Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: jT63yzzRXOrhA/rCoBQl5Rt/gwXhiQI2f0tOOL+d83E=
Subject key identifier: 3B:D5:F8:93:70:01:8F:8F:F5:01:98:C9:CF:D8:88:E6:48:FA:E7:DC
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019E1DFE44A2E327E1F6164F9D3993A64C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:01:03 +0000
Manifest this update: Tue 12 May 2026 21:01:03 +0000
Manifest next update: Wed 13 May 2026 21:01:03 +0000
Files and hashes: 1: 3Leyor2FEESV9ehfqvceffjDMA4.roa (hash: R9naRO5SHDMlr7cq6UrUOi6UWOp5V9CQxQspAjiKZsk=)
2: HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa (hash: cRdvZKn3ogbb94VbqPI6V/k6GIXa73KMunx92mUxdFE=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: 11VrspfzlHn/DzDaViucnln8n1zfdRRhv8hsXxMZM8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:44:a2:e3:27:e1:f6:16:4f:9d:39:93:a6:4c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: May 12 21:01:03 2026 GMT
Not After : May 13 21:01:03 2026 GMT
Subject: CN=3bd5f89370018f8ff50198c9cfd888e648fae7dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c7:39:21:e4:e1:1d:a1:48:77:ae:3e:1b:3b:
8b:df:60:c4:45:c6:e8:16:3d:1b:5c:00:46:2d:5a:
c3:83:a8:f2:9f:8a:f1:ec:4e:9c:00:3f:c2:93:aa:
76:e7:48:c7:79:97:0d:9f:e6:5d:4a:a3:52:27:8d:
d3:56:76:f8:a7:b5:8b:d9:c5:07:d3:38:d5:4b:90:
04:aa:b5:91:3e:94:7a:69:29:38:94:5a:4d:8d:25:
bb:d2:f3:42:9e:34:1b:3f:68:28:e6:7a:c6:f4:aa:
77:0c:03:d0:39:97:10:b7:6d:64:f1:8e:e3:ed:ab:
f0:e6:42:b4:3f:af:df:8f:e7:d7:8e:58:75:b9:ff:
6e:04:51:6a:31:90:63:15:6a:10:c7:24:2e:34:72:
13:ee:5d:7f:52:23:c5:31:17:97:66:35:29:76:7f:
ad:41:21:6c:72:e4:4c:c6:f0:b8:a6:2c:60:ca:02:
48:6e:88:52:14:d7:57:e3:b0:f7:83:00:c2:05:5f:
91:0f:76:88:d9:45:91:19:f9:40:d4:14:fe:49:05:
58:99:67:6f:79:47:60:dc:1b:c1:73:07:d5:09:3f:
ad:97:25:cf:9a:ce:f2:16:b7:cf:54:4a:94:2f:96:
4b:f3:61:ba:a4:3b:ca:5c:f3:b6:45:27:a4:f8:f7:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D5:F8:93:70:01:8F:8F:F5:01:98:C9:CF:D8:88:E6:48:FA:E7:DC
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:41:fa:4c:6a:e3:1c:67:e8:dd:d7:50:37:ba:be:aa:ae:7c:
bb:ad:7e:6a:7d:fa:50:0a:dd:42:b9:ae:f7:42:f9:fa:b0:ac:
7f:0c:f0:40:e4:04:29:e9:3b:a2:ee:ff:7f:84:5c:c2:89:2d:
0a:66:5b:35:84:69:3c:f6:4d:0e:6b:bd:85:42:7a:0c:ed:fc:
7c:63:45:7c:1f:fb:f0:d8:d0:af:f0:af:61:ab:3a:5c:6e:28:
dc:16:e4:fc:86:dc:a1:61:cd:38:32:74:8c:bd:b2:50:cb:ff:
bb:ae:bc:e5:d9:6e:45:1d:01:9a:7b:72:5c:2f:93:a3:21:e7:
b6:37:b2:27:24:71:2e:1e:d8:71:71:fe:d6:7e:8e:3a:b2:c9:
45:a2:dd:b3:b4:26:5b:4f:21:16:2a:1f:8f:36:ed:80:bd:df:
77:83:a4:4b:a9:08:1b:b6:28:6e:e9:f8:5f:5c:50:0f:eb:50:
01:87:10:75:1d:38:5d:72:3a:9e:dc:9a:73:72:c9:ca:5b:2b:
0d:5e:62:01:28:83:4c:ac:72:7b:9d:9c:f4:5e:2b:f4:09:de:
29:8a:41:13:70:e0:01:d8:d9:0f:3d:40:8b:e6:09:80:2a:ef:
d5:ef:62:03:23:07:22:1d:01:6e:3e:18:fd:c8:88:58:f3:f9:
5a:1a:97:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:19 2026 by rpki-client