Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: G6U10FAGYDZk/NJ9Q8UFizF1HIimYiWzRHdwvYf3D/U=
Subject key identifier: F5:BD:3A:20:9C:E8:59:51:C3:7D:9D:5C:28:63:1D:52:9C:51:CD:F5
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019E1ED9A73950C0FB33F56554632A2DF835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 043F
Signing time: Wed 13 May 2026 01:00:40 +0000
Manifest this update: Wed 13 May 2026 01:00:40 +0000
Manifest next update: Thu 14 May 2026 01:00:40 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: eWVDDL/yb2L2SwpdUvHfFUjUT7OxEkZ50u1D/RUSHKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a7:39:50:c0:fb:33:f5:65:54:63:2a:2d:f8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: May 13 01:00:40 2026 GMT
Not After : May 14 01:00:40 2026 GMT
Subject: CN=f5bd3a209ce85951c37d9d5c28631d529c51cdf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b9:df:65:92:04:32:f8:f3:08:a7:c4:4c:b8:
d2:cb:64:e0:be:5f:3a:f0:64:b6:56:b6:d5:1f:b8:
78:e9:40:a7:71:7e:d6:f2:7f:0a:b8:1e:27:92:36:
ef:d4:8e:dd:e8:5d:aa:9a:a0:2e:34:cd:3b:e5:c1:
dd:7c:6b:91:99:93:dd:2f:05:72:da:cb:19:29:a8:
fc:94:7c:e0:49:5e:3e:6a:09:0d:9c:ba:a5:b7:da:
10:4e:cf:be:f9:7f:db:33:fb:9b:39:34:72:ab:cd:
e4:19:0e:88:98:07:0d:72:50:0c:f1:bf:41:db:99:
7c:fa:bf:56:c3:15:a5:20:2e:23:79:6e:a6:b8:8d:
d2:c0:5c:1e:e1:30:28:eb:54:12:ee:89:95:a7:9b:
f6:c3:22:ae:05:01:70:3a:8b:ae:45:fc:5a:16:24:
e2:21:76:e9:4c:71:a7:ed:cf:75:18:fc:56:e3:08:
78:97:35:9d:75:ab:3f:2a:19:ad:75:e6:4d:b5:fa:
92:0b:20:6c:8e:b3:4d:81:b4:a3:52:b3:a2:af:2f:
ec:cf:66:90:c6:69:53:c0:27:f0:74:67:0a:9e:00:
e8:62:0a:5a:1c:39:b8:a7:4a:15:42:7b:1f:d6:05:
e2:96:15:5f:1b:63:c9:5c:dc:d5:13:83:55:70:29:
0e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BD:3A:20:9C:E8:59:51:C3:7D:9D:5C:28:63:1D:52:9C:51:CD:F5
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:62:fb:9b:ff:4d:96:cc:99:89:86:34:8c:8c:81:b2:e1:05:
cf:b2:b7:b6:f3:e6:3a:b7:71:87:42:05:4c:8d:b0:3a:d4:2c:
a4:90:dc:31:c7:98:a9:e4:49:dd:22:a4:fc:d0:db:fb:64:63:
a9:6e:e9:3c:61:5e:1e:38:b7:c3:21:a9:21:9d:e0:5d:33:9a:
f8:3e:9e:f0:a6:2e:e5:bd:0f:6a:b9:1d:6c:ab:97:6d:80:f7:
a6:e7:16:94:82:a4:d3:42:92:e5:9a:db:4a:6c:17:8f:5e:6a:
79:e9:39:a5:04:16:68:62:69:78:56:f4:bb:d1:5f:92:8e:ef:
ce:7c:d2:0c:35:ab:b8:85:2c:b9:cf:27:89:19:0c:8c:cb:1e:
dc:cc:10:1f:54:8b:08:93:bf:12:1e:f1:96:da:3e:10:7e:05:
e2:14:b7:39:05:7a:a1:a3:72:6f:e5:98:6c:5c:33:46:97:54:
81:94:35:8d:41:3e:85:44:80:68:d2:a9:52:0a:c5:5a:d8:2b:
64:a6:ad:3a:c2:e7:59:7f:3b:9c:23:ea:22:99:0e:f7:2d:87:
dc:cb:c2:8d:d7:cd:9f:17:d2:a5:ac:b0:68:e6:f0:a8:16:68:
3a:33:2e:88:8e:28:35:12:35:43:c5:42:a4:ea:a6:eb:d9:3a:
28:85:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:12 2026 by rpki-client