
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier: DMnycdrirVMUfkEn9oNxdjq0i4NlrEdllvMZc5cnUjQ=
Subject key identifier: 46:61:AA:52:FD:80:2D:9A:6F:5C:9E:47:44:2F:7E:65:BE:5A:60:27
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 019E1D9047C51935D804E2F51F718F2786D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number: 1920
Signing time: Tue 12 May 2026 19:00:55 +0000
Manifest this update: Tue 12 May 2026 19:00:55 +0000
Manifest next update: Wed 13 May 2026 19:00:55 +0000
Files and hashes: 1: 6GLB9mtHtQ9igAugr-nU-NnOL5I.roa (hash: v+rAB5v9d/a3phjEOAxXcev6bMkZhENGNBYWynOBKZs=)
2: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
3: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: 7GL8EbsBIOTamCfVB4x6e1vHK5zv8e7BGT7LycJ7Mhs=)
8: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
9: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:47:c5:19:35:d8:04:e2:f5:1f:71:8f:27:86:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: May 12 19:00:55 2026 GMT
Not After : May 13 19:00:55 2026 GMT
Subject: CN=4661aa52fd802d9a6f5c9e47442f7e65be5a6027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a7:6c:9a:a4:73:7e:d8:0d:35:c0:4b:62:af:
be:c7:eb:d2:2a:25:a6:ac:10:68:c9:fd:fd:b0:c5:
83:76:84:be:6a:9e:12:2c:2f:cc:a8:7a:96:77:10:
f0:0d:b3:2e:2a:e2:46:e0:a8:57:40:be:e7:7f:99:
7f:22:97:1f:0e:3f:76:4c:f0:ea:bc:35:73:fa:4d:
f4:55:6b:82:96:0b:26:62:16:9f:eb:b0:34:38:c9:
c7:9e:e6:44:3b:9c:6c:20:97:e7:a1:82:b3:f2:f3:
e6:3f:b2:e1:be:67:ea:25:10:00:6a:9e:3b:40:90:
2f:37:8e:7c:2d:fc:9f:d8:86:ce:a0:69:f4:22:83:
50:a0:33:da:1a:47:2a:a1:a9:c9:a6:b9:37:d3:13:
11:c8:b8:ed:5a:f0:d9:f2:7a:13:06:de:c9:76:2b:
93:6e:35:43:a9:b7:1a:60:fc:85:11:77:35:23:67:
f8:ac:8f:86:ea:c0:09:47:ea:29:83:7c:52:8a:8f:
9b:28:f2:5b:de:05:b7:24:2c:d1:67:bd:72:fd:5e:
5e:9c:ec:55:18:a4:fe:16:3d:89:fb:00:5e:a8:68:
b1:2a:d8:f8:d4:e2:16:6e:0b:94:6c:ba:bb:71:d9:
a2:74:1d:72:dc:23:57:68:e1:f2:0f:4f:bb:be:6c:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:61:AA:52:FD:80:2D:9A:6F:5C:9E:47:44:2F:7E:65:BE:5A:60:27
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:43:37:ce:ca:b7:8c:07:39:92:8b:b5:bd:c7:8f:81:63:95:
b4:c6:a0:0b:6d:ae:1d:b1:e7:a4:8a:06:67:f9:4e:9d:b2:d5:
bf:3d:95:ba:8b:80:86:af:20:b3:4f:c0:cf:e3:94:9b:4b:a8:
2f:c9:39:59:d8:0d:ef:a1:26:99:39:35:0b:3a:93:0f:1f:a0:
be:d5:0c:8a:ec:50:eb:21:28:2c:53:17:a6:5a:35:bd:f0:1d:
49:2f:12:72:dd:8d:65:5c:cd:fd:2b:59:6e:b4:9d:3c:67:a7:
ff:af:74:ce:d6:e6:41:56:c8:8c:96:85:18:7e:da:1b:62:c0:
5f:b2:b3:0e:ee:ec:e5:38:f7:02:24:95:dc:2d:22:f9:4f:12:
5d:bf:b9:4d:5e:bf:61:d5:12:3c:2a:97:0f:79:8f:6d:0c:c7:
f8:93:71:66:26:5d:aa:03:81:1b:69:46:86:4d:ff:73:b6:b2:
22:f2:f6:53:65:08:9d:b9:2d:56:f4:d0:39:e7:d8:7f:36:7b:
f6:8d:94:99:55:36:8a:ff:60:b7:1f:0e:b6:dd:0b:50:80:d6:
4a:82:77:b6:13:a7:1f:bc:97:32:a6:90:ed:6f:b4:3e:2b:9e:
40:0d:e3:7a:f6:3f:95:62:57:50:e0:38:2b:3e:07:b7:6a:46:
b3:b5:68:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:38 2026 by rpki-client