
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier: hKCAakvA+sbRmfEZrRLw1sCphOBQmqhk2sNqFkFBN+g=
Subject key identifier: 2D:DB:29:29:C2:FD:9C:0C:A4:D1:00:2B:06:57:B7:49:D8:90:B4:6B
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial: 019E1F10D65D48EAF1A23248861F7A89EDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 02:00:57 +0000
Manifest this update: Wed 13 May 2026 02:00:57 +0000
Manifest next update: Thu 14 May 2026 02:00:57 +0000
Files and hashes: 1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: eovslMe+o23xJgkjFJACYeAQegjgst1aqbSEDrs1Wk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:d6:5d:48:ea:f1:a2:32:48:86:1f:7a:89:ed:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Validity
Not Before: May 13 02:00:57 2026 GMT
Not After : May 14 02:00:57 2026 GMT
Subject: CN=2ddb2929c2fd9c0ca4d1002b0657b749d890b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:c1:af:f0:ed:1b:ea:1e:43:35:f4:06:56:
c2:62:e2:14:bf:6b:27:77:71:c1:b4:4d:4c:0c:91:
76:95:14:cd:30:98:ad:a4:d9:1a:83:40:2d:e1:92:
73:6d:10:17:74:d9:0b:c0:13:b7:9f:a8:97:45:82:
3c:49:36:47:82:42:6c:b7:e3:dc:97:d0:45:b6:85:
dd:5f:98:6a:e4:dd:5d:dc:17:1a:89:ff:fd:ad:0f:
29:ad:62:69:9b:a7:46:a8:13:7b:1c:ec:25:a5:a4:
c8:74:c2:49:44:d5:d7:fb:de:53:fe:fd:eb:d1:83:
93:d1:89:61:06:16:15:14:fb:d6:4a:40:5a:fc:dd:
1d:fe:78:9b:a1:b1:f4:10:ba:00:5f:e5:21:be:61:
10:5a:2a:b6:cb:ec:1a:80:af:20:21:fb:35:09:57:
7c:2b:22:a2:8c:0e:ed:e5:c3:0a:f7:ed:80:83:06:
38:09:fb:19:0d:92:d9:4f:9f:51:87:49:5f:cb:27:
df:c2:8e:8a:0d:8d:fa:ae:d3:57:7f:cb:22:29:18:
62:9a:d7:75:f5:9c:58:ed:02:0f:95:a8:fa:c8:5b:
52:ea:2f:37:fa:f8:f8:01:a9:99:f5:56:1a:53:c0:
4d:51:f0:31:77:aa:34:16:60:6e:98:83:fd:7b:53:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DB:29:29:C2:FD:9C:0C:A4:D1:00:2B:06:57:B7:49:D8:90:B4:6B
X509v3 Authority Key Identifier:
keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:93:15:d9:cd:2e:e2:05:40:6c:43:06:4a:a4:e3:0e:43:35:
f5:4d:72:aa:52:59:55:a6:9a:bb:d9:92:14:99:16:db:02:a8:
19:fe:76:f6:39:be:c3:78:a2:c1:7b:e1:e7:b6:23:a6:63:14:
d1:e4:db:11:f1:90:b5:05:18:0a:69:47:68:7c:22:37:0a:9a:
08:fe:b6:6d:ad:4c:97:ab:65:c0:cf:0e:50:47:eb:b3:fe:af:
68:e3:83:fa:ea:c5:43:e9:cb:42:e2:69:4e:48:dc:c0:25:d3:
75:18:6f:55:86:6a:eb:b8:59:24:f1:80:33:9e:e0:db:25:56:
ee:3b:7b:17:d9:fe:b9:60:06:bc:1b:03:2a:c8:a4:7f:7a:17:
f9:5c:cd:3b:0a:5f:c0:e3:65:81:74:1d:ae:d2:7f:d3:ed:0a:
da:37:8a:86:c5:ab:1e:3e:c3:32:ad:9d:62:e9:8f:a7:54:d1:
d6:7b:c8:24:db:dc:b8:5a:3f:fb:33:1d:0d:47:43:38:bc:a5:
3c:f2:97:a0:23:37:f7:ed:fd:64:32:f4:fc:7b:0e:5c:4a:00:
da:2e:cf:4c:40:f8:a6:48:ce:2b:6b:7b:f3:0a:d8:f6:79:87:
cc:3a:00:c8:fd:a8:74:be:ed:ce:45:6d:d4:36:49:39:ec:97:
88:fa:f2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:00:40 2026 by rpki-client