Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: 4fFCW2v9yRAIVpP+CmwuUnlEJNfLLevvCP0NgFbiZF4=
Subject key identifier: 20:7F:45:4A:6C:45:68:F6:60:D2:65:E2:9E:64:AD:48:3D:F6:E0:CE
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 019E1F108FD28B87221E24F2637EF933C2AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 190E
Signing time: Wed 13 May 2026 02:00:39 +0000
Manifest this update: Wed 13 May 2026 02:00:39 +0000
Manifest next update: Thu 14 May 2026 02:00:39 +0000
Files and hashes: 1: jSg-FBkeg1R-PLxCirXbhqCALA8.roa (hash: lF16qfXyhlcBonE6Swph7S7GMbK5m+Lvc5sCLsaOquY=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: aADCV6QnDUqpOKDGbfCo1HqbNgpVodNs6yGF0Ytc19Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:8f:d2:8b:87:22:1e:24:f2:63:7e:f9:33:c2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: May 13 02:00:39 2026 GMT
Not After : May 14 02:00:39 2026 GMT
Subject: CN=207f454a6c4568f660d265e29e64ad483df6e0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:07:f5:f9:d1:e3:19:e9:fc:13:fb:27:cc:
47:ec:68:e3:f8:5c:e8:d8:77:51:fe:ec:fe:c3:d2:
c9:58:81:8b:45:1c:48:28:29:90:ad:ed:de:ce:40:
24:52:1f:a8:9b:a1:a7:39:16:6e:7f:22:9e:45:80:
89:99:a2:e2:aa:90:77:76:f4:dc:cc:b2:1f:dc:34:
a7:f9:63:42:34:f4:41:48:13:f1:3d:58:b2:b3:2e:
03:d9:e8:f1:65:78:c3:a7:ce:55:62:63:f0:75:dd:
11:d1:18:c5:a1:d0:55:82:4b:da:39:7d:a5:fc:a2:
ed:67:67:4f:bb:2f:4f:c2:0e:78:7a:51:15:d1:c3:
84:a2:68:cd:77:2f:30:1f:aa:17:3c:53:3c:5e:be:
ef:c7:0e:99:4e:b0:bb:48:2e:eb:8f:68:48:a0:dd:
96:50:18:06:a8:52:e9:1b:c6:0d:2a:1d:a0:0a:0c:
11:34:0f:ed:bb:50:03:55:85:e5:ed:fa:1e:a4:01:
d0:31:b1:c9:6f:41:f5:92:ca:44:2e:62:ce:98:6f:
40:ca:f0:1e:0e:60:e7:12:0d:7c:51:74:2d:bb:58:
46:6c:e0:7a:32:63:c1:0b:88:8c:b8:af:eb:06:47:
f5:59:62:a1:e1:da:b1:44:2f:40:84:4b:43:d6:40:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:45:4A:6C:45:68:F6:60:D2:65:E2:9E:64:AD:48:3D:F6:E0:CE
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dd:52:4e:13:1f:33:a1:cf:d8:b5:6c:69:be:5b:7a:17:ae:
fc:cd:c8:2f:fe:ae:8a:16:a6:6e:40:25:0d:1b:90:cc:ba:3b:
51:ad:bd:5e:90:8b:cc:15:e8:b5:12:8d:ad:4a:27:ec:ce:8f:
b0:e6:c9:63:49:6a:91:4c:f2:96:42:8b:ff:a8:0b:c8:87:88:
d6:f2:7f:3b:43:49:d2:44:91:d9:5f:c8:59:46:4b:88:19:1f:
d2:6d:af:f8:5f:ab:29:eb:61:d7:2d:4a:9e:cf:09:35:0b:4a:
b5:c4:6f:de:3e:93:c1:c1:fb:c3:d5:22:d3:fa:d2:87:e8:86:
29:a4:a3:20:44:75:3b:2f:97:b2:86:f6:ed:2d:b7:f4:ad:11:
d4:56:2a:13:6a:fa:17:4e:d0:e7:b8:9e:3d:17:0a:77:44:87:
6b:73:35:5f:34:a8:de:ff:46:6c:8e:17:55:f7:b8:19:10:5c:
ed:8a:e9:6e:ee:1a:4e:21:54:63:f2:0b:f8:a3:9d:13:cb:69:
1e:4e:5f:a9:76:95:69:23:09:bf:74:c5:af:a3:31:1c:80:b5:
25:64:0b:72:83:ee:ac:78:63:0f:af:80:5f:a1:d1:d7:59:f4:
c9:85:49:e2:a7:c0:99:34:8e:db:fe:34:c3:cc:d2:d6:c2:46:
27:fc:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:05:26 2026 by rpki-client