Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: nWWyAGgJTDVS3BiXqW1pT39gQ20i3NlGO2He4CMU1wA=
Subject key identifier: C7:AB:19:18:9D:2A:32:19:24:5F:3D:95:97:1F:BC:EB:85:36:BA:A1
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019E1F4789FE7620E812A21359C70ABB5751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 03:00:42 +0000
Manifest this update: Wed 13 May 2026 03:00:42 +0000
Manifest next update: Thu 14 May 2026 03:00:42 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: c8QALHPaXi1A2bWAYFFQDRGKCSflvo5tpR18oyFvvYE=)
2: RpCy1JXxo-ZI0wF9fz-fX4KJGZQ.roa (hash: 3/7dLJaax8heeK87EWODxuRiV6OLm+WDskuSJCjvPmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:89:fe:76:20:e8:12:a2:13:59:c7:0a:bb:57:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: May 13 03:00:42 2026 GMT
Not After : May 14 03:00:42 2026 GMT
Subject: CN=c7ab19189d2a3219245f3d95971fbceb8536baa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:d9:2d:48:54:a2:e6:97:bb:5f:6c:e8:de:
8d:37:e1:21:b8:6e:60:ac:5a:98:05:db:5b:78:0b:
74:5e:1d:f8:c2:e4:89:8f:79:95:1b:cc:4e:58:0a:
75:14:b7:bf:e4:62:6d:64:17:6b:e2:09:21:b4:d1:
6b:2d:82:04:7d:ec:50:7b:0f:f8:30:f1:75:48:dd:
00:e6:11:1c:95:18:d0:27:d7:7d:f8:78:a0:e1:84:
f9:ec:ed:f3:d0:17:f4:36:55:fd:8f:af:9a:00:40:
c2:c9:64:a1:61:76:d3:d6:29:0f:ab:ce:21:41:a3:
8b:a6:15:10:f4:5d:c4:99:b2:80:26:3c:e9:84:e9:
43:83:4f:da:e8:48:fa:e4:32:1a:fa:06:cb:05:7d:
f2:03:1b:be:94:fb:75:cf:1c:16:74:0d:46:e7:c1:
58:04:de:b8:98:1c:9a:a4:36:c5:90:53:9e:0c:41:
44:09:90:e2:67:89:7a:b5:4d:98:07:97:90:4b:89:
5c:3a:cb:79:25:5b:08:06:f2:23:cd:13:3a:87:b5:
eb:d5:4d:18:30:fd:22:ac:0e:41:8c:58:85:f9:e1:
b8:15:2a:61:af:77:a2:26:23:3a:69:be:55:f1:61:
25:e9:5a:22:f7:07:71:8e:74:5b:12:68:74:f9:4a:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:19:18:9D:2A:32:19:24:5F:3D:95:97:1F:BC:EB:85:36:BA:A1
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:9d:85:e1:de:1f:4a:cf:fd:b2:c5:d9:ed:06:05:c3:a3:d2:
aa:40:ae:7b:d2:e2:fc:a3:04:47:79:08:ef:3b:76:67:ab:7b:
11:4a:e5:cf:fe:a7:08:46:17:cb:62:fa:82:bb:51:8c:f4:cf:
37:71:54:2b:a1:a7:9e:69:32:86:e0:67:01:44:53:7f:33:c4:
30:ed:f3:5d:3c:ab:92:63:4e:12:5e:90:0e:ed:80:c2:43:a4:
b0:30:fb:a0:02:32:aa:ea:5d:c0:9b:d2:56:c4:fb:dd:26:b1:
ce:08:7d:01:1c:bc:33:b6:e1:ec:d5:4f:fb:a1:dc:a9:3b:aa:
28:78:4b:4a:ff:b3:28:c4:cc:74:3f:a0:5f:e1:3c:61:84:7a:
e6:cf:b9:2a:fe:67:ec:27:b8:88:1c:f9:04:5d:2b:23:47:70:
b7:20:04:0b:88:58:8a:02:c2:81:a6:48:77:f7:67:16:bd:af:
ca:9b:0d:50:81:44:57:08:93:3a:77:5c:d9:01:8f:ec:a8:67:
4c:c0:fb:6e:a4:52:05:44:bd:66:6b:b1:2b:d3:ae:92:02:30:
86:eb:fe:d9:88:2b:3c:eb:e5:d2:8b:91:3b:8b:35:4e:88:1b:
94:db:ce:93:52:a9:91:c3:62:bf:08:f6:cc:5b:a2:a2:4d:6e:
e3:88:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:52 2026 by rpki-client