Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
File: fciWyziZxbZIjRxGU_ruSyMVHx8.mft (raw, json)
Hash identifier: 3ikQoNHlUzuHg+OH2H+9b/S/DiCfx9wyA6ACqjcXXRA=
Subject key identifier: 41:A9:25:28:A4:58:FA:8A:EA:3D:E7:29:18:40:EE:67:4E:CB:1D:AE
Authority key identifier: 7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
Certificate issuer: /CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Certificate serial: 019E1E354805C3C77BD7FC13327343D485F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 22:01:08 +0000
Manifest this update: Tue 12 May 2026 22:01:08 +0000
Manifest next update: Wed 13 May 2026 22:01:08 +0000
Files and hashes: 1: YKjCiOvrHZHwAoOhLiE4km3LhaQ.roa (hash: XRdYFOkY6v4wv3ww26grBfJ07o8ReOtA69DPcgVZ2KA=)
2: fciWyziZxbZIjRxGU_ruSyMVHx8.crl (hash: ii0eBFV1mA03mWUDubERIm5d5RoT/Th2mffUaxDpC2A=)
3: yF060uWUoglc46_9aiek0Wif5nI.roa (hash: cEbgERmtvG6ESk2oyjnDw4pe0X2ApYpPhYt51QTI0uE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:48:05:c3:c7:7b:d7:fc:13:32:73:43:d4:85:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc896cb3899c5b6488d1c4653faee4b23151f1f
Validity
Not Before: May 12 22:01:08 2026 GMT
Not After : May 13 22:01:08 2026 GMT
Subject: CN=41a92528a458fa8aea3de7291840ee674ecb1dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:c5:fc:51:a1:fa:46:98:74:25:2c:21:1e:
94:bc:e4:a8:67:82:b4:bf:56:08:28:ab:9e:61:b7:
98:93:bb:88:e1:f5:0d:59:b2:5c:96:23:77:bf:13:
16:04:e0:42:62:b1:4f:cf:95:37:cf:1b:35:90:98:
67:d4:f4:9c:b1:dd:ed:5d:3e:71:9a:df:22:2c:0c:
54:d4:20:6a:37:0e:51:ed:a2:d9:61:5f:4a:23:60:
08:c1:be:21:1a:3e:09:96:1d:04:68:47:15:91:6b:
bd:98:f1:ae:4c:71:b9:54:c9:25:1b:37:d0:a1:a8:
88:d8:f5:e3:3b:4f:96:3d:ba:2f:54:1e:57:7d:7c:
2c:d2:ee:72:60:ff:57:e7:6c:49:26:01:7e:7c:18:
b4:e7:13:e3:b3:e8:b5:d4:79:07:66:9f:9d:ee:1c:
28:57:41:2b:4c:40:c4:6d:6f:1a:fb:da:35:43:ff:
20:18:15:71:70:f6:af:ac:22:60:3f:43:37:e9:a4:
b7:44:6a:41:01:0f:ec:39:68:aa:4c:ab:8b:55:da:
ab:de:1e:f7:97:ec:a0:4b:da:04:57:36:0d:1d:07:
ad:7e:97:6c:93:18:cc:e2:31:a7:67:b6:23:3e:13:
47:01:18:e4:b1:4f:62:fb:1e:8b:9b:47:0f:0e:e1:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:25:28:A4:58:FA:8A:EA:3D:E7:29:18:40:EE:67:4E:CB:1D:AE
X509v3 Authority Key Identifier:
keyid:7D:C8:96:CB:38:99:C5:B6:48:8D:1C:46:53:FA:EE:4B:23:15:1F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciWyziZxbZIjRxGU_ruSyMVHx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b592dd-c711-4301-9be5-aef3fcbb7884/1/fciWyziZxbZIjRxGU_ruSyMVHx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f3:56:f1:29:24:81:d4:47:b5:cf:79:d0:7a:18:49:ee:bd:
45:18:43:cb:9a:a0:e4:38:e2:cc:57:54:a3:cb:c5:01:8f:b7:
f7:e5:3b:4c:23:57:b4:60:65:d2:60:8c:d5:2b:d6:fc:77:ff:
cb:4f:db:86:b3:47:74:eb:f5:98:4c:d9:f3:5c:5f:9e:93:36:
44:16:8d:91:a1:bc:05:b0:86:4b:02:20:5a:d1:ea:0b:0a:ee:
c2:45:3d:de:49:b1:b0:9b:ce:b7:f7:75:da:da:89:5d:3b:2f:
6d:6d:95:81:21:4a:93:e6:46:15:88:29:8f:3e:f6:d2:da:57:
f9:5b:b7:0c:fa:42:ae:56:db:c4:74:fb:fb:d7:9d:38:c8:54:
5b:4e:ed:f8:31:88:a8:8c:15:55:06:4e:67:3d:1f:e9:92:84:
88:17:f7:23:a1:1c:c0:ee:00:1a:a7:54:2f:87:ca:13:cc:7d:
14:3a:73:12:22:4d:9a:94:8c:99:6b:c8:2e:67:54:28:2e:28:
67:38:9e:cf:d8:5c:52:7b:da:4f:0b:2b:e4:64:98:d5:bf:4f:
15:cf:69:b2:15:8b:f0:a1:e5:77:d8:ec:23:93:f4:68:c9:8d:
82:50:57:d0:64:68:69:a2:19:db:dd:d3:fe:07:98:2c:16:fe:
6f:15:4c:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNUgFw8d71/wTMnND1IX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYzg5NmNiMzg5OWM1YjY0ODhkMWM0NjUzZmFlZTRiMjMx
NTFmMWYwHhcNMjYwNTEyMjIwMTA4WhcNMjYwNTEzMjIwMTA4WjAzMTEwLwYDVQQD
Eyg0MWE5MjUyOGE0NThmYThhZWEzZGU3MjkxODQwZWU2NzRlY2IxZGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGXF/FGh+kaYdCUsIR6UvOSoZ4K0
v1YIKKueYbeYk7uI4fUNWbJcliN3vxMWBOBCYrFPz5U3zxs1kJhn1PScsd3tXT5x
mt8iLAxU1CBqNw5R7aLZYV9KI2AIwb4hGj4Jlh0EaEcVkWu9mPGuTHG5VMklGzfQ
oaiI2PXjO0+WPbovVB5XfXws0u5yYP9X52xJJgF+fBi05xPjs+i11HkHZp+d7hwo
V0ErTEDEbW8a+9o1Q/8gGBVxcPavrCJgP0M36aS3RGpBAQ/sOWiqTKuLVdqr3h73
l+ygS9oEVzYNHQetfpdskxjM4jGnZ7YjPhNHARjksU9i+x6Lm0cPDuGWKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGpJSikWPqK6j3nKRhA7mdOyx2uMB8GA1UdIwQY
MBaAFH3Ilss4mcW2SI0cRlP67ksjFR8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iNTkyZGQtYzcxMS00MzAxLTliZTUt
YWVmM2ZjYmI3ODg0LzEvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iNTkyZGQtYzcxMS00MzAxLTliZTUtYWVmM2ZjYmI3ODg0
LzEvZmNpV3l6aVp4YlpJalJ4R1VfcnVTeU1WSHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePNW8Skk
gdRHtc950HoYSe69RRhDy5qg5DjizFdUo8vFAY+39+U7TCNXtGBl0mCM1SvW/Hf/
y0/bhrNHdOv1mEzZ81xfnpM2RBaNkaG8BbCGSwIgWtHqCwruwkU93kmxsJvOt/d1
2tqJXTsvbW2VgSFKk+ZGFYgpjz720tpX+Vu3DPpCrlbbxHT7+9edOMhUW07t+DGI
qIwVVQZOZz0f6ZKEiBf3I6EcwO4AGqdUL4fKE8x9FDpzEiJNmpSMmWvILmdUKC4o
Zziez9hcUnvaTwsr5GSY1b9PFc9pshWL8KHld9jsI5P0aMmNglBX0GRoaaIZ293T
/geYLBb+bxVMAQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:22:18 2026 by rpki-client