Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File: R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier: /It7x3e8lsUDXIHgCmEwCV+/i+E+AFSIhCbh4peo4p8=
Subject key identifier: BA:AD:64:7F:D7:ED:42:A4:75:47:92:04:40:8A:06:AB:FF:C3:9E:DA
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 019E1F7EA52E421DA3A3D239831EEB34710B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number: 190F
Signing time: Wed 13 May 2026 04:00:53 +0000
Manifest this update: Wed 13 May 2026 04:00:53 +0000
Manifest next update: Thu 14 May 2026 04:00:53 +0000
Files and hashes: 1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: x1djMOlk/xD/IYsLjzron6pQLaOGzqxZ3omRWfbuc+E=)
4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:a5:2e:42:1d:a3:a3:d2:39:83:1e:eb:34:71:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: May 13 04:00:53 2026 GMT
Not After : May 14 04:00:53 2026 GMT
Subject: CN=baad647fd7ed42a475479204408a06abffc39eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:77:c6:cc:66:3a:b0:6e:33:5d:c0:7a:50:
91:75:d3:f2:82:d0:58:e8:19:c0:1f:92:c9:57:8d:
5d:77:d5:0d:a7:a5:cf:89:d7:5d:ad:ad:b4:f5:80:
72:e3:e3:cc:08:bd:31:a5:e9:67:76:d2:08:8a:1b:
76:56:0b:ce:b3:b8:b6:67:2b:7a:47:55:e8:31:f8:
90:52:34:34:8d:f8:aa:93:bb:20:3d:31:ff:45:86:
b7:9e:2b:2c:da:f8:63:46:12:3c:f6:33:44:5d:8d:
d5:3a:98:3c:6a:0c:e2:ed:d5:c3:0c:24:67:8a:1c:
58:25:03:59:37:4b:c6:a2:04:9a:5f:3b:90:a7:25:
51:02:f5:33:0a:8e:8b:11:05:6c:a3:7d:35:2b:8e:
14:2c:3c:3d:e0:6b:c6:8e:da:93:12:a8:ae:cb:5f:
c4:ce:79:11:dd:2a:f5:61:0e:85:be:dd:51:95:e2:
d1:91:66:3e:9b:30:90:e1:f6:8f:1f:02:0a:37:d3:
df:f3:99:24:50:70:30:80:9e:97:2a:f9:79:d3:e3:
ed:ef:89:59:bc:5d:24:db:57:00:3b:e6:55:ea:01:
1c:07:0a:4d:24:13:cb:0c:95:ce:24:47:6d:ad:e7:
10:fa:5d:4d:e7:79:5a:ea:41:a9:8a:33:7b:ad:d5:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:64:7F:D7:ED:42:A4:75:47:92:04:40:8A:06:AB:FF:C3:9E:DA
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:28:a0:af:ae:68:d9:8d:f9:b2:c7:d5:b1:f1:7f:86:57:aa:
18:bb:f4:92:97:a8:84:b2:8a:16:15:72:ae:1b:7e:8e:03:e8:
11:05:68:75:59:32:bb:71:9e:f5:af:2d:dd:26:b0:8e:cc:58:
b8:99:da:b4:ea:e0:16:c0:c8:65:49:9a:79:db:25:01:55:8b:
83:f4:0a:d9:6a:e8:3b:0e:90:1f:21:da:c1:82:8d:56:09:61:
f7:0e:58:ce:94:02:75:df:a8:fd:a8:32:24:b1:cc:1c:37:1f:
1d:ce:84:e5:e2:c4:6b:44:cd:00:d2:e8:28:99:b8:a2:aa:f5:
f5:db:ca:4e:57:4e:31:87:cf:84:e3:3b:29:0f:ae:f3:53:34:
03:81:d3:85:5f:d5:7e:12:55:52:5b:2d:3f:ae:e5:76:be:fa:
d1:cb:29:e8:ed:fd:52:c3:29:6c:c9:45:d8:d8:65:d4:ef:7d:
62:b5:57:cf:cc:35:c3:de:86:e8:ee:fa:32:c1:03:b0:40:1f:
e8:90:c5:97:55:88:89:11:ac:18:80:8d:8e:f5:80:55:c7:81:
92:f7:44:a5:3d:d4:07:39:2f:07:9c:65:2c:de:3f:b3:8c:58:
ab:72:61:84:c1:fa:09:b2:35:04:35:18:3d:3c:a7:bb:aa:58:
fe:d4:25:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffqUuQh2jo9I5gx7rNHELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjYwNTEzMDQwMDUzWhcNMjYwNTE0MDQwMDUzWjAzMTEwLwYDVQQD
EyhiYWFkNjQ3ZmQ3ZWQ0MmE0NzU0NzkyMDQ0MDhhMDZhYmZmYzM5ZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCt3xsxmOrBuM13AelCRddPygtBY
6BnAH5LJV41dd9UNp6XPidddra209YBy4+PMCL0xpelndtIIiht2VgvOs7i2Zyt6
R1XoMfiQUjQ0jfiqk7sgPTH/RYa3niss2vhjRhI89jNEXY3VOpg8agzi7dXDDCRn
ihxYJQNZN0vGogSaXzuQpyVRAvUzCo6LEQVso301K44ULDw94GvGjtqTEqiuy1/E
znkR3Sr1YQ6Fvt1RleLRkWY+mzCQ4faPHwIKN9Pf85kkUHAwgJ6XKvl50+Pt74lZ
vF0k21cAO+ZV6gEcBwpNJBPLDJXOJEdtrecQ+l1N53la6kGpijN7rdUdHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqtZH/X7UKkdUeSBECKBqv/w57aMB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCigr65o
2Y35ssfVsfF/hleqGLv0kpeohLKKFhVyrht+jgPoEQVodVkyu3Ge9a8t3SawjsxY
uJnatOrgFsDIZUmaedslAVWLg/QK2WroOw6QHyHawYKNVglh9w5YzpQCdd+o/agy
JLHMHDcfHc6E5eLEa0TNANLoKJm4oqr19dvKTldOMYfPhOM7KQ+u81M0A4HThV/V
fhJVUlstP67ldr760csp6O39UsMpbMlF2Nhl1O99YrVXz8w1w96G6O76MsEDsEAf
6JDFl1WIiRGsGICNjvWAVceBkvdEpT3UBzkvB5xlLN4/s4xYq3JhhMH6CbI1BDUY
PTynu6pY/tQlGQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:59:49 2026 by rpki-client