Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: YVAw2IpS7bhjMsNqJ5bGRwM3I5qAFiH9YYW6XoAWIfw=
Subject key identifier: D0:86:6F:84:3A:53:72:0E:1C:78:CC:B5:26:B8:D7:47:16:0F:85:7B
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019E295E445D96A2A9E3DB7D76CEBEBB6CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1909
Signing time: Fri 15 May 2026 02:01:44 +0000
Manifest this update: Fri 15 May 2026 02:01:44 +0000
Manifest next update: Sat 16 May 2026 02:01:44 +0000
Files and hashes: 1: 8NckC_oseoG1c4-4ea0CrcpBLdM.asa (hash: 8hX5tr+7WeyJg0xyopH30d0iH2Eoc2imGEvt1yJnVGo=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: w1XFH5yuaSyskjQnVn+qEUJm4dKxBxrrAZPer7SJ8Mc=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5e:44:5d:96:a2:a9:e3:db:7d:76:ce:be:bb:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: May 15 02:01:44 2026 GMT
Not After : May 16 02:01:44 2026 GMT
Subject: CN=d0866f843a53720e1c78ccb526b8d747160f857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:c4:4f:49:67:1f:35:09:57:5d:81:5d:9a:
84:2f:03:e7:e2:f9:4a:c1:12:5d:8c:a5:50:4c:81:
69:49:ff:44:dc:b6:d2:c2:b7:74:d9:54:5e:ae:ca:
72:7c:22:bd:6e:09:bd:35:9e:9c:df:50:92:60:0b:
d3:dd:0e:d5:73:af:50:44:91:a2:74:f4:1a:a6:03:
b1:34:1b:4c:68:20:96:ab:2a:bb:a6:e4:43:64:86:
e5:f7:11:db:64:66:0f:ec:64:1b:16:22:fa:93:02:
62:c7:80:5c:39:75:4f:16:ff:8b:cc:c6:fe:82:2c:
2c:79:f1:75:86:47:f4:8b:1e:fa:39:cb:96:7f:b7:
33:1b:bc:bb:0a:ed:d5:83:59:98:f0:e1:16:ed:8a:
4f:a3:b8:4e:6b:6f:aa:07:a9:4b:90:7d:3b:ff:02:
eb:5e:70:72:b7:f5:f7:74:be:cb:45:ca:14:fe:24:
a2:fa:7a:a8:d3:ec:6a:21:49:6f:8f:3a:f1:59:e8:
bb:d2:e5:d7:11:55:9a:60:f0:ea:41:d2:83:a6:31:
8c:6a:bf:eb:93:68:69:a9:ac:84:7d:64:2b:57:d3:
4c:60:0d:34:1f:ab:c4:86:6f:bb:c3:17:57:2d:aa:
01:b3:91:15:da:95:3f:42:9b:7b:0c:0b:f8:d9:c9:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:6F:84:3A:53:72:0E:1C:78:CC:B5:26:B8:D7:47:16:0F:85:7B
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:63:bc:b5:30:58:58:9e:3b:35:ec:6d:98:14:33:40:f8:2f:
2a:20:fb:bd:af:29:b1:ba:13:a4:46:c2:33:51:b1:3c:8d:38:
40:93:79:51:7b:e2:25:e8:39:38:a8:8a:ac:a9:32:32:52:de:
61:f2:ff:f2:b6:fd:6e:52:48:77:a5:2e:db:12:cf:c0:e8:0d:
55:45:86:38:d0:24:c4:18:59:25:9c:f1:91:fe:a2:9e:dd:a5:
2e:10:79:cf:bf:d2:c5:08:9d:ea:c6:9a:b6:fa:cd:bc:d0:db:
c0:d1:f5:c2:85:3d:40:fa:9b:04:4a:66:b3:64:c6:81:f8:d8:
1d:ae:53:e1:21:7a:10:ca:20:43:79:aa:d5:de:e7:39:46:9d:
46:a1:22:25:a5:80:21:62:d7:d4:1c:5f:5d:5d:2e:a5:f3:7d:
4e:31:c9:97:55:cf:b3:4d:12:78:6d:1c:79:60:03:d7:55:3e:
5e:11:44:4f:7b:0b:58:20:cb:9a:6c:11:57:89:58:7f:7c:d3:
e0:02:d9:a5:e4:d1:bb:05:4a:6e:0f:b4:41:45:bf:39:4e:4d:
85:65:89:1b:64:53:b0:c2:0e:32:53:8f:bd:07:d9:18:44:05:
72:56:fa:c8:34:48:3d:47:42:05:14:1a:9e:3e:ae:cf:5b:8c:
31:2b:de:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:48 2026 by rpki-client