Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
File: F4I131NVJtnm1q_2-nrFIpOpLHE.mft (raw, json)
Hash identifier: 5Gx/h1phNQxns4bdQVK8FWd2qRHttCeAaYdVwuRuBcM=
Subject key identifier: 90:72:21:70:F3:D8:9E:BD:B7:A2:9B:74:43:63:E9:60:F7:2F:99:75
Authority key identifier: 17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
Certificate issuer: /CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Certificate serial: 019E1DC78DE2E567CC86D51AFDDDDC7033C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 20:01:17 +0000
Manifest this update: Tue 12 May 2026 20:01:17 +0000
Manifest next update: Wed 13 May 2026 20:01:17 +0000
Files and hashes: 1: F4I131NVJtnm1q_2-nrFIpOpLHE.crl (hash: 4ZtrkjTlsrTVPCLN3angvBKj1qc0wpw/PJ5kLshlaSg=)
2: YJGwIn3Hfn4CXGcIfF5Sqvh4L2U.roa (hash: bxowbJpolM8aC3Tyo8Qe1Sfr/zVg+4jTgjgqaAuFw7k=)
3: nSoKCh55lGMD-7gl54YUpZEK_XE.roa (hash: KtXsJGsRFXBW5jD73l5yCg/b8S+cXBnf2k08FtiPNjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:8d:e2:e5:67:cc:86:d5:1a:fd:dd:dc:70:33:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=178235df535526d9e6d6aff6fa7ac52293a92c71
Validity
Not Before: May 12 20:01:17 2026 GMT
Not After : May 13 20:01:17 2026 GMT
Subject: CN=90722170f3d89ebdb7a29b744363e960f72f9975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5f:59:a3:23:74:e6:c0:78:0b:58:56:7f:8d:
47:b0:fd:d2:e2:7f:d3:32:ea:01:16:07:3b:ae:df:
72:ec:07:ad:80:ea:f1:54:6d:f2:c2:48:6f:16:81:
3c:35:1b:18:0d:70:7b:a6:16:5f:8d:aa:30:ff:a0:
96:28:11:17:70:b3:32:95:77:34:48:c0:35:73:71:
01:f9:f2:ef:6a:57:4f:a8:ce:7f:89:9d:d1:50:a5:
65:27:21:c5:a8:d8:3f:2b:0c:ad:8f:eb:03:90:71:
7b:f4:cf:33:77:47:28:e5:6e:7c:3f:b8:83:9a:4a:
3f:d4:8b:9c:d0:16:64:15:6e:99:a2:98:dd:4a:95:
c0:70:a8:c8:47:58:d6:8b:be:19:36:73:62:2c:58:
e2:5e:db:27:f5:5f:a5:60:88:aa:c0:a3:88:ab:f5:
1d:cf:bd:1c:89:a8:55:8e:51:ab:94:4d:68:b0:59:
29:5f:ff:74:8b:57:54:f3:ba:29:9b:e8:a2:aa:3f:
7c:ed:e2:f7:55:2b:4a:6f:3e:57:e5:c6:83:2c:b8:
21:65:50:14:c3:f4:ff:74:db:74:23:4b:e2:79:9a:
53:a2:ae:32:38:86:36:03:b1:3a:6f:da:61:14:d8:
b0:34:5b:cb:fa:0a:52:91:81:0b:59:6a:97:8e:01:
b7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:21:70:F3:D8:9E:BD:B7:A2:9B:74:43:63:E9:60:F7:2F:99:75
X509v3 Authority Key Identifier:
keyid:17:82:35:DF:53:55:26:D9:E6:D6:AF:F6:FA:7A:C5:22:93:A9:2C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4I131NVJtnm1q_2-nrFIpOpLHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/c383bb-e806-4a6d-a2e8-ee5ca36f1d9a/1/F4I131NVJtnm1q_2-nrFIpOpLHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2c:04:20:6f:05:55:cf:55:5d:56:db:59:01:8a:09:33:d3:
55:42:0a:13:a8:49:4b:96:18:51:01:9c:15:77:a4:37:b3:22:
52:a3:60:4a:ea:10:bb:fa:31:9d:d8:72:80:88:9b:c1:e9:9f:
c5:d2:ab:09:64:e0:ea:fd:92:76:58:87:8e:16:52:d8:fe:56:
19:19:e8:3a:7f:58:e6:e7:45:d2:b6:86:35:19:e6:6b:5b:c4:
0d:b8:0a:5d:99:2c:cc:6b:10:b5:4c:13:dd:33:27:52:8a:b4:
a7:66:a9:01:09:23:c7:9f:91:48:c1:18:4e:bc:cb:c2:2e:4b:
a8:6a:da:5b:3d:b5:56:e8:c0:3d:d1:56:b3:fa:46:55:7d:9d:
c8:20:7b:db:53:ea:f2:eb:5d:fc:9e:f6:4e:f5:bc:6e:54:8f:
9c:86:b7:a2:60:6c:75:7a:ba:5f:89:f9:c9:3f:6c:38:a6:46:
f4:34:b4:8c:70:2e:60:44:b5:fa:fc:58:00:33:34:34:9e:51:
aa:12:3c:39:a0:ac:16:b0:29:6e:6e:b3:78:b8:d2:f1:51:b9:
86:ea:29:9b:06:a7:1a:6b:cc:0a:30:af:fc:0a:2a:4f:fb:c0:
d4:2d:67:95:63:40:ba:8b:37:ab:b9:e2:dd:55:ee:8e:79:8a:
37:9e:92:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:23:52 2026 by rpki-client