Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: h5KMawd12h3UEzTWe1hDYCBpAU/PMrGBQgYTKTjt47I=
Subject key identifier: CF:39:FF:3B:D8:74:0D:4B:CA:76:8D:80:24:66:CB:71:24:49:EF:50
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 019E1D90628521FB8901EBAFC0C0F06E965C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 19:01:02 +0000
Manifest this update: Tue 12 May 2026 19:01:02 +0000
Manifest next update: Wed 13 May 2026 19:01:02 +0000
Files and hashes: 1: QxwdEpVgo81_-mwIpi91_VPBVXk.roa (hash: W+b58r8ZTGE9pnt5zsRnperhoba0alTWik9Mki5Rn8o=)
2: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: 9mN7yC8kfnH64/d6HYJVmLt4gETS4MV9Q4H5dZNxpG4=)
3: yogiE4AfqTgfcPCCtr-U5LumWGA.roa (hash: 7sG8K1mqCmAxwFkd6xn5cCRRc3Cm5vOY2e233XKrBN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:62:85:21:fb:89:01:eb:af:c0:c0:f0:6e:96:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: May 12 19:01:02 2026 GMT
Not After : May 13 19:01:02 2026 GMT
Subject: CN=cf39ff3bd8740d4bca768d802466cb712449ef50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:e3:c2:1d:fb:48:ed:84:fe:0d:cc:8f:db:
fe:c3:93:41:8e:ce:cd:23:59:19:a9:3f:5c:42:26:
21:ef:9c:7c:08:e4:99:55:97:c5:b2:a5:58:2c:81:
d8:10:26:e0:07:43:fb:c4:13:7c:73:36:ab:2e:75:
19:e5:26:cc:1d:22:ca:66:8a:55:3b:c0:8b:63:3b:
8f:58:dd:72:e0:63:db:2a:b3:2c:d4:bb:83:aa:3f:
12:20:d3:9c:c9:e8:cb:2e:45:4c:8e:76:85:75:28:
11:07:91:df:ab:9a:ad:54:6f:97:8d:9b:20:6f:8c:
91:c6:ad:d2:f1:48:f4:f7:04:8b:3a:ee:0d:8b:aa:
da:9e:63:17:fe:7a:f2:11:07:2d:aa:8f:46:dc:fe:
e8:07:47:d6:33:e2:f5:4d:43:da:bc:81:7e:47:55:
0b:37:8a:33:78:c3:e6:57:27:f5:78:97:37:e6:f1:
24:f6:31:89:0d:7a:f9:ac:3f:15:8e:bc:dc:a3:64:
2a:0c:c4:2a:b0:a8:db:02:13:44:7a:a5:ec:75:ab:
fa:41:ad:e6:f0:2c:99:1a:ac:e2:b9:5a:79:73:fa:
82:e6:98:14:a2:b9:3c:80:81:ca:2a:e1:64:3f:69:
8a:1b:99:39:66:77:5f:31:21:1b:80:bd:40:96:f5:
55:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:FF:3B:D8:74:0D:4B:CA:76:8D:80:24:66:CB:71:24:49:EF:50
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3d:1a:0c:30:00:bd:69:89:18:a7:ef:19:e4:05:da:b6:aa:
4e:b1:9c:5d:51:4e:5b:13:d9:d6:90:8a:89:fb:5d:68:5d:64:
09:2b:8c:8a:be:6f:19:06:82:10:eb:53:76:58:d4:82:bd:6f:
d3:30:20:9d:d2:34:b4:b6:c2:f4:57:a4:e2:76:4d:53:6b:60:
b2:1b:72:16:3c:b4:61:5a:43:77:63:a0:b9:02:3e:63:da:41:
f5:b6:ff:19:ca:70:53:f5:92:25:2c:4c:c2:b9:b9:f7:ea:0b:
3e:8e:2e:5e:03:b4:c6:41:aa:dd:a1:dc:e7:ef:bc:85:fc:82:
27:71:09:6f:92:04:ac:ee:46:ff:82:e0:fa:5a:dd:5a:b2:d3:
1f:1d:0f:f6:c0:ac:f5:8c:5d:c9:40:af:06:36:91:45:ba:ff:
f1:6f:c9:e9:8a:7a:81:23:68:de:f3:0b:45:84:81:a2:2c:2c:
26:16:41:0c:3b:83:5d:fb:65:90:62:f7:07:92:e0:b0:ee:9d:
58:6d:d8:02:8d:ef:c8:86:cf:74:b8:b4:25:d3:5c:a1:f3:0c:
50:3f:ff:9e:c4:14:63:15:82:cb:56:2c:86:80:5b:2d:f6:a6:
ac:1b:c2:0e:5a:c3:09:64:b4:2f:8f:98:4f:30:af:6f:9d:f1:
9c:12:8d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:22:44 2026 by rpki-client