Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: pb8z9EWtqWnuJ/lb9l2DfGVu/02VAIbS1oJA2/GPQaM=
Subject key identifier: D0:5F:E9:C7:2F:9F:96:84:B4:6E:61:8B:5C:D4:06:02:1B:5C:37:2A
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 019E1CB51A7D66BDE99E1AD4EB7BED64A0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 15:01:31 +0000
Manifest this update: Tue 12 May 2026 15:01:31 +0000
Manifest next update: Wed 13 May 2026 15:01:31 +0000
Files and hashes: 1: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: OW5hnMbIlY+wJ1KPIEq0bxXWQ/ufr07D+7EgT+nSRYo=)
2: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:1a:7d:66:bd:e9:9e:1a:d4:eb:7b:ed:64:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: May 12 15:01:31 2026 GMT
Not After : May 13 15:01:31 2026 GMT
Subject: CN=d05fe9c72f9f9684b46e618b5cd406021b5c372a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:56:54:77:5e:b4:b5:cd:c8:fe:20:09:40:
f7:7c:bf:18:fc:af:28:b9:06:33:ac:c0:70:82:42:
a3:c4:08:05:46:57:87:41:75:b1:56:a3:6c:67:9d:
79:a5:a0:e6:3e:0b:9a:7a:9d:f6:3d:b3:62:89:8d:
90:cf:ec:24:a7:3c:0b:89:b9:46:98:39:80:d8:88:
22:f7:ba:1a:a4:23:9f:36:29:bc:ed:e2:3a:28:3f:
44:44:11:6e:6f:b7:0e:eb:a9:8c:86:0f:65:fa:3d:
e4:c3:77:a6:fa:0e:43:2f:f5:f5:3f:22:57:23:a7:
32:dd:94:e3:d7:97:3b:4b:23:1d:6b:27:2a:4f:a9:
4f:2b:61:d4:05:13:a4:30:27:d5:48:2e:f7:9a:bc:
3f:19:49:96:64:38:2d:92:82:ca:9d:90:1d:48:fc:
52:ae:e2:4c:eb:13:bf:c1:c8:ae:24:d2:29:eb:e0:
9d:85:a4:0d:00:0f:69:f8:61:86:5c:a8:ea:74:b2:
0a:f4:42:d0:8d:0c:fe:24:a6:ce:42:a8:29:2b:37:
d7:92:35:bf:6d:d1:1e:6f:99:be:54:5e:44:0f:33:
78:e4:e4:cf:20:6a:5a:4d:58:04:7f:c3:75:17:50:
27:a4:52:e7:e0:9e:2f:b4:79:c1:4b:3d:aa:02:65:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5F:E9:C7:2F:9F:96:84:B4:6E:61:8B:5C:D4:06:02:1B:5C:37:2A
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cc:38:ea:25:96:a1:63:7d:e1:63:01:dd:8a:1b:f2:3c:90:
48:6d:63:03:45:0e:c1:c9:9a:e2:6f:4b:49:65:9a:79:35:e8:
12:a0:47:d9:8b:2a:38:bd:e7:26:20:67:d0:4c:7e:90:d6:a7:
de:ca:7b:26:13:ed:15:4b:65:06:b2:b7:4f:eb:57:5d:d6:e3:
9c:e8:0b:f4:84:aa:d9:d1:9d:77:05:8a:d3:6c:bc:bc:8c:08:
70:ff:5f:0a:39:25:05:5c:ae:b4:4a:3b:4a:5e:0c:19:1f:d9:
43:91:34:43:a4:d5:21:90:46:62:a8:8e:75:75:d9:24:ad:e6:
dd:e7:28:05:9f:01:3e:96:98:bf:c4:2b:f2:66:dd:25:b4:8e:
61:cc:18:91:76:9a:6c:64:9b:8a:d9:7a:90:c0:4b:4d:8d:2b:
cf:d9:54:6c:3b:a7:9c:97:30:a2:63:80:39:92:4a:02:d0:a0:
25:c9:21:d1:ec:f1:58:bf:07:a2:62:42:06:13:c8:e1:d5:08:
77:68:bb:6a:3f:3c:ed:79:10:a1:a3:90:de:2a:7e:de:5f:c7:
61:e1:4f:eb:e8:54:5f:1b:91:f5:06:aa:27:d1:de:3c:80:0c:
cc:99:70:b1:d1:c1:ca:c8:61:88:b5:ff:b2:56:ab:95:26:e2:
b2:4a:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:30 2026 by rpki-client