Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: Q1GLfQsHBMR4FJ+58LQgUCLnOZzEJxeGsPtQR/Lmr2c=
Subject key identifier: 1A:0A:66:48:8D:20:96:11:44:4A:DF:F9:82:23:62:5F:FA:7A:64:32
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 019E216D93E66513EF9208AB1F575D4CC488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 13:01:29 +0000
Manifest this update: Wed 13 May 2026 13:01:29 +0000
Manifest next update: Thu 14 May 2026 13:01:29 +0000
Files and hashes: 1: GsOQ3vHLALBSt2vVQO29hA2BDVs.roa (hash: aWsUfnYc/JWm4k92bPXDyfEmKfbouMQNVW8ooA99juw=)
2: gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa (hash: 8UqEhKXsnSJXNjsmPY0ghzVvMiK8gZZNf/NDxzYBX1Y=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: XVGdFraphrlGqREHsP/vroUjxNhlHf1/0o/2k0kffDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:93:e6:65:13:ef:92:08:ab:1f:57:5d:4c:c4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: May 13 13:01:29 2026 GMT
Not After : May 14 13:01:29 2026 GMT
Subject: CN=1a0a66488d209611444adff98223625ffa7a6432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:31:21:8c:de:73:b1:5a:df:9b:f1:85:fa:
e5:4c:fd:c1:5d:78:39:c2:27:ec:b2:92:3c:79:62:
70:e5:db:4b:2c:b6:30:27:2c:6e:d0:62:e6:8a:1d:
4a:3f:e0:4c:94:9d:cf:cb:38:87:b8:0c:9d:2a:99:
87:52:9a:55:ff:63:73:e6:1f:47:2e:03:e0:d8:df:
4b:dd:47:93:69:52:a2:ab:c4:51:8f:77:02:22:bd:
61:4e:f5:18:d6:37:82:40:91:a4:88:4b:1b:6a:9e:
e5:15:26:1a:52:09:13:26:b3:68:b6:2d:90:84:c5:
ec:c0:ea:a9:fc:e7:53:50:7f:9a:3a:e4:49:b8:fa:
9a:d7:d3:6f:f5:5b:3e:12:46:7c:40:b0:5d:6f:15:
99:b6:9f:30:67:75:6f:e7:cd:a8:3e:cf:e0:96:a9:
2d:bd:e9:c0:80:1f:e4:b6:72:38:31:9d:cc:e1:4b:
fb:a3:7d:4a:d9:25:1d:79:00:70:e9:3e:4e:a1:67:
57:21:8a:9e:15:65:c0:6f:4b:4e:04:0d:ba:a0:18:
e9:66:8f:b4:18:c0:df:89:b0:54:a8:92:56:aa:54:
ea:99:f7:00:aa:e9:c9:53:e3:5a:d5:54:d5:65:3f:
7b:12:75:97:be:42:a7:a1:28:f4:e7:e3:77:bc:54:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0A:66:48:8D:20:96:11:44:4A:DF:F9:82:23:62:5F:FA:7A:64:32
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dd:58:7b:0a:ac:84:5e:95:b4:83:12:2e:0e:8b:c0:60:72:
f7:01:55:81:f3:8a:3c:94:67:9d:4b:fb:8c:ba:45:0e:88:b5:
6e:9a:51:bd:3f:09:db:5d:23:2b:34:0a:8e:8d:3b:88:39:27:
92:52:90:c3:b1:2b:38:e9:e1:96:14:bc:26:8c:d2:e6:4d:bd:
46:e0:7d:e6:16:76:f5:92:22:f4:ae:43:50:2c:32:cf:2e:fc:
b5:cf:58:1f:b7:e6:f3:57:4c:b5:0c:eb:1f:7c:ce:fe:4d:6a:
5c:e7:89:6e:b2:f0:e3:42:16:8f:b1:83:07:10:c3:64:c3:ae:
49:57:bb:20:43:ca:43:be:56:9c:98:2f:1d:17:4c:44:67:b2:
3a:2a:6e:b8:05:4a:89:54:a9:b9:c3:f4:ef:29:c1:4b:75:ac:
88:70:3f:c8:1b:3e:0c:03:82:d3:ee:2c:0e:63:8c:03:72:e7:
b7:33:b7:1b:e8:76:cc:05:05:15:e0:91:04:50:2b:35:14:45:
6a:5a:28:4c:c6:3c:13:0d:f5:5a:fd:23:e9:d5:c9:0b:9f:27:
9b:9b:e1:03:0b:10:b6:ec:8a:83:be:5b:52:a0:b8:37:a9:87:
ea:c9:9c:18:cd:bd:72:0e:ac:80:72:04:58:60:4b:25:1c:26:
99:f9:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:55:59 2026 by rpki-client