Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: FoPEQ/ObfM27KCezk1BH1IbISIn6frEDDPA/HDZmK5E=
Subject key identifier: 2A:9E:94:CF:AF:B1:CA:E3:40:97:83:D7:87:38:8C:F2:84:D7:4D:8A
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019E1CEBF44018C8A1CA1282D4C367643DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 16:01:25 +0000
Manifest this update: Tue 12 May 2026 16:01:25 +0000
Manifest next update: Wed 13 May 2026 16:01:25 +0000
Files and hashes: 1: 8AC5hr87IvNKc2uj2TEkr-2Z034.asa (hash: qt1zTECZT/ge+oHl/7hzl6IVpmrHO5U65Ej5M0jkaj4=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: nNqA8qgOCNZHRfAkXuU/8jyi9wbP40qxPoqfHUsOnUg=)
3: xo56gz-sHNgNhs5F1QLj5VzEnGA.roa (hash: YHF2lJdgiYyyfdcc4I4hM7f5QuuqDFl1zASnR1Kz4/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:f4:40:18:c8:a1:ca:12:82:d4:c3:67:64:3d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: May 12 16:01:25 2026 GMT
Not After : May 13 16:01:25 2026 GMT
Subject: CN=2a9e94cfafb1cae3409783d787388cf284d74d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:c4:82:ff:a7:67:43:6f:5a:cb:62:97:9b:
9e:96:56:68:c7:9a:5b:4a:be:d2:df:34:ee:35:96:
7c:34:59:2a:ca:c6:ca:75:3b:7c:db:12:74:70:f2:
33:79:05:fb:a7:d3:22:16:3d:a0:f0:82:54:27:22:
94:6a:78:03:a6:d8:9e:79:df:83:49:a0:b5:77:ec:
e7:4b:e3:5a:52:d6:5e:f5:90:c0:08:9a:47:b2:af:
98:c5:fe:b0:07:5e:6c:db:4a:1d:a6:58:2b:88:c8:
2d:24:47:70:31:02:39:6d:3f:41:7e:9d:6a:33:96:
28:25:3a:ec:90:6f:37:9d:a2:3f:e4:2a:ac:10:80:
9d:9e:88:55:08:38:0f:e4:04:d6:c9:42:36:29:4d:
8e:5e:11:8a:df:a3:f5:d1:92:24:52:e4:43:0b:6f:
a8:3a:07:c8:9f:9e:cd:11:5f:46:1d:3d:55:60:a8:
c9:8c:1e:23:ab:30:32:f4:c6:e2:8d:9f:f2:cf:aa:
8e:40:22:41:5d:b1:4a:95:96:d1:50:30:b5:10:db:
eb:82:7c:fe:f1:e3:a9:31:e3:18:cb:96:51:69:f7:
b3:cd:98:e3:30:8d:f2:f4:db:16:a9:9d:90:5d:d9:
60:df:94:00:83:25:c9:c7:b4:aa:37:3f:eb:83:ab:
ed:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9E:94:CF:AF:B1:CA:E3:40:97:83:D7:87:38:8C:F2:84:D7:4D:8A
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e4:35:b4:b9:52:99:2c:43:d4:1c:d8:92:da:e4:74:d4:bc:
3e:74:4f:bb:48:c4:68:32:e3:51:18:26:44:a3:d1:5b:ce:10:
3d:4f:b8:e5:83:61:da:df:17:24:35:36:f9:22:ee:04:17:be:
e5:59:d9:3e:12:0a:94:b4:b3:93:56:09:cb:10:69:99:0c:f7:
ee:35:f6:44:d6:aa:69:16:03:9b:23:40:be:b9:bd:5b:92:94:
65:28:93:39:2b:85:aa:39:8f:d6:5c:d9:1c:9b:85:17:9c:9c:
d8:5c:2a:86:30:42:82:57:bf:00:5c:96:bd:4f:6b:87:8f:9a:
03:51:8e:c6:03:41:ce:26:a7:c6:30:27:33:00:68:6c:fa:9e:
74:dc:b7:a8:b3:d9:2a:e3:72:a9:ab:34:ca:c0:90:72:d1:0a:
77:a2:42:9d:5f:f1:b9:c4:40:8d:9b:ab:77:51:f8:07:7b:30:
51:73:e9:fd:d0:24:3a:af:07:a9:20:a6:49:2d:d6:e9:41:a8:
a1:18:0e:49:2e:02:96:4f:70:1d:5d:a9:a5:e5:60:e7:9a:22:
0a:d5:26:ea:3a:e4:ee:91:d8:ab:75:1b:79:ea:70:54:9f:59:
de:56:e7:9d:0c:56:39:4a:5c:00:50:c2:1a:ee:47:0c:2a:c7:
70:9d:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:50:41 2026 by rpki-client