Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
File: CDC8NLj0_Lwr9SO72-mgRKJEX74.mft (raw, json)
Hash identifier: tVZI1NtUYz1cdFzGpxw09f7IXyaL8231oin/1CMYucw=
Subject key identifier: AB:E2:6D:93:52:6F:7E:BA:06:FE:8D:C2:4A:8F:79:C0:2D:99:1C:13
Authority key identifier: 08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
Certificate issuer: /CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Certificate serial: 019E1CEBC41320008AB80CBB4B147E8C793C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:01:13 +0000
Manifest this update: Tue 12 May 2026 16:01:13 +0000
Manifest next update: Wed 13 May 2026 16:01:13 +0000
Files and hashes: 1: CDC8NLj0_Lwr9SO72-mgRKJEX74.crl (hash: TXBgjjz2Xs0AgFAKNMjGSkxEX6OfRZH1eRb5T0cj4rs=)
2: y6SgGqUwF1orCwM1q_h9gF5lwzg.roa (hash: sM80+3geVpyNrctiYCuONPPHQwPp/qBYWg1fQR5qB4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c4:13:20:00:8a:b8:0c:bb:4b:14:7e:8c:79:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0830bc34b8f4fcbc2bf523bbdbe9a044a2445fbe
Validity
Not Before: May 12 16:01:13 2026 GMT
Not After : May 13 16:01:13 2026 GMT
Subject: CN=abe26d93526f7eba06fe8dc24a8f79c02d991c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:11:16:29:ab:4b:7d:3d:5e:9b:a5:fd:04:
05:ed:0a:df:ba:96:b2:2f:d4:3c:04:5f:b4:b4:85:
a7:cb:72:84:65:12:9e:6f:60:38:4b:7b:c1:36:5d:
d7:9e:71:ad:db:8d:71:d7:23:82:fe:d5:87:db:5e:
02:2f:7c:49:46:36:3a:e7:1d:de:9b:d0:3a:f9:95:
46:66:2b:17:8b:93:3b:70:01:ef:2c:0e:84:b8:d3:
c4:48:10:85:3c:a4:b5:7b:be:bf:cb:26:cb:54:48:
7d:fe:b1:76:85:f3:f5:59:50:04:11:a8:e6:bd:85:
18:94:a7:db:0c:c1:b2:41:ee:81:66:fe:a3:28:04:
17:90:fe:02:23:37:7f:19:b1:50:13:7c:46:0e:0b:
2b:e2:27:6e:95:a0:d5:b7:4d:6a:f7:9a:f4:9c:79:
8c:dd:1c:84:ba:13:a8:2c:1c:de:1a:56:0d:b1:8f:
00:67:ef:db:e8:0f:1a:75:94:93:05:c9:2d:47:19:
25:17:31:4f:61:d2:3f:53:5c:de:5c:76:94:f4:54:
36:61:e4:7f:9b:1b:17:9b:bf:1c:59:7b:39:df:d3:
15:a3:bb:39:59:84:f7:dc:9e:10:0d:13:af:c1:2e:
c1:2c:b4:0c:b4:0a:12:17:3a:cb:e2:f0:6d:50:3f:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E2:6D:93:52:6F:7E:BA:06:FE:8D:C2:4A:8F:79:C0:2D:99:1C:13
X509v3 Authority Key Identifier:
keyid:08:30:BC:34:B8:F4:FC:BC:2B:F5:23:BB:DB:E9:A0:44:A2:44:5F:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDC8NLj0_Lwr9SO72-mgRKJEX74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3fa36d-8faf-4bdc-ad9e-013c1f01edb9/1/CDC8NLj0_Lwr9SO72-mgRKJEX74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b8:24:ef:2c:12:41:3a:fc:75:db:2b:e1:5e:41:4b:db:aa:
b2:03:15:ec:06:df:14:e0:b0:0d:3d:1a:6c:75:cc:e9:fa:b5:
82:47:23:6d:12:28:41:d0:eb:79:5a:31:5f:28:78:d0:51:67:
8e:cf:ae:86:b0:d2:be:07:99:e9:93:15:9d:d8:49:4c:8d:04:
08:79:44:c0:0e:bb:19:20:0b:a6:20:52:c3:1d:ef:3e:9f:9d:
ed:60:f5:b6:e3:d2:e0:46:a2:e7:0d:25:58:cb:6a:4f:8f:f1:
93:ef:8e:d2:d0:1d:8b:42:aa:ee:f3:35:35:41:53:f8:cd:30:
b2:12:2f:9c:c6:e9:8b:9a:0c:cc:d1:81:40:0e:4a:33:c7:4b:
94:05:0f:e4:39:c4:f7:b3:92:b5:65:a9:ff:82:00:47:77:1e:
1a:3f:69:78:54:ad:fc:64:de:b5:fb:e7:d4:f3:51:5c:c8:b2:
90:ef:21:b1:b2:ac:e6:e6:82:f3:e2:ff:b6:fb:37:7d:be:a5:
bf:0d:b2:da:ee:04:46:e3:d8:9f:45:d7:ed:80:40:33:61:7a:
88:d8:89:8d:f9:9b:d0:31:5e:5d:7e:85:92:e4:08:d5:3d:af:
13:7c:c1:16:2b:38:0d:f8:f7:12:77:e8:67:8a:7a:a6:30:2f:
f2:40:83:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:00 2026 by rpki-client