Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
File: 20GLzzGUMXucKIEZMZb-tZj9nu4.mft (raw, json)
Hash identifier: MnexhYXHeslZkNoO5CEXxsLjFr/3s/m8JMxQj7mf/gE=
Subject key identifier: DB:DA:3F:55:C7:03:3F:89:02:71:AE:80:0B:E8:E8:D8:AB:64:3E:D7
Authority key identifier: DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
Certificate issuer: /CN=db418bcf3194317b9c2881193196feb598fd9eee
Certificate serial: 019E1DC716C6E19FFB9514705C7362C5B7A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 20:00:47 +0000
Manifest this update: Tue 12 May 2026 20:00:47 +0000
Manifest next update: Wed 13 May 2026 20:00:47 +0000
Files and hashes: 1: 20GLzzGUMXucKIEZMZb-tZj9nu4.crl (hash: m2unRl0YYK3jD/TYw0KlUj7m8qws1Liu82vnXHHH1Gw=)
2: oT3Rxl2OFf4kaJDbTi8hc1n-RvM.roa (hash: U0lf5akSoaRZ7m2KsTwFQy8jypSmGTV7L8sismPyTHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:16:c6:e1:9f:fb:95:14:70:5c:73:62:c5:b7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db418bcf3194317b9c2881193196feb598fd9eee
Validity
Not Before: May 12 20:00:47 2026 GMT
Not After : May 13 20:00:47 2026 GMT
Subject: CN=dbda3f55c7033f890271ae800be8e8d8ab643ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:5f:00:df:f4:a6:df:82:4a:56:cb:27:b6:
ec:45:a0:41:5b:11:6e:13:0e:b9:09:e5:63:00:7d:
60:42:51:d1:e0:79:8f:7c:f7:7d:5c:03:11:0b:3d:
83:f5:3e:0f:43:05:20:8b:4e:48:cc:43:9c:a2:2a:
71:7c:75:b3:e8:9d:33:05:93:55:69:3f:a3:49:2d:
68:30:35:32:d8:38:f7:08:45:56:0e:b2:a4:2b:3f:
18:00:0c:4f:11:b0:f1:0c:70:4d:9c:7c:87:04:1f:
7b:bc:66:4c:f7:1e:89:de:ed:45:79:9f:06:d0:e2:
10:83:2d:d7:0c:6b:0e:f2:1d:e6:0b:fa:f9:e2:5e:
07:c9:00:d3:48:c0:e3:db:88:ce:a7:04:4e:fa:f1:
a1:60:94:c8:7c:cf:08:0c:99:af:9b:18:64:e2:a8:
ed:10:5a:c8:e3:de:f0:d1:b5:cb:f3:3e:c4:a3:5a:
dc:34:5b:1f:37:93:ba:7b:eb:24:47:53:22:54:a7:
fe:0d:ca:ea:99:a6:30:3a:73:29:5b:2a:df:e1:0b:
b6:2b:7c:95:79:a5:a4:00:15:bb:46:2d:7b:3c:57:
cd:e9:b6:4f:f7:9d:a3:3f:5b:7f:69:f9:a1:00:73:
26:94:31:2a:ac:4e:05:43:06:2c:9b:da:35:7c:3b:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:DA:3F:55:C7:03:3F:89:02:71:AE:80:0B:E8:E8:D8:AB:64:3E:D7
X509v3 Authority Key Identifier:
keyid:DB:41:8B:CF:31:94:31:7B:9C:28:81:19:31:96:FE:B5:98:FD:9E:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20GLzzGUMXucKIEZMZb-tZj9nu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b897ad-5d41-40a2-90c3-e29ee3d91395/1/20GLzzGUMXucKIEZMZb-tZj9nu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a2:71:e2:32:f6:9f:44:55:4d:03:55:92:57:83:8f:ed:1f:
57:dd:3a:ff:41:3b:b7:49:54:07:b2:73:f6:88:6c:4b:42:16:
42:09:1b:69:ec:93:9f:b5:bf:3d:ff:dc:1e:3c:a2:ab:73:5d:
21:f2:13:f5:88:05:d4:0b:19:69:60:ed:99:1e:d7:06:bc:09:
af:b5:29:d4:7f:97:25:59:9c:ff:ab:4b:2d:d9:ea:1c:8b:27:
12:38:08:a0:e4:60:fd:00:64:08:32:3b:3b:ec:06:ae:52:f0:
1b:39:f4:30:12:3a:7f:16:3f:87:0e:ec:f5:8a:3d:34:76:d5:
ef:3c:7a:de:5e:c1:82:75:29:40:b8:20:6b:90:45:93:e7:f8:
76:b2:d2:c8:a9:51:6c:91:28:29:76:b5:02:37:3b:a5:73:a3:
dc:e6:4d:3e:36:31:6a:bd:af:be:4b:af:52:94:8d:a8:eb:c7:
1a:83:87:1f:4f:ab:39:a7:bb:6c:6d:96:ff:b7:21:3c:13:7d:
36:e3:83:ca:ed:79:68:1c:b2:8b:ed:46:ae:26:31:db:ad:38:
f1:cc:08:31:38:d4:95:48:e0:70:72:c1:ab:1b:96:91:79:a4:
a5:7e:a4:3e:12:1b:b8:3c:0d:bf:d3:c1:f1:e6:ae:ac:36:8c:
c5:1e:e6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:23:00 2026 by rpki-client