Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: lFIlr2eLk6m6T/PbhHkJQzhryIujtbhhTVpg/xyTUzc=
Subject key identifier: DE:B1:F1:B5:47:F8:D9:ED:5A:7D:BD:2B:A3:C0:62:AE:CA:DE:2B:93
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 019E1DFE7D823AEC388C95A2311F0029C6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 21:01:17 +0000
Manifest this update: Tue 12 May 2026 21:01:17 +0000
Manifest next update: Wed 13 May 2026 21:01:17 +0000
Files and hashes: 1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: tlUXBCGfx+E1r7ABA7ARciihO7td0abR5I8FNYSnb1w=)
3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:7d:82:3a:ec:38:8c:95:a2:31:1f:00:29:c6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: May 12 21:01:17 2026 GMT
Not After : May 13 21:01:17 2026 GMT
Subject: CN=deb1f1b547f8d9ed5a7dbd2ba3c062aecade2b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:65:ee:3b:f5:34:37:78:ab:16:83:14:6b:
56:2f:ee:8b:85:c9:51:2e:60:be:07:6c:30:ba:8c:
9c:7f:e2:17:6d:c5:8b:55:a5:1d:da:01:32:f1:94:
b2:65:f8:8b:f0:e4:7a:42:b4:d3:ea:b2:b2:ec:fb:
5e:c1:a2:82:6d:6f:44:92:98:86:7a:31:b5:a2:9e:
6a:90:73:92:32:13:ac:99:c2:d9:12:14:35:9c:13:
46:b3:68:92:b3:d4:c9:b3:f4:f5:9b:43:e1:e6:21:
0b:50:d5:d8:74:ef:94:c5:76:c2:b4:90:81:b1:8d:
db:b3:5c:64:12:ec:87:e7:89:ba:40:c3:73:96:3c:
27:ee:60:1f:6e:9d:d8:07:1a:51:9d:22:b3:4f:6a:
5e:0b:55:19:f4:86:1f:a3:ac:b3:5e:21:37:fb:35:
a2:79:59:ba:09:e4:9b:33:e7:45:f0:4e:58:c3:2e:
83:fc:56:e1:bd:24:1f:03:1e:04:bd:ad:2a:99:ed:
25:0d:1f:34:b5:0f:78:5c:12:25:4a:f2:ae:c9:df:
c3:3f:b1:e4:a9:ea:f5:6e:a7:11:99:95:5d:c1:fb:
80:7a:f6:27:7f:e5:1a:48:55:ea:76:6a:73:fa:b7:
07:37:69:a8:54:21:76:38:43:b8:3b:26:80:2d:c5:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:F1:B5:47:F8:D9:ED:5A:7D:BD:2B:A3:C0:62:AE:CA:DE:2B:93
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:56:3c:3d:b2:93:77:8f:f6:84:86:6d:9c:b0:0d:74:e0:78:
de:e5:48:80:6a:8d:9b:d7:fc:89:d2:1c:d1:ee:5e:a7:c0:e3:
5e:64:10:68:93:42:01:cf:0c:73:af:1d:d2:e6:4c:ce:4a:93:
33:53:6c:44:cc:85:70:ba:ce:be:38:e1:1e:96:f8:4d:e7:8e:
94:c3:3b:62:e5:31:ba:b7:bb:23:24:ac:14:d7:fe:08:f8:07:
6c:5b:e7:6e:0b:09:24:fb:55:1b:50:78:2d:f3:ea:7f:69:9d:
6c:7f:92:f5:90:b6:7e:05:f3:2b:7a:b5:81:41:de:6b:f6:82:
fc:61:7b:81:e9:a3:35:69:4c:0d:28:b2:21:f5:50:5e:1a:ba:
a6:24:42:eb:e9:21:56:04:bf:fe:e0:7b:6a:33:ae:b0:4b:3a:
a6:e4:38:cd:67:0c:85:e7:26:61:47:38:ba:8d:ab:41:f7:52:
9d:48:6f:18:22:2b:03:29:9e:a4:f7:30:9a:01:85:b1:b3:3c:
85:15:47:a7:21:7d:12:d3:78:6c:91:b1:75:ac:98:5c:15:a0:
1f:dc:70:8b:47:bd:5f:d0:3d:be:37:79:f1:5b:af:1d:6e:06:
e0:ab:10:16:76:67:63:72:32:5f:39:cc:7b:7a:80:6d:f3:2c:
cb:f3:cb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:43 2026 by rpki-client