Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: XcBnErhxN+wPgoQkF7TBv505DwMnBElL229Pd1x1nII=
Subject key identifier: AC:3D:9A:1C:41:CD:47:99:67:A3:B6:C1:70:6F:DC:45:B8:48:30:F9
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019E1F7F8201F086E6C92B618B87AEE797D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:01:50 +0000
Manifest this update: Wed 13 May 2026 04:01:50 +0000
Manifest next update: Thu 14 May 2026 04:01:50 +0000
Files and hashes: 1: FKys4Xiow33v_h270A8VpmNDWTw.roa (hash: o4z6GWQar87z6QyuQkA9LK7MGeo2/aW3AYlCX5HnTz4=)
2: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (hash: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: 07UnczMqOy9cg55fV0r+qLqVP//LMxPJ6qIEWynznXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:82:01:f0:86:e6:c9:2b:61:8b:87:ae:e7:97:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: May 13 04:01:50 2026 GMT
Not After : May 14 04:01:50 2026 GMT
Subject: CN=ac3d9a1c41cd479967a3b6c1706fdc45b84830f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:17:2f:84:3b:0b:0c:db:f3:af:cc:bf:3e:
93:4f:e6:f2:e4:06:f2:46:6d:66:e0:b2:4d:34:ae:
a4:f4:3f:29:8c:7e:83:47:8b:d4:9f:70:8d:9b:4d:
23:d3:12:89:aa:19:a1:9b:c7:a7:d8:36:a5:de:d8:
9f:9f:37:8d:50:26:8c:b6:ed:57:87:fc:92:36:31:
dd:02:87:bd:d5:1c:0b:8c:8c:57:24:fe:90:6b:7c:
ca:1f:4d:9d:93:8b:6b:58:a6:5c:c1:46:3b:a2:25:
5b:2b:f7:04:ac:19:c9:77:27:27:56:ec:df:01:b5:
c0:d2:a4:74:5c:cc:cb:fe:f1:13:79:f2:aa:8b:6b:
4a:b4:01:9c:a7:5e:f6:5c:38:94:3f:8c:1d:cc:63:
af:a3:91:88:01:66:46:8a:d5:5b:4a:ee:0b:42:ed:
7d:fc:16:ee:55:0b:20:65:78:c1:33:1c:8f:ef:23:
1c:8b:6e:a0:04:c5:28:b9:ef:2e:a4:bc:51:73:93:
3a:12:ea:f9:38:ac:91:b1:7e:fb:d3:4f:30:a4:6f:
e7:a0:bb:ac:33:62:71:61:a0:17:1b:ee:66:78:3c:
91:b1:84:6a:96:3e:f9:bf:34:fd:75:01:74:82:bd:
4b:6c:96:88:24:e9:3a:65:e9:98:bd:56:59:f5:15:
48:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:9A:1C:41:CD:47:99:67:A3:B6:C1:70:6F:DC:45:B8:48:30:F9
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:66:49:5a:ad:bc:43:d8:b7:44:47:c1:fd:6c:18:ce:16:87:
af:e0:97:69:a2:6a:34:76:b7:48:3d:d0:37:63:47:c4:2d:5d:
7f:b1:4b:70:79:92:a5:e1:17:71:9c:91:5b:12:16:f7:fa:ff:
e1:93:9e:c9:77:c3:45:31:5d:82:d6:dd:40:3d:c9:a0:b4:78:
60:5d:1c:c1:d0:f7:af:8a:6b:18:64:0e:9c:d9:0b:aa:c8:9f:
9b:b5:10:a2:24:a9:a1:fa:b4:71:a8:c1:fb:c0:a1:13:a0:14:
18:43:33:d9:dc:29:64:97:a1:63:4a:3f:77:c4:57:7b:f6:13:
2e:7f:61:2f:10:40:83:09:ba:34:f6:ee:11:4a:28:3f:d9:25:
20:97:f6:ba:94:12:ed:40:01:48:d7:5f:b9:9e:ae:87:dd:51:
ab:32:02:62:4a:65:7b:1b:b5:c1:f3:b5:7e:9f:f0:73:80:d9:
0a:49:77:e5:6a:f6:ab:37:8f:88:02:ed:8b:11:0a:91:e9:25:
63:10:41:9c:0b:f6:0b:6d:17:56:2f:bd:17:e9:2f:9e:34:01:
d3:d7:f7:a8:1a:dd:68:85:c1:69:9c:de:4f:88:fe:39:10:e4:
16:9f:b7:49:fa:3a:db:8e:14:d2:44:98:cf:1f:a5:ce:b3:98:
3c:53:6a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:07 2026 by rpki-client