Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: NSrhVrK/ZaEgNKQVwZQ35DfsXPyoz9gidAUYxpHFFQg=
Subject key identifier: 2F:45:5E:D8:13:EA:D2:75:C8:F3:CF:DE:9D:07:F2:74:B9:5F:2B:57
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019E1DC71711BE0EC8D7AD0214F44AF2C68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 14BC
Signing time: Tue 12 May 2026 20:00:47 +0000
Manifest this update: Tue 12 May 2026 20:00:47 +0000
Manifest next update: Wed 13 May 2026 20:00:47 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: t70emWvet+9o4DpXpGnMkg7PJenzF59ACDf+LVay0yw=)
2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:17:11:be:0e:c8:d7:ad:02:14:f4:4a:f2:c6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: May 12 20:00:47 2026 GMT
Not After : May 13 20:00:47 2026 GMT
Subject: CN=2f455ed813ead275c8f3cfde9d07f274b95f2b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:26:6a:22:7a:fd:39:4f:32:a2:b6:4a:32:
6e:bd:cd:7b:a0:d2:f8:25:69:85:2b:09:ad:53:3a:
60:31:11:96:5a:b5:70:5f:9d:ca:df:4e:a3:5a:bf:
f0:ba:ea:e3:f8:6f:19:de:00:91:f3:eb:9a:ff:f6:
ba:1d:c2:73:3c:11:67:6c:9e:4a:4f:35:a3:1f:f9:
12:f9:62:0e:38:b9:24:0e:5f:e8:02:8e:8c:1e:c6:
10:52:8e:8b:4e:be:2c:e9:f4:d1:d3:2d:4c:37:a6:
d5:bc:c2:96:00:9a:39:23:6f:14:ab:a5:ea:ff:d6:
ae:6f:32:22:b7:05:6d:c0:db:99:d9:26:59:84:71:
50:24:76:ae:0a:4e:cc:23:20:89:b0:a8:ac:0f:2d:
02:52:d2:f2:0e:bd:f8:26:bf:d5:c0:62:d9:c1:22:
d2:65:6b:5f:1f:9f:17:31:27:cd:ce:54:9e:ad:4b:
5a:94:09:b3:8b:f8:25:4e:d6:e3:95:ac:db:77:31:
0d:24:22:64:72:d1:3b:2b:3b:fb:bd:60:55:f0:13:
46:0e:1b:b5:8f:a2:60:5f:fb:21:d5:10:5b:25:fe:
64:13:84:0a:7f:e1:cb:97:7b:d7:c9:14:52:94:84:
1e:3d:56:7e:0f:4b:69:a3:cc:b0:19:a8:50:5a:db:
a0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:45:5E:D8:13:EA:D2:75:C8:F3:CF:DE:9D:07:F2:74:B9:5F:2B:57
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:46:f8:ef:d8:17:91:15:2e:3d:3c:df:ec:95:4a:78:86:12:
84:a2:c6:d1:91:4a:60:66:4f:c4:90:2d:5b:d1:60:10:73:63:
e1:7e:47:93:c1:21:73:9b:87:a1:59:b0:b7:69:ec:8a:29:41:
37:fb:e5:29:4e:82:bd:93:c8:ca:33:5d:b1:06:12:9b:d0:c7:
4b:b2:ea:a2:a4:5a:31:eb:18:8a:81:f4:b7:c5:9d:3f:98:9f:
c0:74:09:09:11:e9:41:4d:f2:c9:17:7d:fa:2e:6f:eb:3e:95:
5f:47:4d:93:85:29:7a:06:f0:01:33:eb:b1:53:90:5f:00:6a:
8a:42:ab:cb:de:57:da:12:d7:4d:a6:20:2d:75:13:aa:a0:ca:
85:c0:6b:59:85:4b:ef:b9:11:23:14:f0:a3:63:9f:29:30:b1:
ad:19:1b:f3:8c:29:bb:f8:3a:68:1e:9e:42:bc:9b:51:a0:dc:
f5:5e:12:89:5f:31:b5:e0:a6:15:9a:46:cd:6b:4d:ca:62:39:
c0:a6:aa:24:fc:7c:71:48:5a:f7:11:c4:72:6a:f0:c0:52:14:
12:71:10:18:51:1c:8a:8a:7a:e4:72:04:95:05:1c:f8:81:65:
cf:d8:0c:44:a5:53:03:44:c6:6a:22:10:8e:cf:e5:a7:8e:d8:
b4:e0:9d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:30 2026 by rpki-client