Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier: ZnLfLargWXBNQdlSNGWcNJ+5ButWt6Up/ePjv4FIWJM=
Subject key identifier: 1C:C5:6F:3B:88:38:80:C6:E3:C6:4D:FE:D5:70:AF:CD:BB:E7:39:E7
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial: 019E1D22342B79F2BFFE62640238BEC1D0FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number: 189B
Signing time: Tue 12 May 2026 17:00:41 +0000
Manifest this update: Tue 12 May 2026 17:00:41 +0000
Manifest next update: Wed 13 May 2026 17:00:41 +0000
Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=)
2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: BBQZNFJ6TWBLFRGYnaEoTVP41mdTBbVTezGMefz5kMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:34:2b:79:f2:bf:fe:62:64:02:38:be:c1:d0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
Validity
Not Before: May 12 17:00:41 2026 GMT
Not After : May 13 17:00:41 2026 GMT
Subject: CN=1cc56f3b883880c6e3c64dfed570afcdbbe739e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:aa:42:6d:b1:40:05:72:8a:ea:5b:55:fd:
a2:af:14:ce:cd:91:a7:7b:a1:3f:8d:88:c8:bc:56:
02:e8:c7:de:dd:93:d3:78:06:d5:46:86:90:e1:b6:
33:42:01:37:d8:ab:ce:de:59:9d:3d:1f:29:fd:f8:
a1:2c:ba:88:34:16:0c:da:7b:06:9c:eb:69:f4:0e:
1e:94:e4:2c:db:b2:be:35:30:87:4d:06:67:ae:32:
03:1a:e2:10:bb:54:1d:2d:5b:fe:84:2e:cb:ca:52:
99:1c:df:04:59:fa:6a:6b:80:e3:37:07:e4:a5:b1:
90:fa:6e:22:79:dd:db:7a:39:bc:5c:47:ce:c6:46:
2f:52:44:9d:7f:26:5c:75:a6:eb:b6:f7:ea:8b:5e:
09:f1:90:6c:b7:30:f7:a5:f6:12:8f:f4:54:50:37:
3f:7d:f8:91:9e:c2:b7:42:58:fd:63:ed:02:11:ee:
12:c9:b5:1e:a2:ba:d6:83:3a:b3:fb:49:db:a1:84:
b2:02:24:2e:2f:d5:fe:1b:8d:74:e4:ba:ac:7c:72:
80:3d:4b:6b:5d:f0:4c:cf:84:ea:2b:4f:cf:ef:80:
68:d5:15:62:48:2c:f5:2b:78:da:90:c8:9a:97:77:
b5:51:3f:1c:07:76:3e:d9:b0:df:0f:05:0e:df:0e:
53:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C5:6F:3B:88:38:80:C6:E3:C6:4D:FE:D5:70:AF:CD:BB:E7:39:E7
X509v3 Authority Key Identifier:
keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6f:1f:ff:84:66:25:89:84:a7:e2:a2:a3:21:92:ba:bf:35:
6b:7d:93:14:e3:e4:78:06:16:19:58:56:eb:97:56:79:2a:c1:
ed:dd:1a:da:9f:3e:8c:7b:49:26:87:cd:8e:0b:38:82:0a:f4:
d3:16:db:f2:33:1d:e0:2e:b4:b3:40:65:b5:e5:2e:fa:97:08:
d8:74:f1:fa:26:a6:b6:fa:8e:a4:e7:e8:47:c5:e9:60:f4:21:
dd:bb:f3:0c:91:d8:8d:87:a3:90:8e:b5:25:62:16:7e:ba:bb:
d3:44:18:08:f1:15:ae:e7:9a:3f:6d:86:4d:23:34:9a:e5:f8:
2b:4e:d4:45:cf:5c:8a:2d:1b:4a:00:e2:78:0e:b2:9e:bd:9e:
2c:2b:ae:bb:26:a2:21:30:82:aa:6b:fa:8d:8d:25:fd:8a:ea:
21:10:13:ef:ae:16:83:2d:b3:e4:d9:be:61:ea:6b:46:43:8d:
02:57:af:20:ba:4a:bc:06:97:d6:7d:50:83:5f:bd:c9:26:e8:
ed:cf:e2:56:ee:b5:b3:de:18:22:e9:10:98:97:95:c8:f6:95:
7c:2c:f5:fc:ae:93:4b:72:86:74:b3:fd:8c:52:b7:9c:7e:df:
c5:6a:cd:1a:5b:52:56:f4:8d:91:f9:80:ee:1f:7e:40:87:04:
f1:a4:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:56:23 2026 by rpki-client