Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
File: aH2bViukcmGPk5jiZcoOcQj2h6M.mft (raw, json)
Hash identifier: cxXe2HAT6RHEF1E4Gg6YTDn9YAEOdEYsY7cWzDXbsmY=
Subject key identifier: FD:EC:3D:4B:1E:51:86:F4:74:8D:6D:32:83:C8:5E:09:3F:79:38:80
Authority key identifier: 68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
Certificate issuer: /CN=687d9b562ba472618f9398e265ca0e7108f687a3
Certificate serial: 019E1F11765B1D4090EFB528B6642178EBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
Manifest number: 189A
Signing time: Wed 13 May 2026 02:01:38 +0000
Manifest this update: Wed 13 May 2026 02:01:38 +0000
Manifest next update: Thu 14 May 2026 02:01:38 +0000
Files and hashes: 1: 7AOoMOGVRmNfzkuDKRu3Sk1W0eA.roa (hash: +394RmOY/Sxcv9d3Us94xh5+rW7+06GfmeDJKppUg3M=)
2: aH2bViukcmGPk5jiZcoOcQj2h6M.crl (hash: vpq/ukCSXJTxPr6YRFQq2pP2ReMWN1vOELdd7X2Sfv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:76:5b:1d:40:90:ef:b5:28:b6:64:21:78:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=687d9b562ba472618f9398e265ca0e7108f687a3
Validity
Not Before: May 13 02:01:38 2026 GMT
Not After : May 14 02:01:38 2026 GMT
Subject: CN=fdec3d4b1e5186f4748d6d3283c85e093f793880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:39:b2:42:bb:e3:84:a4:28:12:d1:99:3a:
c4:01:53:7e:8d:2c:4e:b4:cd:cf:f7:81:17:40:7b:
7e:70:dd:5a:61:6a:41:91:ab:ea:f5:cf:4b:22:e5:
23:3f:82:3c:ca:84:bf:a8:e7:31:a8:fb:98:1c:c9:
55:b8:96:6b:b8:0a:be:f5:04:5c:e0:da:b7:3a:38:
11:e7:44:8b:04:62:5a:76:7d:f9:ab:ac:77:f0:33:
9c:4b:ae:5e:02:6e:e9:9e:84:96:00:47:aa:c1:e4:
35:8e:0d:14:83:16:a4:94:34:ce:ac:f7:0e:13:f6:
d5:34:c6:38:40:3d:80:4c:a8:2e:45:16:3a:30:13:
9c:ff:36:d5:e4:a7:62:ec:d7:37:94:e1:01:fb:84:
f0:5b:38:51:0e:02:e4:9e:50:6e:1d:19:d9:34:32:
9b:42:39:dc:06:c9:dd:e7:25:b5:27:95:65:a3:2f:
1f:96:bd:90:34:2a:b7:b4:60:fd:93:e3:32:74:6f:
24:d9:31:30:b8:b9:b0:b5:98:cd:81:d6:b6:14:12:
4d:1d:aa:bf:15:e5:59:d4:1c:62:b3:e1:fd:6f:0e:
85:94:9c:2d:91:a0:f9:c6:68:f0:12:93:4e:48:15:
1f:b9:bf:43:48:72:e9:a9:72:c6:46:32:73:5f:cf:
93:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EC:3D:4B:1E:51:86:F4:74:8D:6D:32:83:C8:5E:09:3F:79:38:80
X509v3 Authority Key Identifier:
keyid:68:7D:9B:56:2B:A4:72:61:8F:93:98:E2:65:CA:0E:71:08:F6:87:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aH2bViukcmGPk5jiZcoOcQj2h6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b89c1f-8dcb-438b-8afd-605d135136f7/1/aH2bViukcmGPk5jiZcoOcQj2h6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f9:37:67:bb:08:f9:a4:5a:29:2d:62:c0:63:b0:5e:1f:ab:
b8:93:2c:b0:9f:64:2c:14:54:dd:50:5d:89:b9:56:85:1c:3a:
de:63:b0:0e:c4:04:f7:52:bc:46:5e:3b:24:39:ab:2a:d4:ef:
10:55:15:cc:99:91:8d:f4:47:b6:27:3c:3a:5c:c0:54:ef:f8:
85:ac:3f:7e:64:db:f1:6a:fd:70:8e:09:cf:e0:34:c2:16:de:
bd:b8:65:a4:e7:bb:a9:9a:a4:51:47:32:2f:32:58:77:db:7d:
8a:b2:08:02:47:ff:ba:0d:ef:af:06:0c:18:3d:8a:b8:3f:ce:
05:59:b4:f7:56:8c:18:e1:b4:73:ba:c7:27:b3:8c:3a:72:9f:
20:38:89:df:60:0c:ba:19:dd:0f:72:00:ce:b8:91:c8:53:18:
bc:35:d5:d3:99:74:57:47:73:f6:00:5f:b0:6c:fd:83:c3:01:
bb:95:be:39:7d:83:64:6e:7a:39:54:a0:ba:ba:30:8f:7f:6e:
27:7c:40:13:5d:1b:11:27:11:7e:a2:c2:53:2b:8b:08:33:14:
e5:99:05:fa:dc:5f:98:22:4d:85:81:10:77:a8:bb:ed:47:b8:
4d:04:80:58:b6:8a:da:c9:d4:ba:34:10:6b:49:97:bc:b9:89:
a7:2b:ce:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:59 2026 by rpki-client