Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
File: iX2mABsSODBo_nGjD4zyhcZoMP4.mft (raw, json)
Hash identifier: z9HAQw7GlZWBp13AREE0znnEFWcohDs39EU2+VdcRcw=
Subject key identifier: E0:87:85:4C:94:15:50:B6:98:8C:2D:1E:BB:56:20:5F:40:3F:8F:2E
Authority key identifier: 89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
Certificate issuer: /CN=897da6001b12383068fe71a30f8cf285c66830fe
Certificate serial: 019E1CB4B31056E654EFD50ED71126AE87B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 15:01:04 +0000
Manifest this update: Tue 12 May 2026 15:01:04 +0000
Manifest next update: Wed 13 May 2026 15:01:04 +0000
Files and hashes: 1: b7S_nq9L3fLkMmyZfKpBQL5uCIY.roa (hash: hHkV6ifNNgCnzjffMB2ARiro7sl9sU2WuipxUNM/huo=)
2: iX2mABsSODBo_nGjD4zyhcZoMP4.crl (hash: 7RAELo0eAR9HFiBLiuCgC7CmEUsYc/c+IQcIuy+twCM=)
3: jAnHcvp-J3jJ73LmJIPdJciy_zM.roa (hash: APG1rihSnkESicy3QFJODSTSwbqRn6HF/XNwWPvWKwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:b3:10:56:e6:54:ef:d5:0e:d7:11:26:ae:87:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=897da6001b12383068fe71a30f8cf285c66830fe
Validity
Not Before: May 12 15:01:04 2026 GMT
Not After : May 13 15:01:04 2026 GMT
Subject: CN=e087854c941550b6988c2d1ebb56205f403f8f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:92:cc:1c:08:79:fb:55:17:3a:e3:c6:fe:
4b:68:b7:64:83:36:a0:f6:75:ec:1f:13:4c:8b:54:
72:eb:fd:a0:4f:42:ca:8a:18:24:6a:60:1d:53:fc:
0d:af:ef:c1:07:01:62:2d:4e:03:c1:dd:9b:45:5e:
9a:8e:85:3e:d1:59:5a:fd:55:38:26:ae:6a:75:8e:
f3:10:38:a4:a4:ec:41:7b:c5:1d:36:cf:e2:41:c9:
28:a3:6a:d7:42:dd:c7:db:a5:74:94:cd:9c:b8:f3:
1e:d2:45:8d:67:0e:82:e4:0e:a0:c3:7a:ad:e6:0a:
ba:73:d1:1b:7d:53:f4:b6:3a:57:f9:6a:f4:07:1b:
73:4d:72:0c:77:f7:a2:4f:87:0e:6c:e8:ef:ad:f2:
81:a4:e1:b6:ad:f2:28:a5:22:b0:e1:27:35:1a:f0:
dd:6b:72:d0:c1:54:78:f0:92:09:31:44:d3:60:3b:
56:e6:44:df:19:3b:7b:a4:7b:eb:ad:a2:a5:9f:e1:
9b:81:db:60:7a:5e:22:12:54:91:c2:00:87:b9:93:
09:16:79:35:9b:00:53:b7:a3:96:85:fc:25:8f:86:
ab:24:1e:ac:1c:0c:a8:87:05:84:61:3a:e4:6f:a5:
c6:25:ce:76:97:c6:b6:77:f3:0b:d9:2b:c6:0c:42:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:87:85:4C:94:15:50:B6:98:8C:2D:1E:BB:56:20:5F:40:3F:8F:2E
X509v3 Authority Key Identifier:
keyid:89:7D:A6:00:1B:12:38:30:68:FE:71:A3:0F:8C:F2:85:C6:68:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iX2mABsSODBo_nGjD4zyhcZoMP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/96dec8-7720-4efc-bd39-84faaf105a97/1/iX2mABsSODBo_nGjD4zyhcZoMP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1a:f6:32:95:9d:b5:3e:c8:2e:b5:52:51:4c:90:0a:50:a8:
20:23:7c:83:4b:e5:48:fe:7e:a1:5c:4a:3a:47:f5:34:95:71:
2f:8b:c6:e0:a5:3a:68:1c:55:83:71:da:55:19:c3:be:94:85:
b7:fd:a4:c7:6a:1c:75:6d:a3:f3:3c:e1:41:0e:42:e5:6b:f7:
d1:5b:3e:a5:6c:a7:e8:46:09:3d:ac:59:50:d9:53:11:81:e8:
39:0a:18:1a:95:dd:d9:44:b5:cf:e0:01:8a:2b:8e:e1:ea:7c:
27:4c:ad:59:eb:b5:69:98:69:9c:fe:0f:3d:44:2e:14:97:c2:
e7:b2:a0:ee:f1:0f:01:77:ee:48:bd:0a:c4:4f:10:6e:4a:b4:
8a:e7:76:50:0a:06:9c:b5:6f:17:ab:bc:0e:3f:97:89:4d:ed:
f1:49:82:b2:42:75:69:e8:db:df:2e:a6:83:2d:52:e1:85:2d:
d9:dc:ad:24:7e:6c:29:3b:12:25:00:89:65:a7:87:b5:be:90:
8f:d2:57:12:39:ce:f4:31:3e:c8:85:e5:a6:75:23:ef:60:db:
4f:ef:19:9b:97:fa:56:54:ed:51:8a:b3:33:9b:cd:63:7f:69:
dc:e4:95:04:cc:a7:b4:95:f5:da:cb:40:1a:50:ac:bf:5d:ce:
d8:23:93:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:08:27 2026 by rpki-client