Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: mplDamqykKPYngoKj+IBajx+cU4hu/k56DmphSSzoZo=
Subject key identifier: 67:DA:AF:1A:2D:7D:DE:5D:9A:FB:D6:8F:E4:71:1C:47:10:48:D6:D9
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 019E1FB5914657D3AB49BB4DCDAA2AE8D06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 189B
Signing time: Wed 13 May 2026 05:00:53 +0000
Manifest this update: Wed 13 May 2026 05:00:53 +0000
Manifest next update: Thu 14 May 2026 05:00:53 +0000
Files and hashes: 1: 7WMHMRqYOCVJJOdVZn2toCGJ2Gg.roa (hash: u4kYKOpJoWTw0MlXSHwcNaxRXss2R6FxZn1Z49E09Go=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: nlIzOmWAe1cwR1+wtV5LrO6b8p73ZWiH9Fmc+z7zIUw=)
3: Y9TiWW63huz2Y3RHyUrV0t01KvA.roa (hash: rNdERlf12PuGe5Ze8mFCZtIt+e3TVhdioA/m3kjwSCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:91:46:57:d3:ab:49:bb:4d:cd:aa:2a:e8:d0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: May 13 05:00:53 2026 GMT
Not After : May 14 05:00:53 2026 GMT
Subject: CN=67daaf1a2d7dde5d9afbd68fe4711c471048d6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:82:06:2f:e7:cf:7b:8f:48:97:62:5b:39:
19:59:7e:eb:62:34:ac:1e:33:af:6c:bc:8b:5f:5e:
e4:26:a6:30:d9:99:3e:06:6f:34:6a:e4:9b:ff:c5:
0e:54:45:1b:96:9e:e4:2c:87:b0:33:d8:3c:6a:0b:
e4:93:fa:40:ec:1e:d4:58:0f:ff:a6:40:03:97:88:
9b:32:1a:46:2b:62:02:f9:cd:ac:a9:f6:b6:ea:c9:
60:7c:d4:a1:7c:0e:a4:2f:b3:74:b7:a6:9f:60:46:
3d:fe:80:ed:d6:06:e4:c7:f2:7f:e7:8e:30:50:3f:
8f:97:70:81:a6:27:4c:b4:18:37:f6:62:94:87:1b:
e5:9b:80:41:6e:1d:08:a5:b2:64:73:13:d0:b9:6b:
ab:28:8d:ed:3d:00:18:61:2f:5b:fe:9e:66:3f:bb:
ea:3f:fd:3b:69:2f:83:c6:a1:ff:a8:a2:c6:f6:37:
3c:e6:a7:2d:21:3f:02:16:1c:7b:ca:2c:aa:3a:df:
0d:8a:54:1e:81:5e:00:eb:72:2f:e7:2d:6b:d9:c7:
8a:21:0d:3c:14:ff:61:a7:97:e3:83:e3:04:18:b4:
fe:3f:93:29:5d:d2:d5:df:f5:55:bd:86:f1:33:29:
0e:63:22:00:d1:69:7b:31:02:36:c0:6e:0f:5b:c8:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DA:AF:1A:2D:7D:DE:5D:9A:FB:D6:8F:E4:71:1C:47:10:48:D6:D9
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:08:ad:d3:33:58:0a:ae:ce:42:a9:92:d2:e8:d4:20:f1:0f:
32:25:92:43:63:e1:33:ac:18:3f:d6:40:59:5c:83:cc:d8:5d:
b5:00:5f:55:2a:f9:43:b3:04:d3:d4:a1:94:33:3b:af:5f:82:
9d:af:0a:d6:39:4a:66:01:9b:d6:3d:fe:18:4c:af:8f:36:1a:
a9:3c:70:d1:b0:b6:6e:a7:42:2b:fe:82:c5:1a:9a:3f:01:cc:
05:e7:53:bb:81:28:8e:f2:28:ef:79:a8:15:c6:95:9d:69:72:
9b:fc:49:f4:0a:eb:7a:a9:86:64:43:92:14:e3:68:1e:07:d3:
c0:6a:99:f4:fb:5c:b6:99:b1:e6:a6:f9:80:89:22:e3:90:67:
6a:ee:52:95:d8:a6:ed:b5:89:ec:bd:3d:76:36:0e:07:71:29:
ef:e1:ca:ac:35:f3:57:da:89:d8:61:c5:2a:5f:08:41:50:71:
e9:e8:44:e6:d2:c1:ae:1f:f5:f5:02:db:11:ac:f4:2e:dc:d7:
5c:c1:43:e2:a3:3e:8f:eb:29:d4:f5:3b:39:1b:62:b8:46:58:
24:34:82:67:9b:77:b1:7f:ec:74:41:5d:66:5e:26:1d:e3:5d:
04:20:77:72:5b:44:94:fc:17:ec:62:34:28:89:f8:aa:c8:4d:
bd:16:0c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:39 2026 by rpki-client