Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: 8B6p1IVChIymqR5BX1nWKB/24SXjcpn753yS3yrISj4=
Subject key identifier: D0:A7:57:3D:7C:56:65:8B:3D:2A:5D:BA:DA:55:D2:20:5D:2E:8D:6E
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 019E28EF8239E4FB895F3F8FE333C8756578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 1913
Signing time: Fri 15 May 2026 00:00:45 +0000
Manifest this update: Fri 15 May 2026 00:00:45 +0000
Manifest next update: Sat 16 May 2026 00:00:45 +0000
Files and hashes: 1: 35RBbJH7O74ElGBsXDtzWelJCE8.asa (hash: VGTXJkpFVsNFQM4P5dimy32ItUqxw4xThmopk2UmxJs=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: 4v3c3oLKqcONnFT2sJ6J2evYSomHkFa8dVbUSmn//YY=)
3: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:82:39:e4:fb:89:5f:3f:8f:e3:33:c8:75:65:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: May 15 00:00:45 2026 GMT
Not After : May 16 00:00:45 2026 GMT
Subject: CN=d0a7573d7c56658b3d2a5dbada55d2205d2e8d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:a3:e8:a2:95:e9:d2:d4:37:81:6c:31:47:
a7:17:83:39:04:c3:99:c0:9a:06:6a:ea:5b:6f:31:
27:ae:2a:e8:d5:85:32:58:e4:75:4b:75:7d:db:00:
59:c0:b7:28:40:c6:b8:73:fb:77:9a:fc:2b:5b:74:
b5:8f:e6:aa:90:60:44:94:db:4c:61:0c:68:2c:a8:
0f:23:8a:33:d1:fe:11:bd:c1:aa:f1:12:8e:46:2a:
b2:67:ff:e6:3e:76:60:4e:97:72:ca:1c:fe:36:ba:
79:8b:1d:43:d9:81:2a:a8:41:42:c1:cb:5a:b1:40:
b9:21:ef:13:38:02:a3:1b:e2:8d:bc:3e:3a:b4:7b:
d6:88:77:c6:98:06:90:57:32:ff:83:64:68:7b:91:
84:eb:17:65:ab:7b:d9:08:ae:23:6b:b5:72:70:84:
7f:a6:6b:f0:77:f0:4f:ff:c5:61:3c:58:b3:14:7b:
be:84:cd:ed:69:94:92:ee:1a:72:19:0b:a9:71:38:
a2:fd:79:f4:c6:e6:61:9a:1e:e3:56:50:61:30:a8:
9f:55:89:ee:33:db:3d:2f:ee:f1:a5:53:b9:14:fb:
03:4d:03:ce:f5:7d:dd:48:f2:cd:25:26:42:15:96:
73:73:7e:54:fd:3e:91:9f:d2:a7:02:c7:c2:75:fd:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A7:57:3D:7C:56:65:8B:3D:2A:5D:BA:DA:55:D2:20:5D:2E:8D:6E
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:2e:54:a1:4d:c2:2a:a0:22:20:8c:99:1a:d8:7a:c3:a1:
0f:8f:e5:ce:b6:e6:94:ba:e5:dc:1d:03:9d:72:f5:9d:83:55:
99:71:45:be:17:8e:91:8e:d9:5f:9b:cc:6e:ea:be:6e:db:ad:
ba:8c:09:17:67:03:ea:b2:b9:ff:b2:f5:2e:c1:68:65:11:02:
44:d1:1a:66:22:62:f0:dc:0c:da:f8:d0:44:0e:25:f0:c2:07:
0d:e5:4c:17:0e:a4:c6:d0:f6:53:b4:dd:6c:80:3c:96:34:41:
fe:3f:42:e4:a7:cc:57:96:d1:05:29:05:8c:6c:ca:8e:a2:50:
27:b3:45:45:c1:04:e8:25:66:8b:5f:5c:83:88:70:e0:49:6b:
2e:3d:62:78:8e:71:19:2c:fe:33:12:e5:ac:ce:03:c4:ec:6b:
5c:a2:64:98:30:d5:b5:51:d6:89:4f:2d:8a:ba:ea:46:d8:22:
f5:7d:fc:19:28:5a:02:d9:20:e7:c1:bd:cf:b7:02:c3:bb:05:
a0:96:82:03:31:94:2e:19:0e:5c:2a:ad:d2:ef:e4:01:d4:e5:
54:25:7c:2f:37:d6:a1:e5:68:47:e9:c9:0d:38:57:ca:82:1c:
ee:2a:33:d0:ca:16:0c:dd:47:48:d4:0f:40:82:d5:de:75:7f:
04:ac:74:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:28 2026 by rpki-client