Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: 9cTKpnmvrv+sLDokijRiO8IOH8SHAjniHPuVzD+34d4=
Subject key identifier: CB:38:A3:25:63:15:99:C8:E2:35:BF:66:5D:1C:07:0F:D1:A9:DC:53
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019E1E6CB1840E1EE088AD6F52F6686A5A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 23:01:40 +0000
Manifest this update: Tue 12 May 2026 23:01:40 +0000
Manifest next update: Wed 13 May 2026 23:01:40 +0000
Files and hashes: 1: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: W3YT/uibnmzq1kbo2Fuy+pTna8SCO6n71++OWXoU5/I=)
2: X22P1NloWugtV33VklnsZASB77I.roa (hash: RELi8S+QmS5zizjTXUSelucOgYS8Q6L5FGNYX0riiUs=)
3: qZ8lYrTAES5IWyxZQZaEefS3YC0.roa (hash: TigOEyk/IxeMvvOho4DCoJ6pinlkySdim2c4kDHjteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:b1:84:0e:1e:e0:88:ad:6f:52:f6:68:6a:5a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: May 12 23:01:40 2026 GMT
Not After : May 13 23:01:40 2026 GMT
Subject: CN=cb38a325631599c8e235bf665d1c070fd1a9dc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:67:11:13:b7:01:28:bb:1e:af:f5:af:07:d3:
8f:2a:f6:f2:fa:09:1a:1b:96:11:b4:82:07:5e:cf:
cf:72:44:36:7f:64:de:57:81:43:98:25:f7:30:54:
00:51:05:d1:6b:5e:6d:e4:de:3d:18:80:b2:1b:87:
0a:fd:f6:7d:9e:a5:b3:e3:06:12:f5:df:1a:2c:ec:
a6:d4:09:31:cc:86:74:4e:36:16:3d:63:23:8f:ed:
56:63:08:c1:75:92:96:15:9a:82:5c:9b:57:43:2d:
cc:9c:ea:67:ba:2b:3d:c6:90:6d:af:08:f7:46:5c:
b4:5b:cc:0a:7c:f6:81:e1:4d:f2:0f:18:f1:b1:24:
13:37:de:c7:67:69:a8:b3:fa:86:3a:9a:11:05:2c:
0c:da:1f:64:40:48:6e:dc:a3:d0:b6:b1:2c:c5:bb:
ec:74:0d:4c:54:ed:fd:c8:4e:42:71:b9:be:ac:da:
5c:06:91:3b:33:63:9d:7f:47:3d:b8:54:f7:eb:e0:
ae:0c:fe:8d:ce:e4:86:f6:cb:93:35:19:4b:b3:b5:
19:6a:68:3a:7e:6a:b8:88:50:73:ec:cc:7e:95:0c:
9c:70:45:71:70:61:91:4a:77:4f:a6:ca:3b:1b:74:
18:e0:b1:eb:f4:44:9d:df:82:2c:a2:4c:ca:62:31:
0e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:38:A3:25:63:15:99:C8:E2:35:BF:66:5D:1C:07:0F:D1:A9:DC:53
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:7c:1a:e7:25:39:ab:4f:07:12:9c:7d:a7:ce:07:24:98:07:
4a:ae:df:80:e8:30:c2:3f:54:28:f6:d2:7a:96:97:21:9f:18:
92:30:82:09:bd:0d:25:a9:ff:68:6a:d9:76:99:52:f9:0e:3a:
4a:ed:99:80:d7:be:40:1a:ec:3a:dd:e3:69:73:dd:c8:f4:a1:
47:3d:e1:31:3d:a0:35:cd:95:3b:e7:02:a0:7f:82:ac:bd:a1:
c3:ae:a6:4f:c3:96:02:f8:4b:4b:06:8c:26:40:dc:62:5a:95:
b1:0c:2e:5f:80:2f:6d:ff:e7:f6:49:36:c2:b3:56:de:24:ec:
6a:ae:fb:a3:b6:b3:50:02:f9:cf:fe:5b:39:dd:e0:f4:a0:52:
b5:e7:b2:c1:4e:79:b3:5b:b3:7e:77:f2:4c:20:8f:01:c1:8a:
c7:9e:0b:87:f3:86:21:d4:67:cd:3c:44:b5:d9:18:33:d0:7c:
ea:be:d2:27:af:70:e3:32:27:b2:2d:5f:59:12:15:be:53:7d:
fb:8a:89:44:cd:31:3a:d4:7d:6c:02:0c:e0:0d:d8:91:a9:1d:
0e:ac:9e:de:1d:18:7f:fd:cb:50:35:71:1a:25:3d:85:dd:21:
12:9a:8c:3b:a1:5e:0e:da:03:0d:f7:59:14:dc:bd:d6:49:c1:
0f:9a:35:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:56 2026 by rpki-client