Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json)
Hash identifier: O2kxLM+68arHNbo+mzyi2SA6mtZw5Er20jX+l7waZA0=
Subject key identifier: 65:79:D6:D5:BA:5A:7B:23:82:4A:60:7E:41:7B:68:70:A8:79:50:9E
Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Certificate serial: 019E1C0FB13B55C33CAC2A1DEAC4CEC8A2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
Manifest number: 192F
Signing time: Tue 12 May 2026 12:00:50 +0000
Manifest this update: Tue 12 May 2026 12:00:50 +0000
Manifest next update: Wed 13 May 2026 12:00:50 +0000
Files and hashes: 1: 7RRyo5mrSZHKaCfweZimJC0UI0A.roa (hash: LQwFNkqaemk7BQFWfMSkrEO4PRaAlztizBh/5pehkzc=)
2: bXeDjlFQZxCvvfoeElvquanHuZA.roa (hash: RDVCaZsRUDJaMXpntgU8V0AZhyelN+TpLVWyUrhvuTY=)
3: bc0mGww2GImeLw53tIRJtqt1goo.asa (hash: sLme9hQtgnCHpEldpCRLHVOEKrZFO2bAZpniqL80jV4=)
4: cduC2GbU6mLXIEEHAt29JqjeJ_c.roa (hash: sBtHQn0mqBf5vLWH/WxAyxQgtkjINRc/CcTzUpuSllU=)
5: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: Ez6LZcHoHevDMcvEc9KDcGnaj4eUIjGE5PkXLrNWXs8=)
6: pkUUzqA3QbThc7oqdUnjxN9QYMU.roa (hash: RswzhGW9W7Aa5lMfftJP3fP15HlpGxcfnXUCf1iUSNg=)
7: uGGHB9Av3_ThaGzwH8xxsyY9IAk.roa (hash: EQLCZ4pDh+GlnlGdR0v0R9xaKh+vfEuApMYZeBAUdys=)
8: zOPM5DQVOuL2gxGFfQ2OogcDlag.roa (hash: TZhWdIY554lkmlZSQhc2076I8ib8niBs3eBXmmFEKfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:b1:3b:55:c3:3c:ac:2a:1d:ea:c4:ce:c8:a2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7
Validity
Not Before: May 12 12:00:50 2026 GMT
Not After : May 13 12:00:50 2026 GMT
Subject: CN=6579d6d5ba5a7b23824a607e417b6870a879509e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6e:84:66:68:6f:54:27:96:6a:9c:e5:0a:88:
1a:81:d5:52:b4:89:c4:5e:12:a2:7c:e1:af:fd:00:
ed:a3:c4:e1:c7:fd:66:72:4f:a8:59:ca:85:66:b6:
20:f8:de:a4:57:0f:fe:36:c4:ae:2b:af:6f:e7:62:
ab:bb:db:6e:f2:fb:36:51:f8:26:42:07:a0:02:58:
96:8a:eb:ba:85:b7:37:12:16:1f:3a:ed:e3:f1:89:
27:cc:a5:d6:5e:80:e1:24:c6:31:cf:14:7a:10:9a:
ef:e2:99:e7:e4:f4:96:25:de:c0:42:40:0d:79:e7:
cf:33:e0:77:20:02:a5:33:e1:87:1e:70:71:98:70:
02:85:84:54:eb:5e:05:86:6c:c4:f7:85:b6:0a:ee:
1a:13:b9:cc:99:e1:75:ef:dd:da:38:0e:fb:ea:bb:
3d:6c:9d:d8:f0:22:62:64:bf:27:d8:46:4d:84:26:
f2:e4:01:61:50:d2:77:a3:69:d2:fd:39:55:67:09:
21:7c:fa:94:49:5d:1e:d5:e7:e9:87:69:93:77:7e:
0d:d7:cd:ef:63:ec:ea:0f:2e:5c:68:32:86:d5:0d:
fc:69:5e:6b:b6:12:c8:66:8d:92:4f:4b:55:10:3b:
07:e9:38:7c:ae:a3:ec:c0:37:11:24:86:a7:f7:97:
72:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:79:D6:D5:BA:5A:7B:23:82:4A:60:7E:41:7B:68:70:A8:79:50:9E
X509v3 Authority Key Identifier:
keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:68:60:6f:2c:af:5f:c6:e1:3d:18:2d:59:34:f4:fe:ca:5d:
d3:82:cd:c3:b2:15:f7:23:59:99:f7:4b:75:b7:2c:9d:b1:76:
23:9c:55:cc:3e:34:be:2d:09:b5:a4:db:2f:93:c0:8a:88:84:
74:25:d3:d6:44:18:42:b1:7b:9e:1a:2d:1f:9b:9b:17:e8:5e:
0b:04:13:2c:11:f1:91:9a:2e:6f:39:d8:aa:b1:ed:4d:66:05:
2b:8e:0c:cc:0f:42:7e:e9:5c:59:04:51:9e:9e:f8:db:e0:f3:
e7:2f:71:df:5b:6d:8a:10:cc:b1:ea:9e:03:71:74:37:10:97:
bb:97:f8:32:c8:df:fa:fa:c8:a7:8d:0b:0c:0d:f1:76:eb:50:
9f:4a:3d:5e:20:ae:e1:62:36:2f:2e:c8:0d:f8:f3:ee:d2:c0:
7d:dc:ac:55:0b:fb:32:c7:b1:c2:59:20:d4:0e:e4:dd:c3:94:
f3:9f:01:72:1c:fc:99:66:1f:05:4c:84:66:f2:17:8c:70:d2:
1f:d7:d9:21:02:74:4b:38:06:0b:c3:c1:8a:64:49:8a:75:99:
f2:64:83:ad:fb:95:aa:3a:f6:7d:a6:6c:29:dd:3a:e5:86:b5:
0a:4c:6d:36:d0:ac:71:c3:a3:c0:0a:da:61:c0:98:c6:e0:95:
4b:12:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:30 2026 by rpki-client