Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: apt4kkrsDlXHpsTFVYq7+T5Lj/Ps6JHoi09wyll0J7M=
Subject key identifier: 7D:35:D8:9D:74:5C:9F:D1:E0:CE:2B:13:19:91:08:0A:F9:34:AC:2C
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 019E1DFE09AA7CD5ADC7C9DCCBABBFD2DB3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 21:00:48 +0000
Manifest this update: Tue 12 May 2026 21:00:48 +0000
Manifest next update: Wed 13 May 2026 21:00:48 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: toDYf/+kN/+hnrZqJOylFVFq4Xau7mydXfAuYn/ehIA=)
2: 61huzXEr5q5M8J__iIN7IjunhKg.roa (hash: cj477SS4T7qNzSNkI+8mGSK4iNQUtTpYpphXIshKx+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:09:aa:7c:d5:ad:c7:c9:dc:cb:ab:bf:d2:db:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: May 12 21:00:48 2026 GMT
Not After : May 13 21:00:48 2026 GMT
Subject: CN=7d35d89d745c9fd1e0ce2b131991080af934ac2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:c9:98:dc:ba:3d:72:70:32:a0:f3:01:0b:
02:a8:b7:f3:95:46:6a:30:e0:01:6f:b2:46:0c:0d:
e5:4b:c8:fe:a3:22:93:f4:20:f7:77:dc:9a:fe:22:
cd:3a:8c:93:48:ec:94:af:7d:ac:89:23:82:dc:99:
10:09:ac:19:63:44:29:c9:fb:c2:99:6f:b7:73:4d:
48:51:dc:4b:a2:4f:a0:4d:65:51:b6:c2:82:d1:24:
ee:5a:d9:88:4e:2d:e8:01:02:7d:09:c4:4f:f3:9d:
10:90:4d:28:ca:bb:40:9d:89:06:f2:33:5c:a3:1c:
3f:1f:bf:86:77:9b:da:11:1e:20:4f:ea:93:2b:f9:
de:53:47:d0:c6:06:34:00:74:d1:27:d3:b0:ce:24:
cb:50:27:b1:08:35:3a:29:ba:e9:69:48:ac:f1:89:
4a:d7:36:c9:0d:c0:39:f8:c2:4f:9f:77:ee:a2:9c:
7c:53:cc:13:c7:96:79:76:35:48:94:22:e6:df:13:
70:c3:a0:d9:30:c8:d5:3b:79:1e:fa:6c:ef:c0:96:
c3:d7:71:40:fc:b1:c5:bf:c9:f9:e9:01:db:44:2c:
ee:a7:11:ee:e6:26:ce:76:db:9e:45:fa:03:3c:6b:
1f:2e:13:ce:9f:0a:46:08:6d:b4:f7:86:6a:7d:ea:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:D8:9D:74:5C:9F:D1:E0:CE:2B:13:19:91:08:0A:F9:34:AC:2C
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:67:01:90:0a:d1:4e:e0:c2:49:17:ae:04:79:46:46:5f:2c:
ef:29:14:c7:b4:29:95:fa:fa:73:77:96:d9:d8:eb:be:41:3a:
ae:52:3c:c6:4b:e6:39:41:5c:ce:6f:8d:34:f0:00:da:6d:ff:
7f:22:fe:c4:33:36:a9:3b:54:09:1f:c8:fb:8f:f0:03:a3:c3:
17:3c:c4:e0:3a:a9:de:47:fb:55:aa:b2:25:87:e2:c0:5b:c4:
47:df:4a:a9:94:83:0c:c1:64:10:59:22:c0:65:3a:f7:53:34:
d8:ca:39:03:67:78:3d:bc:72:d5:20:d5:cf:a3:8e:d4:5e:f1:
cd:93:62:1a:10:d6:1d:4a:d5:b9:ba:ab:f9:be:8c:30:6a:08:
7f:ec:16:39:1f:b2:a1:01:36:5b:34:44:e7:2b:38:a4:85:99:
ce:7e:9c:7b:2e:15:d5:99:c5:e2:04:0f:47:6e:e7:d7:8d:1a:
72:94:1d:41:16:25:c7:be:a4:af:9e:5c:2b:95:3a:bd:6a:53:
44:d9:2e:99:6e:6b:fa:49:0d:08:83:5d:7a:43:76:ea:76:a1:
7d:48:31:1a:db:81:2e:a6:f1:8f:34:b4:02:20:24:e1:80:75:
6e:91:e7:49:20:01:a7:5c:5b:6b:b7:e0:a7:4a:58:c5:51:54:
63:9e:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:38 2026 by rpki-client