Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File: ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier: RTOOXn5TT/xrExB/c3G5c3Ogwn/XlhXyMzds5VpKKyY=
Subject key identifier: FF:92:EC:31:36:52:88:21:FB:EE:6B:E0:91:D6:4B:48:13:62:E8:04
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial: 019E4053538BE088B32D01105FC3AA1F6451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number: 0816
Signing time: Tue 19 May 2026 13:01:03 +0000
Manifest this update: Tue 19 May 2026 13:01:03 +0000
Manifest next update: Wed 20 May 2026 13:01:03 +0000
Files and hashes: 1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: 6FsoLjkTdG3mSrZZ1cGiVYFPHbWWa7Yz5V1pfqx5rKM=)
2: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (hash: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 07:48:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:53:53:8b:e0:88:b3:2d:01:10:5f:c3:aa:1f:64:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
Validity
Not Before: May 19 13:01:03 2026 GMT
Not After : May 20 13:01:03 2026 GMT
Subject: CN=ff92ec3136528821fbee6be091d64b481362e804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:6a:26:d5:7c:30:cb:e8:0e:80:6b:23:c4:
96:ff:aa:66:7f:35:c2:ea:28:4d:53:31:a6:81:7a:
f7:34:03:ae:27:4c:d4:b5:3c:eb:93:2e:43:04:f3:
e3:0e:eb:2d:bd:8b:d2:b1:19:4e:86:c6:22:b8:74:
d3:6e:1a:67:76:ff:b3:81:3c:21:00:d6:9a:42:b3:
ae:08:c2:58:75:e5:d2:d3:d1:85:35:ec:76:bb:6f:
eb:65:c0:1f:aa:58:36:df:a2:97:ce:4e:23:b3:61:
81:eb:35:a9:19:08:be:6a:6c:af:da:03:fa:c5:22:
fe:ec:d1:7d:6c:d3:36:04:6d:b5:ff:c4:c6:cc:f5:
f6:55:e7:b1:3d:77:26:14:a1:f2:d7:a1:cb:ab:0d:
22:1f:cd:75:ee:ff:ab:4b:f9:f3:54:75:2c:9a:45:
0b:a5:5b:d8:21:d4:ed:56:78:80:bc:06:cf:c7:58:
df:a9:34:a5:58:73:06:7b:97:ab:15:49:00:c7:73:
e1:a8:17:b8:04:e4:c9:d9:2d:97:a8:a1:ae:95:36:
86:65:d0:09:85:80:d4:f0:74:81:55:b7:92:a8:94:
22:8a:48:28:38:df:cf:b0:2f:fa:ea:43:d9:b7:d3:
81:0c:87:fc:ea:89:66:6d:4d:dc:e2:f5:d8:ee:34:
0c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:92:EC:31:36:52:88:21:FB:EE:6B:E0:91:D6:4B:48:13:62:E8:04
X509v3 Authority Key Identifier:
keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:91:0a:9d:03:a1:f8:57:0c:65:b1:24:36:1f:16:11:48:39:
41:47:2a:b1:dd:1b:93:60:c6:3c:de:b4:75:76:a3:d9:0b:d4:
0a:7c:af:08:47:c7:ca:66:73:30:27:b1:de:09:ca:4b:21:18:
f1:98:50:bb:b2:69:ef:88:63:fa:eb:7f:5f:ab:97:8a:a0:a9:
b2:af:1f:24:bf:f2:75:b1:00:6f:18:f6:05:57:02:16:47:73:
e0:af:8e:02:8a:fa:42:d3:ad:be:69:2a:ce:5c:ef:e0:38:69:
e8:43:c6:22:5a:60:99:50:d5:ab:ce:8e:8c:66:78:a4:3a:7a:
91:7a:9d:35:a2:fd:5f:89:e8:4c:06:35:1a:49:06:d1:a3:69:
f4:c2:04:61:a6:39:c7:40:33:3f:02:8f:65:77:52:e6:b5:2e:
cb:c3:b8:6b:4f:05:86:60:68:d5:8c:85:09:7c:7f:78:8e:34:
69:ec:cf:1d:70:bb:eb:97:ee:5e:ad:2c:7b:df:d9:91:ca:9b:
83:66:2d:46:50:b2:99:64:90:8b:94:7e:10:3d:56:75:8e:b4:
3f:39:25:51:33:93:76:fc:2a:04:f8:61:d9:69:57:f0:a2:cf:
3f:64:15:c1:09:df:95:7e:d0:a3:53:18:ca:13:32:a5:7f:7a:
71:93:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 16:07:22 2026 by rpki-client