Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: Syy9RCdauyQu4HdXAKLEIT0BJwfv/BTi11PKIvFU+Uc=
Subject key identifier: 83:DA:89:54:98:D9:F0:F4:67:0C:51:8C:A1:32:18:17:04:4E:19:53
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 019E1EA3E432EB5FF6716434EBA140D77AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:01:57 +0000
Manifest this update: Wed 13 May 2026 00:01:57 +0000
Manifest next update: Thu 14 May 2026 00:01:57 +0000
Files and hashes: 1: KaT0sW3jh_PPKcDRHkAr_6LGbFg.roa (hash: 4tEmgwJp5TqeJVAPv5jHwB4A533Y/KCzgRQwAZ4AUmA=)
2: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: Onm6Vi/MKyxUXx73OiuOerKETkF8HvYohnunJJEa6m8=)
3: YpeHyUrRfHsUTh5A1_lsn9ecLdI.roa (hash: 54/I0U+2gsfxDHjTGitToFh36OuJx0rhyc8ObFsTIiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:e4:32:eb:5f:f6:71:64:34:eb:a1:40:d7:7a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: May 13 00:01:57 2026 GMT
Not After : May 14 00:01:57 2026 GMT
Subject: CN=83da895498d9f0f4670c518ca1321817044e1953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c5:d9:89:a6:80:98:63:7d:32:f9:ea:f7:77:
2d:16:60:42:c2:b9:6b:25:ad:68:86:fd:e9:1c:9c:
9b:9c:2a:b2:4a:da:ac:9e:80:c2:f5:a5:1b:16:fe:
1a:6f:8e:5b:3e:78:8e:6d:1c:31:af:c7:14:a2:55:
5b:ac:84:4a:51:f3:3d:4c:cd:41:ce:79:b6:c2:7d:
10:7c:80:4f:e1:47:97:e2:b6:05:9e:6a:f8:4c:2e:
d7:a5:f1:a2:41:43:c9:6e:9e:5b:19:15:83:f0:4f:
dc:ab:ad:d7:dc:22:6e:01:a9:f7:bf:40:93:77:d7:
9c:53:5c:2a:e7:93:3a:c4:61:bb:e5:de:4d:48:75:
91:cc:7f:65:87:c7:06:dd:e3:ad:f9:2f:0b:b2:aa:
64:d0:eb:ae:0a:15:e3:3a:78:92:d3:be:9d:c6:99:
86:5c:9b:5b:1b:b9:44:05:75:2b:1b:6e:95:dd:dd:
11:e3:57:2c:6c:2e:f5:46:98:42:61:d5:4a:c6:81:
0c:57:08:b7:ea:67:04:1f:1e:69:3f:35:64:f0:2d:
db:9f:5d:be:e8:1c:ff:ae:67:ea:af:b2:e6:83:cd:
ec:b3:cd:ba:a0:ca:cf:60:d7:b1:2d:dc:5e:83:83:
99:3e:9e:9d:ca:14:71:b8:13:ec:64:0e:7f:25:5b:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:89:54:98:D9:F0:F4:67:0C:51:8C:A1:32:18:17:04:4E:19:53
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:ba:f1:8f:25:86:51:de:94:1b:74:19:ad:11:e9:1d:ff:
78:44:ec:83:10:ed:6b:00:14:8e:95:bc:3d:7d:b8:10:58:72:
da:b6:53:9f:d2:48:d7:b8:0e:4a:6b:47:5b:3b:c4:44:77:f9:
3e:f5:85:82:7b:03:d3:6f:37:46:53:7d:9f:d8:c5:eb:c6:2f:
d1:cf:94:86:1c:4f:a1:61:14:17:e8:23:6e:6d:b3:70:f9:fd:
0b:b6:7e:53:9f:73:d7:1e:21:ae:9c:af:a8:11:60:06:a9:37:
6b:fa:38:9d:ff:f4:b5:ac:37:1d:e0:8b:fc:4d:14:7f:86:79:
a6:bb:da:5a:c2:d4:90:61:ae:62:af:96:a8:7c:6f:a6:6c:44:
f8:7c:aa:c9:13:6b:71:2d:01:88:eb:08:78:f0:8a:2b:bd:9e:
f7:0f:91:60:96:17:11:e3:1e:ea:ce:99:87:01:50:65:04:66:
fc:5d:7d:42:12:02:c8:5b:90:4b:e2:5b:91:b0:e0:5b:1f:61:
e5:16:e0:b6:1d:44:7a:3d:8e:bc:f5:b1:41:6e:b6:01:67:6e:
ab:e6:82:68:e3:74:58:f3:a0:04:b0:e6:de:48:f2:4c:5e:e9:
37:ac:f9:56:8e:06:0e:83:f4:ab:30:00:55:0d:f7:03:10:df:
f4:74:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:39:39 2026 by rpki-client