Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: xo1HjdIaSShBdVZbbWG7uw+54xPb2jiKpDGTUwKEiwY=
Subject key identifier: BE:96:FF:E4:F3:1A:8E:1B:1C:30:96:D7:E1:86:05:1C:86:2C:36:5A
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019E1D90846993DB520E16685FD730C64E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 190B
Signing time: Tue 12 May 2026 19:01:10 +0000
Manifest this update: Tue 12 May 2026 19:01:10 +0000
Manifest next update: Wed 13 May 2026 19:01:10 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: IB2ggcnBsdMPuH8ee2TqTI/3TCxwbF3sjYKT0+1JS/g=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:84:69:93:db:52:0e:16:68:5f:d7:30:c6:4e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: May 12 19:01:10 2026 GMT
Not After : May 13 19:01:10 2026 GMT
Subject: CN=be96ffe4f31a8e1b1c3096d7e186051c862c365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:99:79:90:7d:21:b5:17:fb:53:ad:2a:a8:
4c:1b:0d:80:95:30:f7:1e:4c:f7:e9:75:ae:78:bc:
50:56:95:7b:5e:28:f3:ca:b9:06:c0:40:5f:8b:f0:
2f:b6:f0:40:5b:95:94:39:95:29:3d:30:52:0d:a4:
c8:55:ff:af:dc:e3:44:dd:5c:17:cb:ec:e3:79:d6:
ea:02:37:2c:8e:17:21:48:fb:9f:2e:63:9c:60:57:
63:70:f9:55:b7:27:a3:46:0e:cb:5d:50:a7:e2:eb:
76:3a:95:78:33:a3:a6:ed:6a:39:12:33:51:72:a7:
8f:81:73:3e:95:b4:c0:bf:c8:fb:af:bc:50:51:4a:
0d:1f:66:de:71:29:94:c8:82:f8:b3:a5:1e:e5:95:
c3:0a:67:0c:50:47:4d:a1:bc:f9:2e:95:d4:0b:39:
b4:84:8a:e1:86:26:67:00:f6:c6:1b:40:92:23:03:
c8:77:9c:0e:06:9f:1e:52:25:ef:59:7e:5f:dc:91:
ca:e0:0d:46:4c:56:f7:bd:4a:16:38:70:8d:ca:67:
a8:2c:95:1b:13:8d:f9:ec:53:ad:69:68:98:8c:42:
50:1f:06:e5:86:9a:8a:08:dc:56:cc:59:f8:50:9f:
be:9b:03:e8:79:e1:87:11:3c:b6:2a:fe:06:98:13:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:FF:E4:F3:1A:8E:1B:1C:30:96:D7:E1:86:05:1C:86:2C:36:5A
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:6a:10:06:10:13:7b:3d:55:c4:37:9b:75:b5:7c:1c:cc:
a0:70:f0:e9:0b:f3:cf:01:45:f1:a6:ae:b4:98:ff:fa:c0:62:
3d:10:f3:9a:5e:ee:ae:c7:19:bc:8d:3d:ec:ce:93:ce:32:8b:
7f:a1:f1:95:23:c2:55:8c:d1:e7:6c:cc:76:00:ea:f4:e6:4d:
bb:cf:f4:a3:70:42:5e:5c:0d:02:1e:18:b7:01:42:38:86:06:
a4:12:10:76:86:e6:e3:fd:9a:3f:ed:ff:6f:8a:29:dc:76:ef:
8d:08:74:29:65:0b:18:cf:a6:87:e7:ac:b5:1b:27:ba:f3:93:
3e:6e:40:9e:ed:e9:cc:b4:a1:a6:e5:66:38:7a:41:7b:a4:f7:
13:7c:fc:57:af:4a:67:54:00:27:23:1f:f1:e5:ae:0b:41:1c:
d3:80:a4:f1:e5:47:9e:6d:5f:fb:8a:77:21:7e:f6:b3:23:bc:
63:32:54:b2:72:aa:5f:a3:1d:b3:d5:66:7c:0f:83:a9:c4:8f:
ce:4e:7a:71:77:a0:f7:98:bb:96:35:a0:8b:3f:18:22:e0:b7:
16:6d:8e:95:be:91:23:97:ba:23:9c:f3:6e:60:d0:22:36:07:
eb:39:4f:57:b6:be:3f:e7:fc:8d:77:dd:9e:1c:bf:04:0b:16:
5c:5d:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:30:58 2026 by rpki-client