Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier: Vu4xbCIqIHbiahtOOi8jQwpTLABDY4up5k4VC72YS4E=
Subject key identifier: 8E:D7:3F:8A:C9:9B:AB:2F:DB:C7:B0:5A:A4:EC:83:59:09:72:64:27
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 019E1F47FDA31E3EB1BDCF60A1C3AF0208EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number: 114C
Signing time: Wed 13 May 2026 03:01:12 +0000
Manifest this update: Wed 13 May 2026 03:01:12 +0000
Manifest next update: Thu 14 May 2026 03:01:12 +0000
Files and hashes: 1: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (hash: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I=)
2: JEeGJlJzDZv7X5-PTEcchFlbpzM.roa (hash: 4jWqLUKBrgm7XTmYBRKBp3tw/IpbzhhcNF/Uo33+quQ=)
3: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (hash: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM=)
4: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (hash: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks=)
5: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: a7kZ8N0tA5Qd0RPNkHVrApbakD5D7RCSjzrOQoD/9h8=)
6: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (hash: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc=)
7: oGf_1Gi6p9BnTcB2h845ELw18yE.roa (hash: vZEx0hhPga5gHLIccOXjBsLg2I31ryX+jChcgCG39FM=)
8: zxlNoz3rzQ3-dAnhy_jjif6hTJc.roa (hash: J8qFyCD+0ZUlnXfOJKaFx3pu76rmJ2d6yo1rgVv/jyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:fd:a3:1e:3e:b1:bd:cf:60:a1:c3:af:02:08:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: May 13 03:01:12 2026 GMT
Not After : May 14 03:01:12 2026 GMT
Subject: CN=8ed73f8ac99bab2fdbc7b05aa4ec835909726427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:37:47:48:4a:27:d3:72:d0:5a:93:8e:e9:
fb:7d:45:f1:f3:6f:ef:40:bd:15:b7:91:58:07:93:
8e:79:8f:42:a0:46:51:82:ac:b7:fa:d7:34:0b:52:
5c:ce:07:f9:dd:09:d6:ea:75:14:02:55:39:f8:c5:
99:eb:52:d2:d8:99:05:07:b2:f8:31:e5:f0:18:6f:
c6:37:3c:45:56:2d:11:73:fa:f3:e2:3c:c1:3b:b9:
85:de:2c:2e:03:45:c0:f8:f3:22:83:d6:e8:60:15:
19:ea:a3:2b:13:9d:cb:2c:63:ff:7d:07:be:59:85:
ce:b9:b5:ee:48:52:cf:bc:f3:e5:2c:30:31:08:02:
6e:88:c0:1a:96:cf:2d:48:e7:dc:dc:ce:af:da:78:
32:e5:a2:01:c8:f9:fd:54:a7:a3:7f:21:4c:13:f8:
32:4c:e1:0d:69:28:5b:d1:1a:2f:0f:d9:32:b9:96:
b7:b9:eb:e9:9a:66:cc:47:ef:1e:28:7a:ce:b2:b0:
12:b3:5d:34:8d:43:2c:81:16:4d:11:97:06:b8:b4:
fe:9c:8c:9c:98:6e:07:d3:d4:68:40:96:a9:85:44:
0e:db:cd:fb:db:30:43:f3:0c:1e:57:d2:32:e2:7a:
3d:10:b0:7f:f5:71:ef:cf:59:fa:d9:09:db:cb:c8:
33:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D7:3F:8A:C9:9B:AB:2F:DB:C7:B0:5A:A4:EC:83:59:09:72:64:27
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4c:94:6f:f6:b7:d8:81:11:a8:ca:4f:31:02:41:2e:83:19:
73:27:2c:b2:af:20:1c:85:01:fc:4a:35:2b:5f:73:c2:f3:38:
0e:ec:b8:3b:d8:be:f7:98:a8:d0:6b:67:ce:a3:52:81:be:23:
0e:e1:1a:b5:f6:4e:98:31:be:1f:f3:c6:48:fc:73:ab:3e:98:
f7:b8:64:51:61:c6:4d:15:e9:63:e5:45:e0:3a:66:43:db:72:
ab:f2:7d:9a:b6:c9:69:64:0c:46:cb:f7:f8:5b:4b:60:9e:ca:
64:9d:a7:3e:1d:d1:26:4c:89:2c:38:88:63:7a:f4:4a:88:54:
a9:72:34:3f:0c:9d:48:41:95:70:5d:46:24:52:86:c3:fd:01:
a4:2d:45:34:57:b5:df:36:9e:fd:d1:02:6e:5c:d7:ab:a9:0a:
89:df:74:a2:56:80:c3:a6:d8:13:45:cc:f8:35:5b:f5:c6:f1:
9d:4f:3e:a3:94:1b:98:dc:83:6b:79:fe:8f:42:57:b8:6f:6a:
b0:75:57:88:a3:01:12:df:10:b0:58:41:72:ea:a0:0c:1a:bc:
a2:02:5e:45:91:05:9d:0c:58:a5:3c:a6:4c:fb:f6:68:1c:bc:
d2:bc:fe:50:22:35:8e:e1:d9:7b:3c:aa:c4:ee:6e:ca:94:8f:
f1:4d:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:21 2026 by rpki-client