Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: pQF2hAcvF16Chl+DXTtPq2+13VqiotbvWcI2ezwetxQ=
Subject key identifier: 32:4F:B7:6B:5F:D9:F3:73:93:50:35:1E:DA:42:6C:16:F1:7E:8E:EA
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 019E1D9120853B0036FB08CD62903727A53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 19:01:50 +0000
Manifest this update: Tue 12 May 2026 19:01:50 +0000
Manifest next update: Wed 13 May 2026 19:01:50 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: A4JJtUdGQlD6xSElB/7KSksEqfzoTo9gLxTkrTSdx8g=)
2: YS_ybeFO-kBpHk4oOV6WmpXFmYQ.roa (hash: myHnrIBgh1OqNZnDZDrhs0mkn1s9VqCibLxchoW9EaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:20:85:3b:00:36:fb:08:cd:62:90:37:27:a5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: May 12 19:01:50 2026 GMT
Not After : May 13 19:01:50 2026 GMT
Subject: CN=324fb76b5fd9f3739350351eda426c16f17e8eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:91:0e:10:e1:67:da:6c:47:20:58:ea:26:
7c:e9:bf:40:83:92:07:4b:0d:b7:e4:f4:46:14:bd:
df:d0:fc:71:17:a7:d9:3e:8f:c9:c8:c3:c4:fc:93:
7a:12:4e:a2:95:82:df:65:c7:28:70:94:af:d5:77:
be:f2:bb:bd:02:5f:7d:88:13:aa:7c:b7:24:f7:7a:
a0:aa:be:f5:f0:f7:46:b9:5d:cb:6d:97:a2:91:f7:
a5:aa:b9:f4:59:63:7d:bd:65:13:fc:90:47:3b:b1:
80:0f:ef:b5:89:fb:d0:1d:e4:c8:59:9a:38:dc:2e:
0c:0e:06:b2:6f:8d:8a:d1:9f:b9:67:26:29:50:28:
ab:26:f5:ca:70:b1:11:ef:55:0d:be:6a:71:86:fa:
db:ef:d9:08:fc:99:a2:36:e5:48:01:a5:36:cb:27:
75:a5:02:bf:21:69:d2:2d:96:88:f8:84:c4:18:95:
02:fe:e6:bd:8d:77:0e:60:db:27:8f:31:9b:ad:82:
90:64:29:ed:6e:2e:1b:47:72:ec:f0:e0:72:94:1e:
44:c8:cf:1b:cd:81:9a:31:a8:3a:b0:84:7b:02:db:
63:b0:2c:d9:7c:ac:4e:7b:22:55:a2:95:5b:aa:d8:
ae:69:de:1d:47:fe:f0:c4:3f:b1:76:5e:65:82:c6:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4F:B7:6B:5F:D9:F3:73:93:50:35:1E:DA:42:6C:16:F1:7E:8E:EA
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e8:54:0e:29:11:48:15:91:88:1e:d9:d7:8b:93:7b:fc:4b:
4f:d8:63:27:a2:b6:f1:57:45:05:a9:35:08:04:07:e8:23:22:
61:b6:e0:00:06:07:35:0b:dc:cf:a2:a8:40:88:43:5d:7e:83:
09:89:69:66:dd:12:ab:62:c2:96:4a:74:93:c6:7d:de:fb:d7:
c1:91:11:06:d4:99:dd:88:af:c4:f6:2a:60:b1:fa:d6:b8:1b:
36:b8:c6:03:8b:3e:5d:12:67:a2:e8:fe:87:f5:06:0a:8d:41:
49:87:1d:12:a9:c9:5d:d5:ff:f8:15:6e:ba:d3:30:2d:a4:54:
06:c2:8a:a0:31:56:ff:f7:f6:2c:75:51:34:6e:50:d1:41:e2:
b6:c3:81:7d:7a:e6:82:6a:c5:81:a5:73:31:7c:5f:94:2d:4a:
50:6c:59:e9:97:e2:a7:33:ed:6f:22:af:0a:61:92:3d:11:45:
0e:69:5d:48:93:74:af:b3:df:86:cf:e7:7c:da:5f:45:2a:46:
49:bb:c2:6a:02:10:ce:bb:94:a9:57:1a:b7:8d:01:40:81:1f:
0a:e4:a1:e8:e1:68:f5:a1:f6:7c:5b:33:3f:a9:dd:b5:2c:57:
25:1c:27:55:00:59:25:d4:11:44:0b:0f:05:18:06:8f:74:04:
df:30:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:39 2026 by rpki-client