Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: oSUy6jgt8bQqKDiziXK7cFBz9as1jSA1x0May7KmsSo=
Subject key identifier: DD:7C:1D:D4:3F:58:40:02:E2:79:D3:12:7D:72:73:B5:D6:78:F4:F7
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 019E202396C5E36D38D85238CB98C9DFB39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 07:01:03 +0000
Manifest this update: Wed 13 May 2026 07:01:03 +0000
Manifest next update: Thu 14 May 2026 07:01:03 +0000
Files and hashes: 1: DKnBvGIE9iqjrZPZMqeWH0unajs.roa (hash: TT/s0k//yUcEj92PO7ED9oag8g35ZTDpkDcHBo8y524=)
2: p4WliZo-ae5PgJyIeuO1e3wlvlI.roa (hash: ombqIru3embeAfMDx9DKYU09jpQfC3EPauM5pHbeNC4=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: kkBljtcVInc1vtF4PVp8s5F6NbmKDxRDYcxz6ltYqSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:96:c5:e3:6d:38:d8:52:38:cb:98:c9:df:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: May 13 07:01:03 2026 GMT
Not After : May 14 07:01:03 2026 GMT
Subject: CN=dd7c1dd43f584002e279d3127d7273b5d678f4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a8:ab:6c:80:a9:df:d3:b2:f7:0b:1e:b7:84:
90:5c:88:ff:72:d5:44:78:13:a8:91:19:3e:03:22:
9e:ac:94:86:32:e9:3c:01:d5:9b:d8:6f:f8:a6:b8:
4f:ae:4a:f9:67:b1:ce:5c:32:8f:3d:41:7a:a3:90:
3f:db:27:fe:e1:bd:6b:a4:0a:65:bd:ac:ac:eb:4e:
b7:d7:75:a0:78:26:da:36:0d:72:4c:e4:9e:f9:e8:
45:73:d2:1e:6a:5f:8f:15:f9:31:16:54:f0:08:3b:
77:f7:b7:ee:98:2a:d3:87:43:24:00:6b:74:1e:ac:
4d:fa:f0:82:43:ba:cb:46:a8:a0:4d:d6:2c:29:49:
37:0a:39:0b:50:65:8c:2a:de:3f:07:48:c0:2b:d7:
cb:71:d1:67:db:6d:91:93:cb:de:6b:ba:56:a9:6e:
ba:23:87:d9:3a:8a:c6:49:e6:23:c5:e8:05:d6:2d:
fe:dc:2f:dc:04:e9:2d:75:70:f3:fd:a1:ef:29:ba:
6f:8a:f0:f3:78:d8:bd:cc:dd:42:64:af:46:19:ef:
3d:9b:78:41:24:51:55:b7:8b:72:be:29:3d:6d:07:
30:e5:3d:cf:e4:2f:f6:b4:99:57:c6:d6:b2:11:5c:
9c:75:38:5c:1e:d1:7b:20:59:4d:97:26:88:d7:08:
8f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:1D:D4:3F:58:40:02:E2:79:D3:12:7D:72:73:B5:D6:78:F4:F7
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2b:64:f6:40:6f:7d:3d:79:dc:23:32:01:f9:1c:6e:2b:a5:
47:70:18:39:19:7c:0e:40:48:6f:c9:21:8e:11:77:97:82:11:
84:e5:99:81:d3:ad:36:a3:d0:4c:4a:d4:ed:c0:b3:9c:ad:4a:
2a:e9:03:b7:ee:c6:d3:46:0a:29:07:c7:51:5f:74:06:bf:81:
3f:2a:0a:e8:45:25:6c:30:b2:83:3d:69:12:5d:83:eb:36:b7:
4f:d9:1a:65:b1:70:42:2e:df:4d:0e:89:57:7e:60:bc:01:73:
a7:b8:d9:e0:dc:9d:8a:7c:fa:b7:49:8a:91:83:ad:25:4c:4f:
62:13:36:0e:a8:b5:ec:d1:8f:f6:8b:10:8c:7a:bd:0d:75:21:
8a:93:30:49:71:c2:eb:24:47:e3:be:22:67:4c:22:63:ce:51:
95:a7:6b:d6:1c:fe:88:68:d1:fd:4d:70:15:d1:d4:0a:39:3e:
fe:cd:d4:b3:be:9f:b9:14:5b:c2:68:1d:ab:25:71:17:df:28:
be:43:6a:e8:3c:87:b6:45:42:0a:c4:65:cc:c2:1f:1a:2b:32:
93:e1:3c:d4:e0:86:6e:c5:e0:17:e4:4f:0f:22:97:29:c4:fa:
d2:38:a0:aa:f6:02:17:dc:86:1f:88:1d:b5:c6:ab:a5:e7:0d:
20:0b:49:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:30:01 2026 by rpki-client