Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: FgJy5fzkbEYTYIhPRFF4EF1S9lNI9oIDYVIWFkSRDx0=
Subject key identifier: 33:CE:51:3C:64:FE:FE:8A:56:CD:6A:07:A8:C1:75:9B:6A:17:FE:DD
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 019E1FB5DE38491446973567D4575BA887C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 190D
Signing time: Wed 13 May 2026 05:01:12 +0000
Manifest this update: Wed 13 May 2026 05:01:12 +0000
Manifest next update: Thu 14 May 2026 05:01:12 +0000
Files and hashes: 1: OtqwT00KNG8ocLQ5lsbZa477HJU.roa (hash: 3OLEihhSTZHcEQMRGGKnC6MAqTjm7MFUfykjVMW1buE=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: oLFcyHBvsscD8WXjV+ea0jLkJQ8j4QLtwF7zGwQJwG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:de:38:49:14:46:97:35:67:d4:57:5b:a8:87:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: May 13 05:01:12 2026 GMT
Not After : May 14 05:01:12 2026 GMT
Subject: CN=33ce513c64fefe8a56cd6a07a8c1759b6a17fedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:8e:cc:00:d3:56:bb:0a:c9:a8:34:e3:c4:
e5:85:b4:24:be:c3:39:33:ce:a1:5a:26:cb:87:8c:
6b:2e:be:88:e4:40:ad:a9:18:96:c2:bb:fc:3f:d6:
e5:af:14:b5:a1:66:51:b9:0c:db:e3:a0:20:5a:e0:
0b:ab:14:ae:38:8a:af:1a:9f:85:86:5a:e1:f4:39:
33:70:74:37:33:61:cc:eb:b4:22:02:2e:67:0e:7e:
d0:52:d8:d7:e3:29:86:9f:6e:26:e9:5d:23:83:32:
0e:fa:74:4f:f5:8b:3e:f8:f3:b3:17:50:ba:20:19:
24:fa:d4:d8:1c:3e:9c:93:05:56:0a:c1:86:3f:6b:
92:a5:a2:8c:6d:32:50:f6:39:58:b5:19:5c:87:5f:
84:f6:24:19:ce:f6:91:b4:d6:bc:e4:fc:de:9c:99:
af:5d:45:54:ac:02:0b:a6:c8:6d:c7:a6:ee:34:a2:
09:e0:ec:a8:7d:13:93:ce:0c:20:97:81:0a:21:8d:
09:ee:16:05:08:ed:02:02:19:3c:c7:12:43:cc:a1:
b3:b0:d1:88:6c:8d:20:05:66:b5:5b:c2:f0:8f:6f:
ed:3a:b7:bb:14:ad:59:17:1b:f7:7d:7d:05:d8:fb:
d5:f4:e6:75:8f:e8:2f:56:4a:58:56:71:bd:c5:a2:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:CE:51:3C:64:FE:FE:8A:56:CD:6A:07:A8:C1:75:9B:6A:17:FE:DD
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:3d:e1:a6:b4:03:05:3c:ab:41:73:66:0c:b9:d9:97:09:de:
ab:61:c0:57:ed:25:91:3c:0b:9c:09:88:a6:9c:f6:5a:a9:e6:
bf:25:f7:42:87:bf:47:8c:ff:83:85:9a:96:dd:6a:3c:08:76:
d8:ff:23:65:80:0c:8c:5b:2a:1e:ce:3e:27:09:bc:fc:78:41:
bf:44:a9:d4:b7:f9:79:d2:92:19:50:20:f0:07:5b:c3:a1:d0:
25:7c:03:38:3f:8a:8b:65:92:72:6f:74:3b:cd:98:60:6d:09:
9a:2e:9a:d0:4e:b3:05:c6:c9:03:84:33:32:c8:67:ea:65:6f:
0d:a1:86:03:0a:53:49:74:a9:e8:15:ea:e5:a1:d3:aa:14:7f:
87:49:02:4c:ae:05:d6:23:db:50:bb:09:2f:d0:92:46:f4:79:
58:5c:af:fb:ea:fb:5c:22:9b:72:7f:cf:3b:90:ba:de:72:04:
20:24:e2:cd:91:54:41:a2:fe:5b:30:03:dc:89:e0:f4:fd:78:
01:df:04:87:07:e6:c8:29:78:76:55:99:d4:e4:87:97:f2:65:
29:9a:54:26:7b:c3:1b:47:39:7d:b5:cd:54:7a:c0:96:f4:8e:
3c:94:3d:e4:cb:3d:dd:f7:ee:ba:13:64:3d:70:10:35:6e:b4:
34:59:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:01:38 2026 by rpki-client