Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
File: cNvqB1PfCD5XgrufOAtdeZy3igY.mft (raw, json)
Hash identifier: IpkWy3hxmTDZqIshhPblc89uqTmq1fmkqduD/fCaeoE=
Subject key identifier: D9:E2:29:C7:5E:85:F5:14:DF:91:12:89:65:0C:36:E4:7E:D5:D1:BA
Authority key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Certificate issuer: /CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Certificate serial: 019E1CB489136F9EBCA08F49E885DC244F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 15:00:54 +0000
Manifest this update: Tue 12 May 2026 15:00:54 +0000
Manifest next update: Wed 13 May 2026 15:00:54 +0000
Files and hashes: 1: YeLaacDEqyOHodEKhBUtu92hvRw.roa (hash: Ji1cHzcmwBaizYoDGG5KY1yTxLM1jIXJ3gtR7NQt17s=)
2: cNvqB1PfCD5XgrufOAtdeZy3igY.crl (hash: s4vBLY0BbCq/JGdmMSZYVRJaUBu12L3GH+FwWXrS9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:89:13:6f:9e:bc:a0:8f:49:e8:85:dc:24:4f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Validity
Not Before: May 12 15:00:54 2026 GMT
Not After : May 13 15:00:54 2026 GMT
Subject: CN=d9e229c75e85f514df911289650c36e47ed5d1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c2:f1:bd:7b:65:c6:96:05:60:d5:08:5a:cc:
98:c9:0b:a9:b6:97:ad:56:ef:f2:af:3c:f4:54:30:
78:73:04:7d:8a:a4:28:c3:0a:22:5a:79:bb:e1:77:
bd:18:b2:f6:23:ee:9a:2f:f8:e5:db:1c:e4:10:99:
40:0a:2b:7f:40:06:b4:ed:91:0c:a9:97:97:65:ed:
73:24:8b:0c:34:81:a5:9d:19:2f:05:4c:94:18:e5:
32:08:fe:e7:19:a4:39:df:54:9f:52:25:59:23:dd:
3e:3d:56:90:c9:e3:71:82:d6:a9:ef:b5:06:00:39:
29:a9:fc:2a:b8:c6:93:b8:a6:01:2e:06:8a:8e:d3:
96:ae:2b:f9:ac:21:ee:a3:3a:45:92:ef:34:40:96:
c7:a3:69:ce:17:46:12:7e:04:de:6d:f1:0a:e2:18:
a5:3b:22:00:00:31:dc:d5:78:27:85:fd:c2:36:0e:
b0:a9:21:3a:93:be:b9:d2:27:c0:be:0b:f2:55:49:
9e:ae:d8:51:68:41:a7:64:90:d4:7f:95:8e:76:f8:
25:34:aa:87:96:06:ab:c5:20:bf:21:7c:bd:58:8b:
2a:97:a9:94:c2:be:ab:79:d4:1a:45:13:cf:e9:bf:
4a:8f:12:72:68:e2:dd:96:2d:fd:e7:51:a7:7e:69:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E2:29:C7:5E:85:F5:14:DF:91:12:89:65:0C:36:E4:7E:D5:D1:BA
X509v3 Authority Key Identifier:
keyid:70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a6:11:3f:7b:e0:dd:c8:21:9f:a1:19:a4:fb:71:7b:5e:cd:
b2:ce:d3:e0:89:1a:3a:28:d6:11:28:82:e3:8a:d6:a9:e0:65:
cd:35:81:07:8e:e3:f0:c2:9e:cd:cd:5a:a0:85:b1:7f:c6:66:
94:62:44:d5:51:3b:5b:e6:9b:10:3f:e7:cb:fa:cc:f8:13:6d:
9b:b7:c3:a3:2b:fd:b3:92:da:8f:6e:d3:b2:7e:16:ba:b8:84:
ed:ed:7f:59:ad:f5:ef:55:86:0f:07:24:18:71:df:d4:a5:79:
75:be:98:13:52:0e:29:7b:31:39:d0:dc:fb:4d:b8:a4:ac:49:
32:b5:b0:58:6a:8a:31:fa:15:84:61:06:d7:f5:c5:7c:35:4e:
74:ab:fe:79:fc:3f:cc:d2:d4:0e:05:e2:7a:42:a6:f4:6c:af:
27:c4:bd:80:54:36:af:b5:2f:6d:2d:5a:de:d9:4e:0a:7c:78:
30:1f:a2:7d:6a:77:d2:aa:56:e0:33:1b:5c:99:e2:a4:14:1a:
a2:56:26:85:fc:a1:8c:48:77:b3:58:6f:94:d6:0e:97:32:91:
4c:f2:9b:d0:a8:3c:47:b9:dc:3e:ae:b8:f9:01:1a:b9:43:f7:
46:89:40:bf:08:39:44:4d:c8:8a:3b:1e:f7:e2:d3:54:10:e0:
09:fe:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:40:23 2026 by rpki-client