Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: 5VtRQK2YrdM+PDTn8QRXzIpTv1YHX3ju+UCKroj/tpw=
Subject key identifier: D1:A6:32:50:F3:0A:93:9A:68:CA:A7:50:EE:6B:9F:1C:47:80:72:57
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 019E1FB5EC85C5588759C36C796AD920B056
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 05:01:16 +0000
Manifest this update: Wed 13 May 2026 05:01:16 +0000
Manifest next update: Thu 14 May 2026 05:01:16 +0000
Files and hashes: 1: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (hash: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: YQVmYxo4VjP5dV5wSsu5q/fbRU928LZotYcna/SusdE=)
3: zHOXRdXkiM-RbCdgutluwx22gJ8.roa (hash: ddTQ3xyy/qh9SFlJgrOiIvTTzcQtTPf5+YJxupFgPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ec:85:c5:58:87:59:c3:6c:79:6a:d9:20:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: May 13 05:01:16 2026 GMT
Not After : May 14 05:01:16 2026 GMT
Subject: CN=d1a63250f30a939a68caa750ee6b9f1c47807257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:7f:40:fe:b0:ca:b6:16:6b:0d:88:11:4c:
87:b2:d3:53:e9:a2:8f:95:f6:70:8f:98:d0:ea:8c:
93:b3:dc:75:d1:1f:da:34:5e:e3:6c:c0:5a:60:e3:
6b:aa:4a:5e:a0:08:35:f3:8b:d1:f4:51:18:88:3c:
33:64:45:cd:39:ac:43:c3:57:4d:54:86:d5:6b:c5:
e3:7c:a1:0a:6d:9c:4b:d4:23:05:c6:7c:85:6a:2d:
03:31:2b:39:06:83:59:3b:8b:79:48:67:09:16:6c:
8b:a0:a1:61:2a:17:82:ac:eb:30:c1:8f:3b:ba:c1:
58:49:92:63:f0:73:a0:e5:e8:bb:91:2c:fa:e6:d0:
02:8e:e1:66:0d:ee:df:53:d5:57:5c:d0:0b:7a:b0:
5b:30:88:b5:14:56:b8:ce:1a:e1:df:88:e7:62:cf:
da:d1:0e:a3:a9:08:43:f8:11:32:96:aa:ad:c0:8b:
24:ff:01:b9:5c:69:9f:2f:f8:74:91:b7:78:40:12:
5d:7f:23:17:69:70:10:9b:1f:fe:82:4e:69:a1:08:
6b:4f:3a:fe:87:d3:a9:7e:53:b2:c6:68:43:05:f8:
1b:8b:75:67:4b:6a:f8:40:5a:b3:10:90:32:a1:c2:
6a:71:77:32:84:f9:42:32:51:79:18:3b:75:3c:05:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:32:50:F3:0A:93:9A:68:CA:A7:50:EE:6B:9F:1C:47:80:72:57
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:b6:76:cc:a9:7f:05:d5:cf:45:f2:62:21:52:23:c9:56:
a1:42:4c:2c:e5:52:ec:40:0f:0e:10:03:b0:48:10:b4:fd:f5:
01:66:b0:61:fe:a4:7f:46:37:02:ee:ab:c6:ae:9e:5a:19:84:
17:98:4d:36:df:ce:f2:26:ca:79:b3:ea:b2:7b:e4:91:6e:2e:
98:51:d8:86:62:77:67:9f:ca:a6:52:53:f0:f3:85:b5:38:a1:
2b:92:fd:75:81:0b:30:fc:56:ec:d4:ef:b2:94:85:f5:ad:63:
3e:18:3f:97:31:c6:b8:a1:01:6c:be:84:5f:05:9b:c8:32:b5:
2d:6d:8a:d5:a3:b3:9a:ee:43:21:ab:e0:2f:57:04:d0:3e:a5:
24:64:82:dc:5c:f4:1f:fc:74:d3:d1:12:98:1b:8d:61:0c:5d:
dc:c1:d2:e9:3d:6c:8b:19:60:1b:8d:ba:cb:0d:64:64:7f:fd:
50:c6:44:90:a3:66:fb:e0:dc:16:10:13:a8:5a:ce:0f:ef:24:
dc:85:0d:dd:2b:65:d1:3f:0c:02:a3:1d:6e:1d:4d:45:fd:c1:
49:7a:d2:fc:09:01:35:41:28:92:62:c8:c9:20:ec:35:19:31:
5b:3e:e6:b1:3c:c7:ce:5c:4f:64:09:aa:57:db:2e:e6:61:62:
67:bd:8e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:31:11 2026 by rpki-client