Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
File: mR5LF54JU7nsxYWtmFmgC-NWgAE.mft (raw, json)
Hash identifier: pzOfHpIsiKV950BKIp/BGDclKObSLeJEzAePtp2XVoY=
Subject key identifier: EC:5F:24:01:96:BF:8A:6B:9C:E6:8D:07:B3:E2:69:6E:2A:9E:CF:D1
Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001
Certificate serial: 019E1FEC9A0430FECDE6B9D5137E2CFC1789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 06:01:00 +0000
Manifest this update: Wed 13 May 2026 06:01:00 +0000
Manifest next update: Thu 14 May 2026 06:01:00 +0000
Files and hashes: 1: KFiiFWif923SIcwC9nBmJ-HUVJ4.roa (hash: ycwpSj4ZG3+CrkzSV++20ftzs6baQIacEYL2lp7sLR0=)
2: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (hash: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0=)
3: mR5LF54JU7nsxYWtmFmgC-NWgAE.crl (hash: y0jmMJMtcRB710Ag0LPPntyll8BAWOTgib7WR+KVJgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:9a:04:30:fe:cd:e6:b9:d5:13:7e:2c:fc:17:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001
Validity
Not Before: May 13 06:01:00 2026 GMT
Not After : May 14 06:01:00 2026 GMT
Subject: CN=ec5f240196bf8a6b9ce68d07b3e2696e2a9ecfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5c:9e:7d:d6:b2:2f:ab:d3:20:0d:1e:7b:b4:
3d:37:40:07:c9:f0:e6:90:bf:da:01:61:10:0e:78:
b1:27:19:b2:3c:0e:3b:5c:ef:04:48:c9:eb:10:65:
77:9b:a6:a9:bd:0a:b2:d8:a3:b6:08:2e:f5:c1:59:
ea:51:31:5b:e0:7c:ce:9d:7c:aa:82:74:e8:1e:de:
20:55:90:e4:31:40:b0:5e:7b:94:f4:a9:5b:1f:3b:
6b:94:1e:e9:00:0d:8a:89:2d:b5:a6:cf:c9:79:81:
e3:28:64:18:ea:6c:62:45:47:66:0c:6c:f3:b1:23:
38:fc:5f:f5:de:3c:c6:26:3d:1e:41:04:6b:78:62:
69:45:fb:b3:66:7f:86:53:72:42:21:1d:be:2d:cb:
61:5a:dc:41:e5:05:07:b6:46:08:90:34:37:d2:05:
a6:f9:e7:2b:ee:9d:de:80:4b:79:fb:f8:e3:fe:29:
74:96:3c:ba:df:d4:c6:13:68:66:6d:9b:cf:80:1d:
4b:3e:a0:b8:2b:90:03:51:f1:c2:4c:d8:ed:1b:e6:
4e:2c:74:6c:9c:63:b4:f3:a3:6f:a1:ee:31:cb:10:
5a:8b:6a:a4:35:20:ce:a2:3e:c8:cf:43:da:d2:51:
78:e3:f2:d1:52:cb:ac:5c:c4:51:43:77:da:59:99:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5F:24:01:96:BF:8A:6B:9C:E6:8D:07:B3:E2:69:6E:2A:9E:CF:D1
X509v3 Authority Key Identifier:
keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:45:45:57:d8:47:a7:32:d7:90:1c:ba:92:4c:47:c4:40:8b:
b1:a2:f6:90:48:a6:54:52:82:1f:70:49:b2:83:fd:e2:38:e4:
8c:48:36:f1:6b:e2:5f:83:91:af:48:38:a5:27:e8:92:7c:24:
ea:b9:97:e7:86:f3:79:50:06:f3:2f:62:a1:3d:f7:03:9b:bb:
c8:d7:e0:0b:f7:ea:b6:80:b2:b9:d0:db:1b:eb:27:05:fb:3a:
85:9d:72:7f:e9:1b:8f:9d:07:9d:a4:56:dd:c6:4f:a7:b3:6d:
59:68:1b:65:53:a6:5b:6e:ea:cd:20:ef:1a:0e:a2:f0:bb:36:
78:3a:23:8c:b1:b9:1b:69:f9:48:76:0f:0e:e2:42:f3:f3:eb:
72:a2:bf:d0:58:37:f1:3e:7b:17:96:ab:56:b9:5e:c4:39:c4:
01:b2:29:ec:da:c8:fb:29:fc:c3:a4:7c:c6:65:0c:99:e3:4c:
5c:92:ce:45:70:3b:69:05:09:b1:91:8e:21:29:0b:25:89:a7:
d2:ac:ec:72:d9:5f:99:d4:6e:7f:b2:5a:a8:8d:97:ea:55:10:
5c:cc:7d:6b:25:02:b7:c5:8b:d9:f3:f9:22:b6:94:dc:84:31:
0c:01:f6:ef:4b:5f:69:49:3a:1f:fa:e3:c6:46:eb:73:af:af:
47:5d:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:06 2026 by rpki-client