Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: GyGti1eRisBJKU+3RBZo+VKwuscVIUB933zzznO+XxQ=
Subject key identifier: 51:89:C5:79:8B:9D:9B:F9:A5:B9:36:9C:E0:50:6C:EA:7C:2A:83:C7
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 019E1FB5BAF6AEB0ABA279AE217592D621B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 14DA
Signing time: Wed 13 May 2026 05:01:04 +0000
Manifest this update: Wed 13 May 2026 05:01:04 +0000
Manifest next update: Thu 14 May 2026 05:01:04 +0000
Files and hashes: 1: ElwaUMINBaBKF34TpTL8haqVd_s.roa (hash: QJTxI54JV9QgQdwNg1CINH9sDRPfJfNrzCHiU/q0Bi0=)
2: PfqFO43KqwDuwV1NwMVNOIpCa7k.roa (hash: KIFfrdCVgjpBo7n8/Wm61/4Xa4EQ0RYR7+7S2nxBq8A=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: cozA3BAkhPNIZhj5EXdKMFupKv71RbMiYpfMWIj7PxQ=)
4: vQlwbAF_mJrGee6i3Zw-aUSbGik.roa (hash: YnOQdMh9a+SzOqx2wFlffeGs61dC4j8qzTkon28Y7Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:ba:f6:ae:b0:ab:a2:79:ae:21:75:92:d6:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: May 13 05:01:04 2026 GMT
Not After : May 14 05:01:04 2026 GMT
Subject: CN=5189c5798b9d9bf9a5b9369ce0506cea7c2a83c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:bc:ac:1b:fe:ab:cc:2d:9b:fa:c1:8d:63:
93:85:a4:36:f3:9e:1e:93:10:8b:2d:de:d1:d7:2a:
11:22:8c:49:07:05:1a:97:ba:f3:5a:83:a9:69:7b:
dd:29:ea:ab:64:13:21:a5:89:7f:83:b8:05:ad:41:
89:5f:5b:8c:dd:fa:ee:a1:ab:ef:78:bc:ea:53:c3:
03:a5:bd:c5:9e:8c:b8:e8:3a:95:43:0b:7e:21:84:
69:66:29:8a:18:52:e7:14:51:01:c6:91:23:77:72:
c7:a2:9c:b2:8f:b3:69:e8:f2:a5:ce:bb:42:91:34:
b3:35:94:bf:92:81:f2:82:82:38:55:76:ac:11:ab:
c0:3e:36:c3:7e:80:52:7b:df:1f:fe:14:dc:3c:39:
0d:59:61:76:45:90:73:82:a4:bc:dc:a4:cc:6c:84:
7c:db:ec:e5:fb:a0:ee:1f:28:7b:24:24:15:64:06:
95:76:af:eb:42:2f:3b:96:84:e9:a2:86:21:e6:29:
a8:11:7e:20:c2:ee:1f:88:34:24:0c:b5:88:0b:5a:
21:6f:fd:5f:f5:1b:bd:10:b0:a6:f8:2f:f5:6d:44:
bb:3c:06:cb:f4:16:8c:cb:59:8b:d2:7f:40:ca:40:
6c:ce:82:b3:5f:a8:4f:54:39:15:85:ad:af:bb:fc:
cd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:89:C5:79:8B:9D:9B:F9:A5:B9:36:9C:E0:50:6C:EA:7C:2A:83:C7
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0c:52:0c:f8:6b:8a:f1:15:e6:ab:e5:02:fe:5a:77:39:ff:
90:7c:f1:2a:21:22:1b:6e:4d:7b:f4:34:cc:f9:97:6d:87:7a:
87:c6:c8:d4:52:0c:ad:6c:26:a9:87:d7:91:65:98:1a:af:78:
f0:92:9e:82:4c:09:6b:db:ed:73:f3:63:4c:92:c8:44:3c:1e:
e7:1b:62:2f:44:b1:3a:ab:b4:5b:22:bc:c8:72:6d:b5:9e:de:
27:4f:7e:5a:aa:55:66:16:83:1d:f5:4e:16:c1:e2:ca:97:68:
df:89:ac:fe:ba:4f:5c:8f:99:96:c1:f5:c1:ad:93:f9:71:69:
b5:9b:e6:29:52:e7:71:8b:9c:be:02:ec:3a:fe:d4:02:a2:d8:
b2:be:bd:de:77:bd:fa:e5:54:98:78:15:4b:d3:52:6d:f7:46:
53:9e:7d:df:06:c3:05:89:26:8e:84:77:58:56:6f:ed:9b:a9:
3e:f5:dd:0e:1c:dd:3a:9d:24:8d:9f:89:20:c2:ff:c4:e3:92:
71:ad:ef:2c:18:7a:fc:de:72:25:f6:e5:2b:e7:ef:b9:ac:ed:
3a:32:ca:f5:54:49:10:9c:d1:33:ce:5d:5c:51:54:bf:04:83:
ef:80:23:b4:0a:42:65:31:32:7f:15:96:7d:46:2d:a0:45:1c:
32:0d:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:34 2026 by rpki-client