Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
File: 189nO-jwMimh57bmFhbzl0ziL_4.mft (raw, json)
Hash identifier: jEq1vIEPkUFopfI8FnTd984M+Yvfl19S8NstsholDBI=
Subject key identifier: 3C:09:E7:9D:CE:0B:EB:05:B1:08:6B:F2:16:DF:35:4D:68:06:62:69
Authority key identifier: D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
Certificate issuer: /CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Certificate serial: 019E1BD8F53709343A67B1051668EEF2001A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
Manifest number: AA
Signing time: Tue 12 May 2026 11:01:03 +0000
Manifest this update: Tue 12 May 2026 11:01:03 +0000
Manifest next update: Wed 13 May 2026 11:01:03 +0000
Files and hashes: 1: 189nO-jwMimh57bmFhbzl0ziL_4.crl (hash: eQjmizZ+zdFLx877EVLca5ESLPL1XuIKFIo1JRdXMA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:f5:37:09:34:3a:67:b1:05:16:68:ee:f2:00:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cf673be8f03229a1e7b6e61616f3974ce22ffe
Validity
Not Before: May 12 11:01:03 2026 GMT
Not After : May 13 11:01:03 2026 GMT
Subject: CN=3c09e79dce0beb05b1086bf216df354d68066269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:bf:ff:3a:de:a1:7e:74:50:6c:85:4c:b2:
1a:8a:52:f9:09:ef:73:77:8a:72:80:4e:32:b4:77:
48:a9:f1:07:8f:6d:da:b4:09:9a:9b:11:41:0b:3f:
a5:b3:ea:36:40:86:db:38:df:bd:67:59:da:fc:32:
e6:1e:9b:ea:e4:8b:94:da:4a:09:3f:6b:5e:c4:7c:
0f:d4:32:ee:b4:5e:23:ee:20:34:02:56:f9:c3:9a:
68:3b:63:2d:bf:a9:a1:6a:13:02:81:df:fd:74:35:
33:66:79:84:bb:68:bb:db:8c:ed:c4:44:62:c2:b7:
01:78:5d:42:bf:35:02:b9:23:c2:79:3c:8c:23:e7:
7d:1d:77:f7:62:3f:d1:3a:f4:9a:67:2c:fe:3b:14:
a8:06:19:77:04:78:27:eb:2e:03:c2:1c:c7:96:55:
9b:84:6b:5a:bc:e9:22:48:87:93:56:e6:3f:53:64:
cb:88:0c:a6:8b:08:51:8f:f4:0a:98:31:03:9b:ee:
70:85:72:bc:f1:86:07:1b:2e:bc:12:f5:7c:c3:75:
36:78:1d:b3:97:8c:d3:ea:e3:47:a0:14:0e:b3:b0:
19:33:fe:95:ab:9b:6c:60:10:6b:ae:90:55:fb:ba:
ca:97:2f:48:87:98:cc:82:2e:85:41:e1:09:a6:29:
db:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:09:E7:9D:CE:0B:EB:05:B1:08:6B:F2:16:DF:35:4D:68:06:62:69
X509v3 Authority Key Identifier:
keyid:D7:CF:67:3B:E8:F0:32:29:A1:E7:B6:E6:16:16:F3:97:4C:E2:2F:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/189nO-jwMimh57bmFhbzl0ziL_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0d79ca-bb7a-4a65-9830-1537e794559e/1/189nO-jwMimh57bmFhbzl0ziL_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:18:d3:75:2a:a1:41:46:0a:31:a6:51:2a:e0:81:ab:2b:96:
cc:ce:22:c0:b2:a8:59:23:12:60:ce:dc:08:34:0a:43:8e:78:
ed:6b:19:f8:13:b4:f2:92:12:d1:7f:d4:51:8a:79:d3:ab:e4:
6c:50:64:9a:b4:41:a9:64:d3:3f:2b:6b:70:8c:e4:85:63:d6:
74:6a:4b:f0:89:2e:4f:e8:90:3a:7c:60:2c:82:63:68:b3:30:
f5:11:85:05:3b:1b:dc:70:aa:01:19:2a:9b:ec:76:6f:3d:cb:
83:5f:cb:a6:70:7b:cc:dd:98:fa:85:eb:ba:21:8f:5d:55:4c:
f7:c6:19:7d:ba:ae:03:a6:6b:2b:d3:16:24:36:96:ef:90:f0:
5e:44:a8:1e:56:4f:2c:e1:4b:46:26:33:c0:b2:d6:78:69:83:
b7:88:71:22:ea:19:88:ca:75:60:b8:82:97:cd:c4:b5:37:31:
b2:c9:05:a9:5b:75:5e:a5:64:4f:f5:e2:4f:95:4f:7b:51:75:
b8:7d:db:8c:82:77:27:a0:92:5d:65:d1:4a:3d:c1:d8:24:19:
69:25:6f:85:a5:48:82:db:06:68:b9:9b:68:2c:70:57:a1:b3:
3a:22:d2:0b:74:1c:d1:3e:9c:24:39:6a:c1:9a:73:8a:01:7a:
61:25:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:45 2026 by rpki-client