Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
File: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft (raw, json)
Hash identifier: uQma67wYX4XRGL86Pb7mysz3EqvFKBn20sl3irPB+oI=
Subject key identifier: 3A:7B:85:24:C2:1C:62:EE:99:4A:7D:E9:AF:29:8B:0A:28:05:7D:C0
Authority key identifier: 88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
Certificate issuer: /CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Certificate serial: 019E1F1192D5E1E91BD3F77E7D60BC4DFDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 02:01:45 +0000
Manifest this update: Wed 13 May 2026 02:01:45 +0000
Manifest next update: Thu 14 May 2026 02:01:45 +0000
Files and hashes: 1: V2AzqvtsquO2cw9xiooW7SvirjM.roa (hash: h2OEkGsDBeZDRJkfmVD2RTlQU+2upNwxujp+DA8KQOg=)
2: iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl (hash: fTsmVSzGSz4LQN76hM0U+KBM3vRs156eL6aQwBpteqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:92:d5:e1:e9:1b:d3:f7:7e:7d:60:bc:4d:fd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88f0c1d10e4e5a71e3cd5c5d6beebf778a06e304
Validity
Not Before: May 13 02:01:45 2026 GMT
Not After : May 14 02:01:45 2026 GMT
Subject: CN=3a7b8524c21c62ee994a7de9af298b0a28057dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:97:a5:6a:c2:7d:a8:82:89:b2:8c:17:05:
90:28:57:49:f2:58:ce:f7:8b:b1:16:97:a0:4a:e0:
53:d2:51:69:31:00:50:34:49:c9:f4:61:f8:49:49:
20:a3:44:40:74:35:e8:25:ef:19:6b:0a:25:70:fa:
0a:38:62:7f:e4:a7:75:87:a7:eb:e6:41:63:03:af:
b8:54:13:fb:90:23:39:30:c7:0e:46:05:cd:e9:bd:
fe:23:67:35:08:63:1f:5c:fa:c0:d0:e3:d0:ad:a6:
d0:c4:f4:ca:86:f8:27:d6:f7:b7:80:4e:f6:9e:1a:
5e:73:11:92:0a:74:eb:f0:49:57:1d:f9:cc:4e:b4:
17:73:6f:de:d1:5d:b8:3e:1e:9e:78:15:1d:40:c8:
82:4c:68:e4:54:fd:9f:1d:09:0e:aa:d4:fc:e9:46:
35:d4:7d:e2:04:2c:29:db:61:61:20:87:8a:6b:43:
c2:73:3b:c4:a6:fb:fa:75:e8:07:9b:3e:23:a0:54:
38:26:b3:f2:7c:e1:0b:50:0a:41:10:a7:ef:19:42:
60:13:0d:f4:50:05:05:03:49:f3:f5:36:8f:dd:e6:
1b:7d:0b:85:58:5b:38:25:6b:e4:23:34:62:2b:63:
31:2d:62:82:8f:f9:55:5c:79:dc:7d:01:b1:77:71:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7B:85:24:C2:1C:62:EE:99:4A:7D:E9:AF:29:8B:0A:28:05:7D:C0
X509v3 Authority Key Identifier:
keyid:88:F0:C1:D1:0E:4E:5A:71:E3:CD:5C:5D:6B:EE:BF:77:8A:06:E3:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/42664a-0f47-49a6-b737-b28df8559529/1/iPDB0Q5OWnHjzVxda-6_d4oG4wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c8:61:7c:d9:21:e0:ba:46:2c:66:6d:43:a6:04:d1:86:09:
84:5c:85:eb:9c:c1:6f:6e:2c:6f:9e:da:5c:b3:f7:ab:62:d2:
de:69:21:c3:ec:09:9d:63:dd:b0:63:f5:0c:80:82:11:ef:65:
59:a9:14:61:2c:39:59:7a:4d:d3:df:5a:2d:f7:d8:18:d3:73:
09:fe:67:ae:c3:88:4c:b6:1e:12:ad:b8:53:b3:d3:94:7c:75:
61:38:e8:10:22:67:84:8b:c9:6c:23:67:4c:a3:cf:0c:8b:f9:
8e:08:87:04:bf:33:76:e8:54:d5:99:97:3e:bc:2d:e1:ea:d9:
47:b8:00:34:a5:22:ee:d5:5c:31:66:2b:df:cf:98:41:d7:62:
d5:a6:9c:38:a9:76:9b:0b:24:68:d1:a8:76:8d:39:6c:c2:a6:
a9:10:d5:89:24:f9:9e:61:2c:c5:38:02:4c:6e:e1:d5:0d:25:
46:a8:a8:b3:2c:88:c2:10:77:81:64:75:5f:82:67:ec:a7:24:
1b:e3:7c:94:40:8a:8a:0c:ef:b3:f5:fd:16:d6:c0:23:5c:18:
27:00:8e:cf:9d:02:3f:fe:58:2f:40:31:39:f5:a4:70:98:e6:
16:68:51:d5:f1:5f:b7:95:41:f1:a8:4d:b7:67:7a:3e:be:b0:
d9:37:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:50 2026 by rpki-client