Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: Y5y3lVd0DV1t9TkgiLm0+grh4Ybk6ND4WR3Gqm+RmYw=
Subject key identifier: 26:EC:ED:0D:23:A8:E3:1C:A2:4B:B2:9F:9A:6D:96:36:65:E2:73:28
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 019E1EA4084D3D57BA8DCD0BC2431FE8B01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 00:02:06 +0000
Manifest this update: Wed 13 May 2026 00:02:06 +0000
Manifest next update: Thu 14 May 2026 00:02:06 +0000
Files and hashes: 1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: 1FvAykHUjBC3pn8+yuR6a4ahp3VH6VLjm8dKm5qDZUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a4:08:4d:3d:57:ba:8d:cd:0b:c2:43:1f:e8:b0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: May 13 00:02:06 2026 GMT
Not After : May 14 00:02:06 2026 GMT
Subject: CN=26eced0d23a8e31ca24bb29f9a6d963665e27328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:d8:49:d1:46:ca:17:aa:dc:d9:77:15:f3:
e4:73:57:48:df:58:47:e4:33:42:b8:be:78:65:c2:
60:57:73:66:23:b3:c7:de:d6:a6:75:f6:26:fd:35:
7b:b7:fe:9a:b8:1b:2f:56:73:60:4e:aa:eb:5e:6a:
c6:f8:c9:be:24:44:d6:70:01:dc:02:df:87:09:03:
81:82:d9:35:00:dc:65:f8:8c:1d:5a:ac:03:f0:02:
1a:79:d1:e6:4a:ef:60:36:3d:2a:f3:25:90:05:0c:
da:9f:79:6c:49:94:31:b2:81:bf:d7:4c:05:32:78:
64:e9:39:6e:2c:2a:0e:3f:82:11:44:a8:56:ae:1c:
10:7f:f6:bb:a1:20:d2:68:b8:3f:1f:38:a9:fe:ae:
2f:92:9f:5f:fa:a9:9a:3c:3e:df:d4:f3:d1:11:1d:
f9:a3:2e:53:9a:5a:71:23:68:35:1d:d9:19:b2:ea:
78:1c:69:95:f3:f2:27:a9:cf:4d:39:7f:a6:aa:db:
c1:77:47:ad:75:ce:b1:29:e3:09:65:48:e2:1b:86:
cb:01:66:28:b3:c0:d6:f0:96:2c:47:3a:f6:be:03:
c1:18:a5:09:a7:dd:9e:eb:b2:1f:29:2f:b2:ef:dc:
2a:bf:1f:b0:c4:29:f0:a4:cb:9d:69:43:70:a0:a1:
52:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EC:ED:0D:23:A8:E3:1C:A2:4B:B2:9F:9A:6D:96:36:65:E2:73:28
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:47:cc:a8:dc:84:21:d6:fe:ee:bb:a7:bd:13:9c:13:18:63:
46:66:dd:98:29:60:42:7c:b9:21:d1:29:1c:32:b3:0c:da:47:
fa:5a:9e:e1:fb:07:3b:e1:59:28:ec:53:c4:4d:42:5d:2a:e1:
60:0b:82:a4:3c:32:6c:7c:93:8d:f2:0e:aa:71:07:b2:55:d7:
80:f7:4d:e9:bf:8b:22:1b:67:f8:b7:30:c6:90:b6:12:19:97:
02:68:61:40:39:82:02:fd:15:b3:9e:22:77:7b:f4:85:2c:fb:
fa:72:76:6c:18:6f:bf:57:5a:3e:6d:0c:b0:7a:98:49:ae:89:
db:d6:80:56:02:bc:77:26:36:0d:01:8f:66:34:52:77:06:fc:
87:9a:e4:64:8a:26:bd:54:e2:08:f3:72:3d:7c:e1:de:d9:2b:
91:31:d0:4e:95:18:5c:30:d0:74:77:a0:90:0e:d9:d3:41:36:
9a:5b:72:dd:1a:fb:f2:c1:b6:4e:98:f1:ec:3d:61:b7:de:89:
f6:88:25:d7:47:fe:62:21:18:96:60:cb:a6:fa:cd:2e:19:19:
bf:a3:8f:ac:16:5f:ab:6e:1c:f4:ea:af:51:56:ca:f6:95:6f:
7b:a6:f1:d1:44:b6:e7:3d:d3:1a:41:0a:df:14:75:ae:13:fd:
67:3c:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:48 2026 by rpki-client