Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
File: 0mIv3sj638pY51dcKfEOc653VxU.mft (raw, json)
Hash identifier: 4OU2t/4w8jIfZ9dGN1mXbKoPubNgsaWpTwdtyc34mq8=
Subject key identifier: 3E:49:37:47:A9:51:69:D9:AE:4A:BB:CE:EA:C3:7C:3F:7C:97:B5:FA
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 019E1BD89A9ED7C4E7FBD4274E049742AFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
Manifest number: 1910
Signing time: Tue 12 May 2026 11:00:40 +0000
Manifest this update: Tue 12 May 2026 11:00:40 +0000
Manifest next update: Wed 13 May 2026 11:00:40 +0000
Files and hashes: 1: 0mIv3sj638pY51dcKfEOc653VxU.crl (hash: jGuevIgt0E/FOpCzWLt2OFigRJRv3iML2XAt4BnRzSA=)
2: 48XlQQk7zLyObitRBott5O0TEZc.roa (hash: 0iveZkv2QdOfuGHu5qZcDP2k1JFUITllYLIt0mS1hLw=)
3: JXkrwkvLZXqvLpWo6GIqE9djHow.roa (hash: pvxp7edBiYpg9R4WGN/sBmyvZQpHSdt5YdDqPGYyoLU=)
4: Jb48XUzprHRQSa7zDmEwkm8bHB8.roa (hash: UeQ11+qXjfNfzNk6IX1DTTmTHuYUChCRYnGGfuhQmW8=)
5: M4MI8IskioFX_GL9An1slOnzOXk.roa (hash: +6v5Ea5o3E61ySsVOGY9En91TXxPv4H1t9U0YnMleQI=)
6: cFUEIWQu7qe64nrzejsq3hzv3fw.roa (hash: Y5DG1bnBMtUo7Z76/zjvm84VdL7RwBfBAjPP2M8PD/c=)
7: hkFrsNhiq0TnoVB5lv6ukrym9kU.roa (hash: Lpo1dIydhWwC2a6odejRAjq7zYy9EyLkYPWh1THs0As=)
8: svxysR0fryYPn1ckppavIVkehYU.roa (hash: 8MNRRTqy3XlQo1M7+GUmMiXWjPTZpOon/19BgW0t8Jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:9a:9e:d7:c4:e7:fb:d4:27:4e:04:97:42:af:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: May 12 11:00:40 2026 GMT
Not After : May 13 11:00:40 2026 GMT
Subject: CN=3e493747a95169d9ae4abbceeac37c3f7c97b5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:ac:93:c7:7a:3d:88:ef:ec:f8:41:5a:8f:
ae:5e:f1:61:c5:f8:66:2f:28:63:c2:55:fd:ca:39:
ea:ac:b2:16:9b:ce:78:f6:d7:a8:fb:7b:82:a1:2f:
bd:40:e2:cc:03:41:bc:77:d9:02:58:36:b4:3b:08:
02:12:ea:10:76:50:85:9e:7f:db:61:28:db:db:c3:
cc:c9:c3:ce:b3:58:57:c8:a3:f9:20:eb:b1:fc:7e:
5f:c5:d3:77:82:51:9d:b8:f0:cd:c1:c9:70:54:cf:
ae:96:77:03:24:d4:57:c6:c9:4a:19:83:98:cc:dc:
c7:dc:95:02:e9:17:57:9b:82:9b:4b:bb:48:80:dd:
b4:9c:6c:db:81:ce:a8:b2:71:83:d6:32:8f:2a:69:
72:7e:44:8f:59:26:ec:96:96:24:31:34:6d:55:99:
1e:24:6e:fa:02:f3:ed:a1:11:0e:d4:34:5b:76:da:
72:f2:26:6f:33:36:bf:21:36:2d:c3:57:20:b3:b3:
ce:1d:00:38:7d:cf:18:c2:a9:13:a6:2c:7f:7b:d7:
8a:04:ec:67:20:3c:5e:11:f9:44:44:b8:a3:6c:30:
c4:b9:83:04:97:6a:31:45:94:15:96:df:12:e3:ea:
b5:34:06:02:cb:cc:2d:95:11:47:b8:bd:be:57:e7:
cb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:49:37:47:A9:51:69:D9:AE:4A:BB:CE:EA:C3:7C:3F:7C:97:B5:FA
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b0:e6:16:33:7c:9a:80:b1:01:ac:a6:6b:a7:ba:89:b4:c3:
ba:25:34:22:3a:71:ee:0f:d5:a2:75:f5:f9:96:1f:03:87:1d:
c9:40:86:92:a0:c5:34:49:22:b9:bd:f2:76:33:c3:ce:b9:36:
f5:c6:5e:3b:f5:7d:90:f3:64:d3:2e:4f:44:a4:4a:60:cb:81:
c0:af:e1:74:7c:e3:ea:3e:03:70:2c:89:76:ca:be:d3:28:20:
4e:44:ea:93:de:21:4d:80:f0:6c:0d:13:de:a2:45:e6:b8:2c:
d4:fd:27:1e:f2:0e:75:75:21:fb:6f:68:76:69:f4:40:c9:62:
31:c6:9a:67:23:19:5c:73:50:a7:43:50:11:ce:18:21:ec:4d:
86:6a:2f:d6:b7:15:76:72:a8:b9:81:2e:6e:fb:81:a3:58:b5:
79:20:6d:8c:42:cc:9a:dc:73:fe:bc:b5:ae:76:1d:33:5f:5f:
3b:67:92:6e:92:04:a4:36:83:02:3d:3d:00:2f:30:63:05:a1:
62:2f:37:71:18:a8:4d:b6:14:09:63:91:94:29:50:44:f6:36:
b9:6f:7c:cd:a6:9c:a3:ce:b6:d9:37:05:80:ec:e7:ef:33:74:
c1:aa:08:5b:04:f3:3a:38:57:33:7a:c5:99:ca:a1:47:2c:54:
21:9e:a3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:22 2026 by rpki-client