Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
File: 448QoseS0NNlZ4o2yn9_FAnKOv0.mft (raw, json)
Hash identifier: GJ4wmgsBn2jz2lujmOooQWn8MoCsAud0wQoSBSc7X88=
Subject key identifier: 63:CC:BE:D1:D8:F3:CC:C1:4C:EF:FF:DC:3A:D9:91:97:57:FC:9B:13
Authority key identifier: E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
Certificate issuer: /CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Certificate serial: 019E1D22692A463692C5938AE601B2481E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 17:00:54 +0000
Manifest this update: Tue 12 May 2026 17:00:54 +0000
Manifest next update: Wed 13 May 2026 17:00:54 +0000
Files and hashes: 1: 448QoseS0NNlZ4o2yn9_FAnKOv0.crl (hash: rZThoMPYaZCOs5wCHDpAtF0eokzIhqUgWyhXUlgKv1E=)
2: sGfgaW1LiewBhrOBJvsdriioaTU.roa (hash: op9iNN949E3VNzRYyQTY+5GgLdt3CTSRD0WZrCE+fbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:69:2a:46:36:92:c5:93:8a:e6:01:b2:48:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38f10a2c792d0d365678a36ca7f7f1409ca3afd
Validity
Not Before: May 12 17:00:54 2026 GMT
Not After : May 13 17:00:54 2026 GMT
Subject: CN=63ccbed1d8f3ccc14cefffdc3ad9919757fc9b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:27:4c:0d:02:81:02:f8:c3:bb:55:5d:b9:8f:
b5:3d:a2:6f:88:18:cf:7c:5e:39:cb:a3:62:b6:ed:
68:da:2e:56:e6:2f:b5:3b:f7:d5:bd:49:31:c0:da:
e2:1a:04:b5:62:a4:96:7d:bd:ec:f5:c5:ee:20:63:
45:12:ea:65:45:e1:97:a9:c9:67:f3:ca:5b:fe:03:
00:26:37:6f:ba:84:b4:09:ed:ad:b9:8e:49:5e:c6:
20:98:27:bb:04:4c:1e:8e:d2:22:5e:e8:0c:f7:76:
bf:3c:1d:ba:90:d0:46:84:2c:ab:88:77:d6:e0:42:
55:57:83:f9:e7:ad:9d:cd:18:45:86:1d:61:38:1c:
be:86:6f:a2:85:1d:33:7e:23:4b:ac:03:52:42:db:
fb:a9:e9:0b:bd:7c:56:c9:7a:31:77:90:42:89:ba:
63:88:0a:6d:30:a3:dd:d7:1c:26:57:b3:2e:56:9a:
71:60:79:f8:df:af:52:a5:c8:62:4c:e7:75:2b:af:
8d:12:a4:a1:7e:b8:78:77:4f:dc:da:51:5e:58:8a:
db:83:5a:23:1b:10:ab:93:bf:e4:09:8e:e2:88:8f:
c7:6b:72:cd:6d:93:92:d1:92:29:e0:56:85:a9:71:
af:89:4c:3b:43:dd:9e:55:5a:ae:50:ff:4b:08:a9:
26:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CC:BE:D1:D8:F3:CC:C1:4C:EF:FF:DC:3A:D9:91:97:57:FC:9B:13
X509v3 Authority Key Identifier:
keyid:E3:8F:10:A2:C7:92:D0:D3:65:67:8A:36:CA:7F:7F:14:09:CA:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/448QoseS0NNlZ4o2yn9_FAnKOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5335e2-1598-4822-8227-8353aa40baeb/1/448QoseS0NNlZ4o2yn9_FAnKOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c8:8a:f7:a3:4a:5f:83:0b:0f:57:8c:67:1c:bf:73:d7:fd:
d8:18:0e:ae:e8:b1:26:07:6b:6a:36:8d:08:4f:6f:d9:af:45:
9e:58:ca:1f:4e:a7:2d:a4:ec:1c:63:9d:62:fa:49:9e:c2:e1:
81:fd:29:d3:1d:3f:9c:af:f6:33:4a:30:c5:fc:83:0f:7d:8f:
f2:14:cd:3d:42:3e:48:d0:74:78:06:7b:f0:eb:0f:9b:c6:99:
ea:9f:fc:4b:39:08:18:41:2a:a9:94:d5:2d:0b:85:da:c2:9d:
69:5f:99:3b:bc:76:1e:ac:19:62:d2:28:75:2e:d4:97:2a:3c:
cd:48:7a:9e:71:3c:9f:44:0a:88:86:cc:17:5d:18:ed:53:ab:
bb:18:36:12:41:f7:95:b1:96:6c:0e:4c:4f:a0:cc:85:ea:5c:
39:6e:7b:0b:68:be:c0:79:b6:c4:b1:9a:7d:03:96:33:ae:99:
8b:cf:d3:7b:dd:9d:85:ea:cb:04:64:7f:36:b5:e0:93:92:55:
5d:f1:01:cb:3f:6d:2a:b4:b5:77:42:80:f0:f6:00:11:ea:e2:
d1:f5:01:b7:16:cb:de:e0:19:88:41:70:bf:3e:5a:9a:d8:f0:
5d:5d:07:db:5c:98:4c:20:59:ae:93:ac:76:55:5a:25:3c:ab:
58:ff:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:01 2026 by rpki-client