:62:58:CC:83:4B:61:2D:9C:B8:4F:E4:E3:C2:DA:A9
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019E1DFDF5ABB5040354C6DCED9F64328965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 21:00:43 +0000
Manifest this update: Tue 12 May 2026 21:00:43 +0000
Manifest next update: Wed 13 May 2026 21:00:43 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: FFUmuL7/qjmmMNKhVYEa2jRqI6pM9mQ2UGo54ArFdzY=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f5:ab:b5:04:03:54:c6:dc:ed:9f:64:32:89:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: May 12 21:00:43 2026 GMT
Not After : May 13 21:00:43 2026 GMT
Subject: CN=ad2842bcda6258cc834b612d9cb84fe4e3c2daa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6c:0a:0a:3d:32:32:dd:e8:fb:73:72:8c:37:
0f:82:00:de:cd:6b:d7:cc:9a:31:a0:6c:f6:eb:c7:
2f:ee:57:fb:11:3e:19:a7:c7:1f:ed:82:4a:02:44:
44:ff:7b:b9:ed:21:60:85:78:16:e5:fc:96:0b:f6:
3d:14:26:32:fd:26:61:6d:fc:eb:6f:b4:6d:01:4b:
bd:07:8b:dc:73:52:e4:98:64:29:09:64:63:f9:0b:
f2:5f:c9:2b:80:35:58:6b:84:cc:a1:b9:68:35:e3:
57:de:ca:7d:f2:e7:3a:9e:3d:fd:35:6c:07:87:f1:
20:09:f6:5a:3f:13:2e:76:1b:0f:58:1b:c2:b8:91:
45:4f:9b:9f:9e:5d:6b:05:77:db:0e:06:a9:a9:2f:
0a:2d:60:77:6f:82:a1:22:0e:bc:80:bf:ad:f3:65:
58:db:6d:de:f8:4b:7b:72:4c:60:ce:e0:d1:31:7e:
93:55:52:2d:09:a9:5c:61:20:e0:04:29:7a:5d:04:
16:3b:06:5b:97:9d:6c:52:65:a5:b8:08:70:1d:0b:
14:25:e3:0a:6a:cc:89:1b:51:4c:b8:8d:98:6f:5d:
16:88:71:15:43:c6:f1:bf:87:40:74:66:df:8f:52:
93:2b:52:15:bf:0a:7d:49:f9:c6:41:f0:02:7f:df:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:42:BC:DA:62:58:CC:83:4B:61:2D:9C:B8:4F:E4:E3:C2:DA:A9
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:9a:03:fb:83:ed:c8:bc:7c:87:aa:b8:1a:62:32:bb:1c:fd:
b2:ff:57:51:b2:0d:1a:be:b2:31:ca:2b:cf:18:b4:c9:fd:e5:
8f:68:a1:6b:3b:3e:a0:2e:2c:17:f7:af:77:52:3b:3e:6e:2f:
60:e8:91:30:cc:eb:c9:0b:9d:f4:ab:9c:e4:39:38:d0:ee:1b:
93:19:eb:c4:e4:52:6b:6c:be:ed:de:c2:e7:47:49:f2:de:11:
03:a2:91:f2:da:99:fc:f8:fe:2a:ad:fa:fe:d1:e6:2a:83:e8:
59:f9:0a:40:b5:29:a3:c0:0d:c7:62:ee:6d:d9:c7:f3:e4:23:
0d:06:c4:cb:e1:ce:59:66:be:7e:c0:d6:c3:3c:26:15:c2:0c:
c3:70:13:d1:16:45:85:87:49:f2:8f:b9:6f:bf:69:1b:d1:68:
e9:be:9d:c9:af:b1:8b:9c:7b:45:9f:0d:43:d5:36:46:43:51:
53:a4:eb:62:9b:32:40:ca:55:0b:54:b0:8a:40:55:d6:bc:f2:
ed:84:9f:58:db:1f:96:65:c3:0a:19:1e:da:2d:f2:83:c5:a1:
62:37:44:ff:9a:4b:95:3d:c7:b6:df:42:91:48:f9:b3:17:54:
db:6f:34:a9:79:53:d2:78:35:1d:52:bc:20:15:61:37:2a:9b:
1e:30:a6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:49 2026 by rpki-client