Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: dQdmYCeq64cQ5lyZKFVCCJ7+QTxvtoFWOOsIFclKJFY=
Subject key identifier: 81:AC:BE:55:34:E2:4A:A9:80:16:36:7D:57:EE:0B:14:5A:32:46:FB
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 019E1F47EE8FD58706FA6B4FFEC9799836F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 03:01:08 +0000
Manifest this update: Wed 13 May 2026 03:01:08 +0000
Manifest next update: Thu 14 May 2026 03:01:08 +0000
Files and hashes: 1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: OF/Y4dEDYPcIww1/+xRzB3x9mr6FeC8BOPzlb30wIrg=)
3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ee:8f:d5:87:06:fa:6b:4f:fe:c9:79:98:36:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: May 13 03:01:08 2026 GMT
Not After : May 14 03:01:08 2026 GMT
Subject: CN=81acbe5534e24aa98016367d57ee0b145a3246fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:b3:c9:1c:99:28:e2:bf:0d:8c:cb:be:7e:
ba:80:f3:a1:1f:cd:27:02:ac:a8:a0:76:ad:be:49:
c9:93:a4:e8:0f:97:7c:08:31:81:8e:1c:e5:36:fb:
39:6f:4f:1e:83:a5:0c:d6:81:25:f1:b7:03:28:49:
b9:7e:40:d1:77:9a:f3:c5:00:a0:73:f9:4b:60:99:
1b:d7:38:4b:91:f2:7b:2d:4d:bd:57:d8:90:2f:af:
65:6d:0c:7d:ea:51:17:f7:ce:ba:26:82:f3:12:08:
0e:56:fb:45:0a:d7:f2:b5:9b:ca:ed:09:42:76:fe:
db:02:a6:d7:15:67:fe:4b:60:bb:97:04:9d:c6:8b:
a1:3d:84:5c:33:d7:f0:ce:98:96:c9:4b:1d:c2:85:
a8:76:10:4b:66:b4:fb:76:b2:e0:b2:b9:a8:75:47:
eb:38:d3:c5:3d:bd:d2:4b:e7:73:3b:7b:80:25:c4:
3a:39:c6:98:8f:b2:ff:05:9d:a0:46:f3:be:0d:62:
6d:e4:c9:1c:48:7d:b4:7a:c3:db:3a:8f:59:68:0f:
a6:72:e3:9d:66:36:dd:60:6d:bc:76:4f:79:80:d4:
0d:5d:ef:09:8e:b5:14:8c:31:b3:85:08:a6:fe:33:
9a:84:04:57:be:07:28:1a:a5:8f:76:dc:4a:13:c0:
f2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AC:BE:55:34:E2:4A:A9:80:16:36:7D:57:EE:0B:14:5A:32:46:FB
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:bf:2a:41:00:b6:f6:9d:6c:fd:ba:58:20:25:5a:44:e8:59:
fd:ee:53:bf:93:58:dd:e2:7a:9d:f3:88:01:70:ea:28:42:6a:
f6:56:df:9a:1d:02:51:1d:f6:1f:46:cc:a3:d9:5f:8e:1e:0e:
63:11:19:91:8a:74:7e:f1:f7:b7:a1:b2:7d:e7:34:70:0d:d2:
09:34:6f:6e:9b:ff:d9:78:85:3f:c8:0d:0f:a1:9e:bb:10:a6:
ac:02:0d:74:b5:11:eb:e9:62:2e:70:5f:42:26:59:e6:10:ec:
20:88:e2:01:3d:08:99:75:29:3e:f4:ee:91:86:78:36:0e:62:
13:a6:12:e2:26:40:69:3c:2a:a5:1c:4d:cf:a1:29:a3:a2:2c:
7b:49:2f:18:35:73:73:a2:ba:b6:1c:f4:e6:3e:b3:93:10:6b:
d3:aa:30:b5:b5:99:ac:41:75:88:8b:6d:b6:57:ec:ed:01:77:
40:00:71:72:bf:6c:fe:95:6c:e9:39:d6:f1:8a:67:a6:15:f1:
4b:4f:89:43:2a:f8:4c:1c:b2:c3:7f:8f:f8:30:28:87:cd:dc:
1a:93:58:1f:e9:e9:7d:98:95:f9:bc:b6:cc:71:1f:80:6a:28:
bc:c8:ef:11:e0:11:d1:fa:06:f6:47:40:be:5d:e5:50:6f:be:
7c:47:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:07 2026 by rpki-client