Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: GSQMvsPhzkBSnVWYfjUy2U9+nNPBh+CwMye5Q3bKd6E=
Subject key identifier: 0D:22:A7:FC:46:57:AD:08:B1:A2:6C:C3:5F:EC:CA:C3:CC:66:A4:7D
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019E2B4CC5E3BD0F1AFA61F4E3B42BB6361E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 11:01:51 +0000
Manifest this update: Fri 15 May 2026 11:01:51 +0000
Manifest next update: Sat 16 May 2026 11:01:51 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: 7yipHg0GkUZ78t7OQC3PzECdT3/jTMt8SZCH7TAxVr4=)
2: gZ_db6GfXmBOp4kcCy-i3uexrlk.roa (hash: ThO+Sk/jrlZwpr+FgeFErC3/Gl+3M/mev1BE/Xmuy2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:4c:c5:e3:bd:0f:1a:fa:61:f4:e3:b4:2b:b6:36:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: May 15 11:01:51 2026 GMT
Not After : May 16 11:01:51 2026 GMT
Subject: CN=0d22a7fc4657ad08b1a26cc35feccac3cc66a47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:40:41:bb:32:25:f9:e5:e9:78:4e:1f:39:c5:
d3:6c:73:cf:23:a4:19:ad:93:27:88:ab:b5:e9:ac:
5e:e1:1b:c7:d4:15:dd:89:97:0c:d6:f0:90:a2:cf:
c2:1f:a2:06:3e:fb:87:a2:39:2b:15:5f:6d:a8:9c:
7a:08:48:82:c1:43:a9:dd:bc:0e:cc:70:69:aa:96:
7f:a9:45:14:db:fc:c0:19:f9:45:cd:f5:58:15:b5:
8d:5c:75:25:ec:aa:2f:2d:6a:b0:78:f7:e9:b8:04:
f3:eb:5f:95:c6:cb:e2:7d:94:a4:f4:1b:ba:e5:d6:
ba:8a:2a:57:58:cc:94:22:ea:50:77:55:03:40:f1:
eb:07:70:97:1f:db:cb:53:ed:01:7d:bb:05:64:b4:
d2:41:6d:3e:ae:d0:87:08:b6:0c:6d:e4:9d:b7:2b:
2f:8b:be:1b:28:4a:21:b1:8e:b0:5a:ea:eb:5e:95:
37:61:79:bd:56:5f:c2:b5:30:6f:4a:0d:90:52:c0:
0f:19:ac:c3:b2:66:4a:74:eb:55:71:6b:4e:25:f6:
14:d8:26:ab:2e:b9:e6:c7:a9:f8:69:60:61:c7:93:
34:09:49:19:1c:d9:a5:45:cf:d4:a5:30:92:ed:c6:
bd:11:a4:93:35:44:1b:de:65:3e:de:6a:90:a0:ae:
0a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:A7:FC:46:57:AD:08:B1:A2:6C:C3:5F:EC:CA:C3:CC:66:A4:7D
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bd:50:84:2c:a9:70:cb:da:67:a9:4e:c0:a7:f7:08:f6:ba:
67:4f:62:fb:ae:67:a4:de:4b:88:f4:9c:ba:1e:52:70:b8:f2:
84:7b:f1:8d:58:14:f0:9a:f7:1b:59:8c:ef:c5:66:e8:0e:6c:
e0:63:d2:d7:84:34:7e:b9:f8:f0:5a:3a:5e:79:81:ab:f1:68:
a1:03:8e:c5:c3:d5:8f:92:7e:6a:d1:55:7a:3a:f8:51:8a:75:
45:82:f1:ef:45:88:7e:2d:31:2e:ce:ec:64:0e:28:5f:81:37:
a7:e6:62:40:03:4a:eb:0f:1a:12:b1:05:2f:86:ce:d7:64:d3:
d3:2d:57:36:23:5d:b9:c6:fe:44:ed:b3:50:02:3b:c1:1e:38:
06:31:af:88:96:4b:39:fb:b4:0b:78:fa:26:c2:80:ef:9a:98:
56:85:1c:5d:cd:d4:1d:22:1d:40:4e:1a:f0:9d:11:ad:df:87:
76:3d:6f:9f:a1:11:f8:5e:4d:e2:84:62:90:23:4e:a0:af:0b:
e5:8d:30:60:b4:d4:5d:92:e9:80:34:4f:fb:a1:de:c3:a5:18:
2d:09:8e:c5:f9:4e:9f:8a:d3:b7:15:31:65:78:14:91:5c:0c:
8b:ff:cb:2e:7f:2d:c5:04:8c:6b:4e:c2:2d:41:7c:a3:d5:4c:
67:12:fc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 18:19:02 2026 by rpki-client