Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: Y2dEPixcpaX5Yvpp8KiwTpd3pf8IjfmrjrKkO7hUdBE=
Subject key identifier: 42:D8:AB:F4:5D:62:DD:04:98:0A:EF:78:ED:5B:38:7A:82:04:9E:56
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019E20C8CDE7EA264CE330435A3B0F93DE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 10:01:31 +0000
Manifest this update: Wed 13 May 2026 10:01:31 +0000
Manifest next update: Thu 14 May 2026 10:01:31 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: 7JbcQEzCUkNRNeAelqAIIv1Pd7CjHrhXvHygEVQ5z7k=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:cd:e7:ea:26:4c:e3:30:43:5a:3b:0f:93:de:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: May 13 10:01:31 2026 GMT
Not After : May 14 10:01:31 2026 GMT
Subject: CN=42d8abf45d62dd04980aef78ed5b387a82049e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:6c:72:0b:69:24:d3:68:8e:99:e2:e9:0e:
38:e9:29:07:18:66:95:8a:e6:3b:f7:b7:39:55:07:
25:51:ee:61:41:4b:68:bf:50:f7:1e:c9:aa:03:82:
6a:86:fd:c3:a5:e3:ab:4d:e7:fb:70:4a:0a:b0:66:
19:c9:26:e6:b0:3a:c7:fa:41:d2:39:2d:d9:2c:da:
8d:c1:e1:02:f5:ff:2c:74:a9:7b:f4:d9:f1:35:97:
b5:1c:b0:15:5f:0e:e6:27:f8:5d:45:57:78:f7:2f:
25:f6:cc:41:f8:0f:70:0a:6a:16:30:cf:0b:76:fb:
45:3f:2d:69:e5:1b:a6:10:d2:32:30:f3:f8:b3:12:
dd:c7:53:c0:42:2c:18:75:dc:44:eb:35:63:bb:cc:
61:c0:a6:93:25:d1:b5:2a:59:e0:71:8d:39:76:a1:
83:22:ca:c7:bf:34:71:97:52:5e:db:d9:ed:5c:dd:
64:2b:9e:99:70:6a:79:25:52:5e:f6:07:cc:0c:a4:
5b:dd:cc:78:11:a3:1c:27:7a:2a:c8:11:9f:bd:80:
e5:80:01:cd:ac:9e:e7:90:30:fd:17:13:c6:8b:7b:
95:c3:d2:24:4a:d5:e1:84:f7:f2:df:fb:91:ea:28:
c4:5f:07:f4:5f:ac:a2:03:9d:b7:12:e5:97:f1:92:
72:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:AB:F4:5D:62:DD:04:98:0A:EF:78:ED:5B:38:7A:82:04:9E:56
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:17:e4:7e:bb:67:b3:8b:39:6a:66:8d:7c:b5:33:37:3a:d2:
fc:f4:80:56:88:f8:c0:47:fd:7f:de:f4:7c:70:78:0f:55:da:
a5:37:53:89:01:ee:c4:06:db:e6:cb:07:c9:b6:2d:29:d4:68:
4f:a4:b9:95:25:04:fd:a5:08:7f:ca:3a:20:e3:07:60:7e:96:
ef:76:3d:79:16:e4:ff:67:23:ff:ca:97:4a:d3:94:26:8f:cb:
a0:f6:e0:b4:bf:92:0b:65:c5:2e:7a:3b:63:6b:74:36:80:9f:
f3:13:66:cc:3c:3a:9f:70:a9:07:c1:cc:1c:51:39:8d:5c:39:
27:fd:c5:66:90:c3:aa:30:6b:00:b6:eb:ab:f6:08:9f:65:fa:
30:87:22:07:c7:f3:8d:ed:62:47:fa:1c:ed:a0:22:bf:df:5d:
ef:21:70:64:5a:75:b7:a9:12:df:21:50:40:68:5a:98:37:2e:
73:7c:63:33:4c:3b:fe:0d:1d:0c:4f:07:f7:4c:26:bc:41:b7:
5f:92:17:bd:a2:0e:28:9b:72:bd:65:78:3d:00:5c:ec:72:8c:
05:51:e4:14:d7:12:2e:4f:ac:98:74:61:51:56:76:14:e7:b1:
1a:95:14:4e:e7:a1:d8:65:0c:81:56:31:fe:2e:c0:20:35:71:
6f:46:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:13:36 2026 by rpki-client