Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File: x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier: 2roIsTOoyarjJaS+xCb4qEurDSY2HkUaUDoToTGllFg=
Subject key identifier: A6:05:BD:CB:97:86:EA:52:11:BF:BC:9F:C6:2E:CB:DA:7D:A3:3E:8F
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer: /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial: 019E20FF118F2732EFECCEEFF3E6D77525F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number: 189C
Signing time: Wed 13 May 2026 11:00:47 +0000
Manifest this update: Wed 13 May 2026 11:00:47 +0000
Manifest next update: Thu 14 May 2026 11:00:47 +0000
Files and hashes: 1: Qd96EibuUMUl47bpcNIQg2lzdXM.roa (hash: bfpu3e5a3SbtwnPEBP2TMhw1nW2Ik4salWdsyYywAxI=)
2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: vWXg78YO+XsCKIBWEwt9O7mRw9On98T4vxRzJvJpIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:11:8f:27:32:ef:ec:ce:ef:f3:e6:d7:75:25:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Validity
Not Before: May 13 11:00:47 2026 GMT
Not After : May 14 11:00:47 2026 GMT
Subject: CN=a605bdcb9786ea5211bfbc9fc62ecbda7da33e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:85:65:2a:07:3f:1d:bd:7d:7e:d2:79:10:
56:35:7e:6f:fe:6b:10:af:30:5c:e3:b0:f2:62:41:
75:66:20:c2:a3:57:7e:91:95:da:66:bf:34:c3:6a:
30:4e:07:f1:78:76:79:df:cc:84:62:0c:cd:fe:c4:
95:0a:44:ac:9b:99:8b:20:c5:08:c8:5c:6d:c1:2e:
3f:18:68:26:32:62:29:f2:3e:b3:70:42:36:ca:1e:
29:3d:1d:b8:32:36:5b:be:d2:11:5b:cf:78:fa:f8:
6c:3e:3e:e6:e8:56:f7:0a:0f:3d:c9:37:27:66:4c:
2b:d4:82:9c:de:23:29:9f:64:e0:a4:54:b7:f9:48:
e0:99:5d:16:c3:9e:6c:d7:94:fc:29:6d:b9:5d:98:
bc:12:e5:a2:c0:55:49:3f:a9:6e:6f:d0:fa:e5:c1:
ba:4b:4f:71:cb:b0:78:49:47:15:0f:2d:5b:d3:c3:
ed:cd:94:f7:f0:d3:4a:f2:c3:06:f5:11:3c:ca:db:
49:d3:e5:3b:a3:31:7f:da:3b:ea:de:ab:08:e7:f7:
e6:43:95:af:1c:97:98:6c:2f:1e:e9:97:d3:44:61:
67:1d:24:e7:a9:b5:b6:d6:46:f3:dd:e5:20:3f:6d:
15:7e:43:de:10:35:0a:3e:1d:2a:be:c5:4f:aa:c5:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:BD:CB:97:86:EA:52:11:BF:BC:9F:C6:2E:CB:DA:7D:A3:3E:8F
X509v3 Authority Key Identifier:
keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e9:6d:4f:70:1d:f5:c5:83:ad:5f:30:eb:7a:1e:8f:ca:c2:
28:2d:8d:21:ae:a4:aa:e2:91:e1:9a:88:bc:8e:0d:01:79:6f:
b7:2b:c3:a7:cf:24:e8:54:b4:cb:da:04:ae:40:54:de:5a:19:
7f:7a:5e:22:ba:52:52:73:11:68:cf:0c:4d:30:66:be:d8:8d:
a8:77:87:32:36:d3:e9:cc:af:a6:f4:24:54:11:d5:82:40:a4:
25:b1:ab:ea:d3:a6:64:5d:6b:47:6c:33:2f:2b:24:70:f4:7a:
65:58:97:18:80:4e:b9:7f:99:e8:53:ea:76:61:a2:49:9d:c4:
e2:38:f1:7e:99:87:c5:6b:70:c3:55:0d:34:8f:5a:94:f5:1a:
e8:37:73:17:01:c3:02:0f:eb:51:18:f9:b0:63:5e:41:53:b8:
28:4b:0f:d6:d3:23:a4:97:ec:85:a5:e6:c4:6d:2d:37:77:99:
2e:ab:36:0a:26:7c:89:93:0b:fd:53:bb:79:02:07:1c:1e:e3:
e4:72:78:89:24:6f:96:8e:f2:09:a1:08:1e:bd:68:46:17:56:
da:ee:2f:40:82:a2:0d:b6:8f:7e:a9:c4:17:ec:e2:63:19:82:
2b:ed:c6:2f:42:f3:53:40:af:5d:50:88:4a:a6:ee:e4:b9:87:
09:2f:7e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:40 2026 by rpki-client