Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: zcWuFmcTflaAGw6i3v2NPGC1t4X01zyEF3DK/FCuGjM=
Subject key identifier: EC:C2:53:7A:D5:51:F0:9C:B0:4E:58:62:39:78:48:50:D8:EA:B4:77
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019E1C1031B8A99950C8A6E403F79DB8AA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 12:01:23 +0000
Manifest this update: Tue 12 May 2026 12:01:23 +0000
Manifest next update: Wed 13 May 2026 12:01:23 +0000
Files and hashes: 1: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
2: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
3: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: L+rF9cjbbHIA7jTeTe83lig5xPu4NbwY/EMMpJ1Q+pY=)
4: x7mbec4cpv5N8U0_JFOsofDdp9k.asa (hash: xc6esLHJMBzAKQI4ygNtC8Fx32gcjy+TaKUBFG2ujWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:31:b8:a9:99:50:c8:a6:e4:03:f7:9d:b8:aa:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: May 12 12:01:23 2026 GMT
Not After : May 13 12:01:23 2026 GMT
Subject: CN=ecc2537ad551f09cb04e586239784850d8eab477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:97:b0:e1:97:66:56:c8:a9:af:65:8a:70:cd:
0a:09:2b:bd:40:f6:77:57:99:2a:35:4e:f8:8e:69:
99:c7:9d:3c:9d:49:9c:5a:9e:df:ed:5d:a2:77:8d:
3d:b1:dd:2c:63:39:d8:98:a2:80:1e:b5:54:44:f7:
c7:bc:9a:59:08:47:c6:04:bb:55:42:67:30:3a:6a:
42:1e:05:e8:b9:4e:01:b8:95:2d:d7:25:3b:a1:96:
a3:88:95:b2:bf:db:dc:d3:b5:9a:70:fc:ce:62:98:
9b:eb:d8:3e:c4:3e:34:11:f9:3d:1c:4d:a0:f0:1f:
6f:ef:33:d4:33:44:36:2a:4d:f8:00:10:45:c1:3f:
a0:55:aa:f0:97:0e:8a:a3:7d:17:14:3b:52:a8:84:
82:68:f7:6d:a4:1b:8c:fe:9b:dd:d8:ef:c7:ac:3e:
c8:3a:06:08:40:8d:c0:d5:d8:74:80:44:73:65:7d:
99:2b:7b:5b:b2:bc:24:1d:95:f9:36:3c:a1:e3:4f:
92:b4:21:1a:3f:63:e1:42:d6:dd:b2:9c:69:71:3f:
7a:46:17:c2:63:13:85:af:86:d3:a7:13:b3:02:13:
60:9b:88:c6:b3:75:ed:4f:bb:7b:e5:3d:96:b6:32:
2b:73:6a:1c:73:ec:52:7d:21:0b:47:5c:42:9f:97:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C2:53:7A:D5:51:F0:9C:B0:4E:58:62:39:78:48:50:D8:EA:B4:77
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:23:a0:43:0b:4e:ac:d6:ff:b4:cd:c7:45:e4:02:46:3a:62:
79:fe:96:6a:a1:a5:b1:26:b2:5f:d6:8f:af:e6:f9:5a:83:f3:
71:8a:a0:8f:c1:d9:b9:f4:1c:4c:79:5f:c4:ea:a5:fe:e3:0b:
aa:29:14:2c:e6:30:be:1c:7a:57:89:62:60:54:9d:e3:8a:ec:
41:fc:8c:d1:38:ba:5c:8d:20:90:7d:1f:1e:b6:ed:a3:d0:e5:
34:4a:66:66:ce:24:80:86:ca:9e:14:8a:10:f4:79:d9:b7:53:
8d:a5:7c:a7:ce:04:b6:17:5f:69:83:55:86:c1:cd:d1:5d:ad:
7a:c3:c3:fd:79:67:04:ce:76:90:d9:38:2c:88:dc:b9:69:4e:
75:c1:e9:47:25:a9:4f:1b:3f:0a:7e:8d:58:1c:9e:3b:4d:5e:
d8:a7:8e:a7:92:c5:dd:3d:ee:46:80:d1:b7:ce:59:ae:07:17:
e9:f8:b8:bd:83:6d:5a:3b:a4:b9:10:de:89:af:04:b2:9f:fc:
1f:7b:fa:94:4f:cd:8d:b4:07:ec:70:56:30:d8:19:47:d3:09:
96:1a:77:17:05:87:49:e4:a7:61:71:4d:cf:41:b9:59:0a:f0:
f2:06:50:4c:c2:f8:10:2d:f6:62:30:6a:7e:50:16:9f:bd:a6:
d2:9d:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:05 2026 by rpki-client