Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: 7njrlJidUxjcClyMUn94WRYzPxPq4dsDEO/sS1bfVJU=
Subject key identifier: B9:C1:28:43:E2:CB:50:75:A5:D5:1D:C7:A2:BD:36:23:94:B6:5E:CB
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 019E1C7DB5362EC21C2DAFC182083697FC58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 14:01:00 +0000
Manifest this update: Tue 12 May 2026 14:01:00 +0000
Manifest next update: Wed 13 May 2026 14:01:00 +0000
Files and hashes: 1: 4rFM8nRqB3wIzJNdl4Iak_eVuZE.roa (hash: Kwqu0+r6aXX02cJCwND/MQ/S96ntwFBqXiJUoHPSRng=)
2: 8gZUKS9DPrzIKU6t3Ppj9HpjN8s.asa (hash: 5QyuW7GmPubpV6wNPhptkp1H/1cC97GACwQ13UVYU/U=)
3: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: II7Ml4YaprSQiRHv/fZnhSFiByhCLEFwSXOR0lc9DQ4=)
4: PSLB-l9ImRjJYxXtqUzR_0IrtRI.asa (hash: LVEG5N1yX8OBlNGRloySVOQ5WSEHDaxbsgyqrIM+wcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:b5:36:2e:c2:1c:2d:af:c1:82:08:36:97:fc:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: May 12 14:01:00 2026 GMT
Not After : May 13 14:01:00 2026 GMT
Subject: CN=b9c12843e2cb5075a5d51dc7a2bd362394b65ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:57:cd:69:fd:87:74:1a:c2:62:e5:1d:76:
a2:e1:78:8f:11:6f:10:1a:b4:99:fa:01:21:8a:08:
bf:5f:c4:da:63:97:e5:b7:50:54:c8:98:56:1e:7f:
76:a1:99:bc:96:f5:fd:ce:b7:4c:b5:06:1a:a7:9d:
11:cc:3b:56:bf:4e:b6:33:04:b6:b2:66:17:c8:c8:
0b:0f:54:59:c3:51:68:9b:45:fb:b3:46:be:f2:f6:
97:95:84:82:fe:de:78:1e:5c:1d:b6:8f:f8:71:e4:
44:85:e3:37:55:ef:91:ec:83:3d:42:88:c5:71:95:
40:05:f8:17:70:65:fe:8b:a7:d7:fe:df:39:a5:e4:
66:76:28:f2:b7:7d:48:b2:b9:8c:1b:d2:e2:f2:55:
4b:33:da:e4:f7:c4:31:08:96:39:10:96:52:33:29:
76:77:d8:8d:09:1c:0c:ca:d1:9a:9a:36:e3:bb:f0:
b2:7e:04:16:e0:2d:86:1a:fd:26:08:24:af:9e:04:
ff:40:62:e6:5a:bb:5d:e2:f8:d7:9f:9a:d3:69:52:
e6:91:59:96:ea:1b:52:82:17:54:2f:e2:16:67:57:
7a:c8:6b:e4:8d:1c:66:e9:e8:31:a8:76:d9:c6:5b:
63:9a:2a:11:1a:30:72:54:f0:e3:92:43:f3:a5:a7:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C1:28:43:E2:CB:50:75:A5:D5:1D:C7:A2:BD:36:23:94:B6:5E:CB
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a5:39:a2:ab:ee:89:80:63:c2:48:9c:8d:96:cc:43:9b:30:
67:09:a9:e7:72:c1:f4:57:35:55:ab:f1:f3:31:dd:66:f7:10:
35:69:ef:37:72:7a:49:4b:dc:19:61:b0:30:b6:c4:d8:35:9b:
77:e9:4f:74:4a:51:4a:0a:61:9b:f9:fd:04:88:b7:d2:2d:d1:
96:0c:9f:da:16:e9:39:46:76:e4:53:5c:c8:e0:1a:a1:ca:a0:
4b:5b:2c:4e:59:bc:d0:34:8f:5e:ea:5e:06:93:11:49:85:21:
05:9f:10:6a:be:aa:f1:35:33:67:51:9d:15:73:00:6e:f7:ee:
39:9e:54:85:9e:8a:e5:35:36:25:19:07:5d:b3:71:78:20:de:
2d:37:9b:ad:cc:6d:b8:e9:96:44:5f:8b:fd:3d:b0:a8:7a:bf:
6a:b0:b2:c3:a1:d3:5c:b1:65:46:12:29:cb:7b:30:cb:ca:96:
93:91:71:55:d0:2b:dc:7e:86:22:04:20:13:6a:ac:33:27:97:
8f:b8:82:8e:9b:d5:18:45:69:92:33:09:95:07:f5:17:cf:65:
96:f4:aa:bf:28:5e:c9:ed:98:25:79:8c:fb:5f:f6:be:38:89:
fb:84:82:38:e1:c5:7b:3f:09:51:c8:c1:30:41:79:ac:f8:d8:
fe:59:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:44 2026 by rpki-client