Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File: IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier: svZRusqRHsoTBr8TMbwJadnHLH22YVoKDwT/Kv4oH0E=
Subject key identifier: C6:E5:0B:A0:71:73:E4:F5:A6:F1:75:13:87:95:24:83:CD:9B:B5:57
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer: /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial: 019E2091105D92C499AAA37A032F29C76F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number: 190F
Signing time: Wed 13 May 2026 09:00:38 +0000
Manifest this update: Wed 13 May 2026 09:00:38 +0000
Manifest next update: Thu 14 May 2026 09:00:38 +0000
Files and hashes: 1: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: jCleT9camyiPEhXwpP4tzkvujhVM9UQLO3to79CzNL0=)
2: iAERyyADNkRh7t11PICWm-ALep4.roa (hash: Gs0IMRFAt2iHOW8BkO2nGyZushivLZn3vc6c0MIS3lQ=)
3: mWpfuNKr59RM8vs6VkBzUlnVMDw.roa (hash: NvT/WJHbjfkyULAS3B3qYEFqcvvfoazpHQgER185/rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:10:5d:92:c4:99:aa:a3:7a:03:2f:29:c7:6f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
Validity
Not Before: May 13 09:00:38 2026 GMT
Not After : May 14 09:00:38 2026 GMT
Subject: CN=c6e50ba07173e4f5a6f1751387952483cd9bb557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:e6:ff:9d:83:c8:00:e3:44:76:7d:1e:8d:
e0:db:57:62:8a:8d:2e:bc:55:2d:3b:3d:be:20:18:
a0:0b:1f:fe:b9:da:0a:9f:b6:a7:28:bc:50:7c:eb:
7a:94:bb:44:af:55:0b:70:29:54:96:be:08:ba:a4:
b0:b5:26:e3:76:f7:9c:6f:3f:9f:ff:b6:67:21:a9:
d5:80:6c:c5:3c:d0:60:19:09:9d:df:dd:6f:4d:a7:
7d:b5:ab:ac:c6:3d:7b:f3:85:04:c4:83:40:bd:a8:
a5:58:ce:ed:0c:33:b1:eb:e3:55:af:49:74:36:d0:
b6:fd:db:9c:62:25:ec:3d:c8:fc:33:fe:22:7c:61:
9e:3e:ff:ff:7c:f6:ec:0f:be:78:28:b4:6c:f4:f9:
16:de:7a:3e:e1:e6:95:6a:50:e7:89:7d:88:f0:5d:
ba:23:79:9a:49:fd:ec:f9:8f:e8:49:67:e0:a0:8f:
7c:01:0d:87:52:52:5c:13:ab:5d:25:6e:68:3d:6b:
db:79:0a:1b:07:bb:6d:5e:ad:5d:b6:ee:8c:c9:f7:
34:b0:d3:7c:93:70:13:57:13:8d:b5:3f:b2:e6:02:
77:3c:31:a5:d2:36:8c:0a:59:1e:4f:3e:cb:9c:27:
de:35:ac:9b:21:33:9b:f5:b5:ab:2c:e9:74:a7:98:
f3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E5:0B:A0:71:73:E4:F5:A6:F1:75:13:87:95:24:83:CD:9B:B5:57
X509v3 Authority Key Identifier:
keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:df:00:c3:c7:09:c8:70:fc:22:23:be:2a:44:9a:04:f0:6f:
ed:75:e8:b9:88:34:2a:a2:d0:11:1b:30:b9:aa:f1:bf:d1:a6:
0a:41:f5:91:07:7b:f2:92:30:5c:76:ba:5d:a6:72:04:e5:ea:
c3:60:ef:31:cc:7f:ee:43:39:02:e0:2a:36:c4:cf:41:1f:1b:
bb:17:ce:f2:c4:ce:d0:63:93:5f:4a:5e:e4:0a:7d:24:43:25:
d7:63:16:83:08:46:c2:10:9e:66:5a:b7:86:3d:e0:a6:eb:a8:
86:8d:f6:c3:0f:81:00:34:c3:0c:4e:3a:3f:4a:60:38:04:0a:
1b:b1:0d:bb:e5:6a:b1:4c:85:ab:28:4a:b6:ef:59:3a:9e:a0:
09:ed:e6:71:57:fd:0a:eb:0c:28:5d:70:38:d4:06:13:c3:96:
a1:24:b9:73:6f:a7:34:db:5f:94:9a:24:62:df:ee:51:eb:21:
89:ea:78:dc:ce:4e:12:43:5b:5e:d2:42:d4:be:53:8c:58:0b:
da:e2:b1:4e:85:ed:e8:fd:f6:50:ae:e4:8b:21:91:76:e7:35:
6c:b8:f3:81:aa:e7:70:49:48:3e:10:76:62:fc:53:84:dd:32:
48:58:1d:de:c2:24:84:49:3a:a2:c2:a1:3e:d9:bd:5b:1a:09:
3d:7e:ca:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:20:54 2026 by rpki-client