Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
File: i85CgamU1SFm7z_xdyi64hiFX8Q.mft (raw, json)
Hash identifier: VrpgTPdfRpiCLPHSEh0+UM/AquT2t8riXA8jDgiKt4c=
Subject key identifier: DE:52:0E:9D:38:A0:57:7D:46:84:8A:81:04:E2:5A:FE:79:96:53:66
Authority key identifier: 8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
Certificate issuer: /CN=8bce4281a994d52166ef3ff17728bae218855fc4
Certificate serial: 019E1E34D5AAA1FC7EE7F99EEDC973B8B52A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 22:00:39 +0000
Manifest this update: Tue 12 May 2026 22:00:39 +0000
Manifest next update: Wed 13 May 2026 22:00:39 +0000
Files and hashes: 1: TIwiSG3SZJO9cgM-NFojwrWmCjg.roa (hash: aGI8Zo4K9271la27XJcpbk36NlmUSX5++U6ehpboAto=)
2: i85CgamU1SFm7z_xdyi64hiFX8Q.crl (hash: RXIA/lCdUNzq/5tAu2z1tXi1hKkRJqdo+C6wTaUGCFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:d5:aa:a1:fc:7e:e7:f9:9e:ed:c9:73:b8:b5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bce4281a994d52166ef3ff17728bae218855fc4
Validity
Not Before: May 12 22:00:39 2026 GMT
Not After : May 13 22:00:39 2026 GMT
Subject: CN=de520e9d38a0577d46848a8104e25afe79965366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:91:48:5d:69:05:50:ff:af:29:8d:a6:be:
f3:76:60:4f:fe:90:dd:3c:c1:aa:eb:12:ea:64:9c:
fc:e4:fb:97:25:58:30:33:b0:70:62:7f:14:2c:7d:
f3:9b:26:63:0d:ad:98:2b:9e:f2:1c:50:92:b2:34:
8e:9b:14:7f:e3:4c:9b:d2:d7:41:57:d2:78:1a:56:
9f:da:49:df:85:40:05:04:3d:48:56:4a:08:bf:11:
39:63:f0:14:30:24:c7:94:3f:79:53:52:7c:48:dd:
b2:ec:7d:f0:17:c9:92:93:f9:6b:ff:4a:5d:7e:d2:
b3:64:63:7d:07:77:d1:b1:67:3f:71:92:20:09:8e:
9e:5b:e8:db:11:1d:a2:35:73:87:32:7e:e7:df:7d:
e7:4d:c8:8a:47:13:61:55:87:3d:a8:5c:8d:ae:b4:
ed:99:ae:17:b5:b1:19:c5:c0:4d:c8:26:c1:1e:55:
55:86:b1:69:e1:14:ba:e1:0c:86:eb:ad:41:ec:78:
56:f5:b6:4a:3e:4f:c3:69:12:33:58:ff:51:2a:36:
7e:97:22:dc:2d:52:10:fd:64:06:7c:eb:02:a1:ed:
1a:3d:91:a4:af:2d:26:88:f0:3b:b5:d3:59:66:69:
85:a5:9e:4e:2e:ed:bf:a2:3d:2b:6b:d2:f1:c6:e5:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:52:0E:9D:38:A0:57:7D:46:84:8A:81:04:E2:5A:FE:79:96:53:66
X509v3 Authority Key Identifier:
keyid:8B:CE:42:81:A9:94:D5:21:66:EF:3F:F1:77:28:BA:E2:18:85:5F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i85CgamU1SFm7z_xdyi64hiFX8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ffc448-8e19-47aa-9665-a1e01c63343a/1/i85CgamU1SFm7z_xdyi64hiFX8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:80:ac:62:8b:49:48:5f:85:9a:30:20:3e:89:32:32:83:d5:
13:77:66:83:3b:2d:a1:07:55:ae:cd:6c:5c:93:9a:71:e9:cb:
a5:99:51:63:29:18:d0:32:99:3d:45:e1:1d:76:d6:78:4f:e0:
66:fe:b5:a7:72:e4:3e:29:f8:17:ca:1c:06:02:f8:ee:46:09:
28:62:71:e0:c7:e9:e0:20:5f:8c:41:d3:fe:3f:25:0e:4f:73:
df:39:d8:77:3f:8c:4c:2f:60:d5:0a:34:ee:67:4f:84:a7:36:
54:37:7d:50:23:02:64:bf:6f:fd:45:34:05:77:92:58:9c:01:
27:d7:ce:ad:16:dc:45:bd:cb:19:7c:f0:4c:7a:a5:f8:5a:81:
31:3e:fa:49:dd:50:fb:1d:41:83:c0:dc:57:64:9f:ba:82:45:
00:99:ef:06:f1:7f:a6:6e:ff:72:77:9b:b5:71:e5:ad:d0:53:
e0:95:e6:99:e8:51:5f:c1:a5:7b:58:2d:d2:77:93:33:d2:fc:
dc:4a:cd:43:7c:46:89:43:2d:b2:c9:64:9c:18:69:ca:f5:31:
ef:51:47:47:cd:94:7a:3f:9e:be:da:0e:7d:9b:98:0a:49:e4:
17:c2:f9:06:bd:c4:2a:87:98:9a:e6:79:b0:42:af:c4:df:8e:
12:7f:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:25:52 2026 by rpki-client