Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: AUQ6D+IPCT3ks1pm/XVQKgmJJivPBcJKIU4oT9lC+58=
Subject key identifier: E9:63:73:EB:1F:16:96:84:46:30:99:BE:B3:54:0C:64:59:67:B4:B2
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019E1EA2FE3F3F5C6AF4C431D95E7DA4A162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:00:58 +0000
Manifest this update: Wed 13 May 2026 00:00:58 +0000
Manifest next update: Thu 14 May 2026 00:00:58 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: W7h19BY3umhbjCRIjLyJcV5ve2wUk3erzwu/p1FN1JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:fe:3f:3f:5c:6a:f4:c4:31:d9:5e:7d:a4:a1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: May 13 00:00:58 2026 GMT
Not After : May 14 00:00:58 2026 GMT
Subject: CN=e96373eb1f169684463099beb3540c645967b4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:f5:93:52:88:c1:86:81:ef:be:c9:ea:4f:
67:a6:23:14:d5:b0:c3:d0:84:f5:21:4b:8f:ac:9c:
a0:f5:90:58:36:7a:d5:80:14:8f:05:66:1e:f9:f1:
f6:f5:69:11:8e:21:bd:d0:e1:f8:e7:03:bc:96:b2:
fd:fa:4f:f4:9b:b9:b4:07:b5:a0:6c:63:1e:cd:fd:
ad:3f:73:21:66:34:83:b5:eb:4c:4d:e3:56:af:b4:
ef:30:ea:f4:8c:e9:b2:08:3e:e2:25:6d:5a:37:dc:
20:e5:b4:01:b0:05:3e:0b:56:25:5f:fd:45:85:02:
ec:ef:0f:48:73:9a:83:49:4d:87:f6:e7:53:a9:a8:
ee:64:d7:2d:61:c5:4e:17:62:30:b5:f2:0f:e3:00:
38:bd:47:7e:d6:53:95:68:57:08:c6:da:c8:5f:44:
59:fe:eb:6b:5e:98:b8:72:4b:d7:91:23:6a:58:15:
69:15:74:63:56:6d:6f:5c:6e:1f:d7:c7:60:27:e1:
4f:95:49:5d:b7:07:1c:05:36:b8:8d:69:45:36:bb:
0f:e2:1c:99:aa:81:17:c1:ed:22:cc:89:33:a4:7e:
d8:97:7c:b6:ec:99:3a:ad:a8:1d:a5:a4:87:64:f2:
9d:ae:b3:35:0d:d0:d8:d0:e7:43:93:c2:68:58:3f:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:63:73:EB:1F:16:96:84:46:30:99:BE:B3:54:0C:64:59:67:B4:B2
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:78:6a:a0:01:db:51:1d:4b:aa:d1:71:4e:3e:81:ce:79:f1:
7a:ae:57:2e:ba:2d:ba:04:f3:41:e0:b9:03:96:6f:dd:cf:fc:
92:75:bc:0c:89:e2:e7:43:23:99:ce:48:41:c1:7a:a5:c2:62:
f0:81:b7:25:bb:c3:a0:88:3e:94:8a:01:85:bb:89:3b:7d:be:
e5:19:80:6e:14:74:9e:b0:44:6f:92:fc:40:0d:9f:62:e6:f6:
a0:e4:02:af:15:91:bb:11:4f:17:8f:85:e6:24:97:d4:c1:22:
00:75:ea:ab:90:c7:51:44:6c:76:82:6f:33:6c:16:85:86:90:
4f:e6:2b:42:08:83:b5:61:e4:a6:11:f4:81:34:1f:8c:b3:6d:
54:65:3d:7e:74:f5:f2:b8:5d:c5:f5:ba:a0:08:10:0c:cd:b4:
ba:b5:32:70:6a:0f:58:37:09:c4:7b:52:28:6a:ce:8b:46:32:
f2:5e:d9:22:86:71:d4:cd:93:80:b3:bb:3d:9a:9e:33:64:0a:
77:18:ae:60:c6:2f:48:b8:db:98:8d:2c:e5:ac:83:32:c4:29:
fe:2e:15:fb:d5:01:07:df:ef:32:65:4d:70:b9:f6:07:0b:e2:
97:a5:fd:a6:8a:38:b8:1a:0b:b6:1f:93:15:ee:49:a1:13:d7:
ed:62:b9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:39:05 2026 by rpki-client