
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
File: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft (raw, json)
Hash identifier: rVzINItzUXGWpBwiAoB63B2+K1lHzp1CMlx2eeey3Hk=
Subject key identifier: 86:BE:21:53:58:82:C2:A2:5F:8B:71:F8:7C:E4:CD:79:37:F6:52:24
Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91
Certificate serial: 019E27A615E2F39B88F9CA9C7141F023D6D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
Manifest number: 1550
Signing time: Thu 14 May 2026 18:00:56 +0000
Manifest this update: Thu 14 May 2026 18:00:56 +0000
Manifest next update: Fri 15 May 2026 18:00:56 +0000
Files and hashes: 1: TnxLiTU4N8IxRzgKudiN6lBfkB0.roa (hash: 84h5erlaI1tFTllY8zVF7aYQ8Di+2iwxgRfjK8j6Kko=)
2: WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa (hash: bxPUG4RUFxYGi4wK66fAhQIJ42FQsayg/q85b6OoGU8=)
3: mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl (hash: 8j5y9kDoklX8NbTSXlx9X4IR6BHxGEOAz+XxCDutOJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:a6:15:e2:f3:9b:88:f9:ca:9c:71:41:f0:23:d6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=988296c50d94bbed225f2867231fa5093debea91
Validity
Not Before: May 14 18:00:56 2026 GMT
Not After : May 15 18:00:56 2026 GMT
Subject: CN=86be21535882c2a25f8b71f87ce4cd7937f65224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:aa:48:78:cf:02:32:61:92:b9:bf:c6:ea:
eb:3a:56:86:7e:42:8e:b0:3e:15:6f:4b:8b:fc:06:
8a:54:22:90:f6:75:70:8e:0c:50:c5:19:04:f2:87:
cf:d4:38:7e:c3:02:cf:3d:11:25:9c:71:f6:9e:37:
d7:5f:f7:c9:4e:fb:81:73:76:e5:87:0a:61:53:53:
85:1e:2a:89:85:13:b1:b2:a7:f3:fe:f6:22:1a:3f:
84:d2:a3:06:5a:d5:06:39:ee:2c:85:c7:9b:47:1a:
bc:8e:9c:60:02:88:6c:90:da:2f:42:86:ae:75:36:
bf:b4:c2:2e:b9:d2:7a:d2:37:42:d6:00:ef:4c:f7:
95:ea:13:87:5a:f3:d5:92:5c:d9:81:8a:3a:6e:f3:
e3:c1:c2:7c:a4:f6:50:88:05:c6:37:3c:be:10:b3:
81:4e:ce:af:ca:c0:3e:b3:71:d6:7a:ac:9b:13:c2:
d4:d9:d1:5e:36:e0:c9:9e:6c:45:6e:16:59:92:ff:
38:4f:24:8f:21:f9:5d:79:63:33:ed:bb:69:8d:f7:
86:2a:bc:03:36:25:44:f7:60:8d:48:4e:a9:f9:f6:
57:25:41:a3:dd:8d:97:66:08:cd:77:49:1b:30:e7:
18:b6:e2:0e:2f:49:3e:e4:85:00:a0:48:47:89:19:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BE:21:53:58:82:C2:A2:5F:8B:71:F8:7C:E4:CD:79:37:F6:52:24
X509v3 Authority Key Identifier:
keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:08:da:bd:19:dd:f8:c8:f6:74:68:d2:85:a5:a4:29:72:d3:
9f:44:f3:c5:ef:ae:03:5b:fb:41:a0:3d:7c:74:ca:e2:61:e0:
61:e6:aa:e7:10:d1:33:d9:94:ff:0d:7b:5f:5c:ac:b4:bf:08:
ff:aa:06:70:c0:a4:27:51:d8:18:3b:d2:93:c3:35:06:1c:12:
f1:d2:2b:9d:0d:50:09:47:32:f6:f7:f5:3c:cc:ce:bf:5e:87:
68:d7:d4:33:a0:23:5a:e7:ba:39:7d:81:6b:8e:1b:e6:8c:2e:
84:4f:99:f0:5d:96:68:fb:d9:c4:56:d1:43:31:56:8b:61:d5:
1c:e0:98:b3:07:ff:31:9c:82:fe:41:3d:8e:06:c7:ec:e9:35:
b2:2c:9f:41:33:38:61:a4:34:f9:80:5d:11:f4:25:5f:69:e1:
2d:26:10:63:61:0b:3e:81:c3:6f:f4:f7:cc:e8:5a:78:b5:0b:
29:01:cb:d4:36:b0:45:da:19:7f:0d:35:2e:46:d4:f5:da:df:
9e:9c:8e:c7:d1:86:01:d3:07:8e:62:9d:68:44:2d:b6:d0:67:
22:89:4d:47:a3:2d:39:a8:ac:86:cc:d8:91:cd:88:99:18:1b:
50:0f:ba:2d:0d:c6:55:d7:9b:28:07:90:0a:d4:e4:da:e3:21:
55:38:09:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 23:13:05 2026 by rpki-client