Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: povt0lyoDDD2lNhX7582/zwgPaUlPpqavJbfCUPYg70=
Subject key identifier: A1:1F:55:52:D5:2B:49:F6:57:85:1E:62:C0:89:10:33:4B:87:E4:27
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019E2F5F6D01926883717F1845F94C175CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 1177
Signing time: Sat 16 May 2026 06:00:43 +0000
Manifest this update: Sat 16 May 2026 06:00:43 +0000
Manifest next update: Sun 17 May 2026 06:00:43 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: Lb60zQdKBNy62j/rOnCJXESxU7Kn8uNyR9/w6xOUYD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:6d:01:92:68:83:71:7f:18:45:f9:4c:17:5c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: May 16 06:00:43 2026 GMT
Not After : May 17 06:00:43 2026 GMT
Subject: CN=a11f5552d52b49f657851e62c08910334b87e427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:63:e4:0a:2b:bf:d4:2f:a8:ad:b4:6c:4a:
46:9a:05:58:01:03:31:85:69:ca:fb:e6:fe:4b:e8:
ee:61:14:81:2a:aa:65:bb:5e:9d:90:9e:3f:6d:e2:
5e:fa:66:8f:b0:cd:d0:d6:59:91:4e:47:89:c9:d2:
68:04:82:2a:fe:bb:a6:c2:6e:d4:6b:66:fb:0d:ef:
05:75:7c:fc:b4:cb:80:2f:2a:5f:c7:b9:f4:ec:0b:
48:a7:6b:18:82:46:b3:64:5f:bf:19:0f:15:57:39:
62:df:e9:da:80:39:06:5f:72:6a:ad:fb:bc:e9:45:
50:41:3d:07:95:ee:65:9c:38:05:14:ad:af:e4:d0:
e8:39:a4:6d:46:ae:ae:5e:5d:5d:8b:9e:b0:52:15:
6e:a6:83:4e:87:54:66:e3:1f:87:11:76:fa:3a:7b:
b1:61:2d:3b:6c:62:5e:3c:dd:72:52:6a:96:11:89:
00:b6:dc:91:40:32:63:36:83:c9:24:4e:a8:a0:2f:
7d:b4:0d:6d:22:41:3b:d4:73:5e:a6:ee:3f:a0:2c:
b0:71:41:f3:bf:00:76:1e:81:7f:1b:06:ac:76:3f:
cc:2a:10:9a:4e:37:73:93:88:ff:31:75:f9:d3:0e:
4f:b7:27:6c:11:bf:e6:ba:10:ef:b0:8a:79:d9:ab:
ee:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1F:55:52:D5:2B:49:F6:57:85:1E:62:C0:89:10:33:4B:87:E4:27
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8c:ee:9f:4e:d5:fa:19:33:ea:e5:89:b0:70:8e:28:a1:f7:
cd:72:67:66:a4:d6:b8:ca:09:a5:29:6b:31:d8:d6:a7:66:af:
6b:5e:bd:ac:39:1d:d4:be:01:6e:fd:a0:56:a9:98:ec:b0:50:
9a:26:42:61:c3:42:f0:53:56:25:e1:5c:47:6d:ff:a3:8a:d1:
f0:0a:d6:06:fc:2e:cb:5c:f9:19:7d:60:e4:2e:7b:e8:93:38:
e6:d5:40:6e:42:dc:42:a0:ce:f0:b3:87:5b:da:03:5e:56:c9:
b2:69:02:29:cc:d5:c1:89:63:79:3f:6c:58:82:d5:46:4e:29:
65:73:71:42:07:9d:c6:41:80:47:a6:bf:b0:74:92:fb:66:85:
03:3e:88:83:d2:28:0f:df:5a:b6:58:45:c3:fb:84:c3:4e:bc:
ad:cc:7c:15:f2:d7:bb:c3:13:dc:4f:34:7d:91:80:3b:37:c7:
17:79:4a:28:4c:bb:95:f8:84:d3:70:31:e6:66:99:f3:d1:9f:
d7:a5:96:f1:5f:29:cb:23:f7:b2:1c:a6:48:90:9f:fa:7b:67:
a3:d2:c9:2d:4d:ad:1b:aa:53:26:71:f1:cc:40:24:bb:33:a3:
ff:8e:87:9a:09:8e:d9:65:ce:b5:f3:88:0b:04:d7:71:41:ba:
0e:30:41:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:15 2026 by rpki-client