Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
File: ibMy1XzhT6sevXRoF91wEGLHSog.mft (raw, json)
Hash identifier: Qs0eXcHokjdE+O2uoAAo5apZHixcyOqtm7U5vqi1L2c=
Subject key identifier: 42:CA:3E:CB:4C:D7:BC:40:B6:1E:27:0F:61:25:F2:CE:A8:5F:D8:F1
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 019E1F1148AE3577FE76AA521F4F42C8E717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
Manifest number: 1911
Signing time: Wed 13 May 2026 02:01:26 +0000
Manifest this update: Wed 13 May 2026 02:01:26 +0000
Manifest next update: Thu 14 May 2026 02:01:26 +0000
Files and hashes: 1: KuMp-T9rHWOUUL9bo8UBMERxJdY.roa (hash: h2sZnCOwhT2tqn40Qa1cfFPCyVBeCwa6Egkx9SNG7y8=)
2: W_9CizajI-Jq4yu8EOHAH-58qn0.roa (hash: ak8K9GcxXdSZ7IyX+XNEN4b3nMc5HWmOv+1OxaewRRQ=)
3: ibMy1XzhT6sevXRoF91wEGLHSog.crl (hash: yBY4jOZdFpZbF6aMCKQYiUD3u+EW604Uf6BdF/+LHA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:48:ae:35:77:fe:76:aa:52:1f:4f:42:c8:e7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: May 13 02:01:26 2026 GMT
Not After : May 14 02:01:26 2026 GMT
Subject: CN=42ca3ecb4cd7bc40b61e270f6125f2cea85fd8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:25:f0:8a:de:60:a3:83:99:50:0c:7e:da:
e1:f3:57:c0:af:c9:0e:23:21:d2:1d:0e:6a:5a:3c:
4f:21:b5:b5:9a:16:36:72:7d:c2:47:ba:27:35:1d:
eb:ba:fc:9f:46:9d:46:56:06:0f:40:50:8b:bd:7c:
e5:7b:46:b9:9c:61:91:0e:bd:89:07:46:34:29:94:
52:9e:43:f7:78:b4:4a:b6:2e:2e:fb:4e:9a:37:e5:
b0:33:6a:53:64:e3:a9:63:54:56:77:bb:39:80:07:
16:77:0c:15:fc:d8:df:3e:4d:5a:35:24:31:05:a0:
35:59:d3:6d:bb:55:f7:d7:69:25:5d:3c:b1:00:90:
ca:05:15:5e:9e:95:64:05:79:a3:af:22:aa:3c:99:
aa:1c:88:7d:48:cc:c3:21:96:22:8b:b9:7b:4e:16:
52:3d:51:5f:28:13:c0:3c:b4:5b:d1:fe:da:d8:fb:
e0:9b:ad:c7:50:0e:2b:a6:d3:e3:e3:e9:86:c2:32:
ff:fa:26:a7:0c:90:d8:2b:bd:28:07:7e:8f:58:52:
35:b4:fd:ec:66:eb:7f:33:92:c0:be:01:11:59:73:
6c:1b:18:e9:65:32:57:e8:1d:39:1d:78:63:c3:a7:
85:58:22:2b:94:54:88:78:74:d2:8a:af:3a:3f:b2:
ec:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CA:3E:CB:4C:D7:BC:40:B6:1E:27:0F:61:25:F2:CE:A8:5F:D8:F1
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3e:f8:85:fa:57:54:e5:4d:94:12:ea:e5:07:20:a6:40:e3:
5c:d5:8c:15:af:87:99:7b:a9:39:38:d2:70:75:81:ea:08:30:
89:0a:df:f7:1b:90:36:b5:db:e5:05:48:05:8d:d1:6c:ae:4d:
54:57:9a:33:af:6f:4b:66:d7:de:c3:62:75:a9:5f:01:ee:ba:
a6:d1:54:78:b9:df:ad:f4:d5:d6:5a:2d:9a:c8:32:34:1c:61:
d7:c0:09:9e:2e:ba:37:92:cb:1b:f5:fb:6b:60:f7:b1:0b:b8:
18:33:a8:77:d3:4b:75:ab:75:20:5b:b9:fb:33:5d:f2:5b:04:
e1:be:16:8c:f8:71:c3:ce:3e:38:17:3a:1e:04:6d:a0:23:db:
09:31:21:fa:de:6d:25:a7:62:39:3d:1c:8f:56:14:e3:37:96:
d3:a3:2a:27:40:63:13:71:36:9a:a2:72:48:83:2a:9f:c7:bb:
f0:27:30:d1:03:dc:96:ef:b2:23:27:d9:14:35:d2:91:44:7a:
ab:7c:31:15:f8:ea:01:c2:72:42:d8:c8:c6:37:70:f7:ca:41:
3d:93:16:a6:cf:3a:63:6c:37:eb:51:9a:48:36:49:c3:ca:18:
fc:e7:06:1f:0c:a0:50:93:fa:72:4e:77:64:8f:c2:1d:cd:fa:
7b:38:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:17 2026 by rpki-client