Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json)
Hash identifier: WRr0Q0OVXnA3nER79kXgoDPbxHmM6IpKqapVIDFpHAY=
Subject key identifier: C3:75:68:2D:CC:EE:E1:97:77:45:D9:56:33:CE:35:F1:85:E9:88:BE
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 019E2581A864E031DF3456AC929FB122DC6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
Manifest number: 190E
Signing time: Thu 14 May 2026 08:01:54 +0000
Manifest this update: Thu 14 May 2026 08:01:54 +0000
Manifest next update: Fri 15 May 2026 08:01:54 +0000
Files and hashes: 1: 91m9d-4rp7TRVtPcYvV9NGes_jg.roa (hash: I0D8Damt//4B0Kf8Q3SX0Wwm5LPekD0IgYEQxvGqNNI=)
2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: rILaAjNOqAVz/oSI8bhkndA98F99LIiFBwVepDsEQ8s=)
3: zHOXRdXkiM-RbCdgutluwx22gJ8.roa (hash: ddTQ3xyy/qh9SFlJgrOiIvTTzcQtTPf5+YJxupFgPas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:81:a8:64:e0:31:df:34:56:ac:92:9f:b1:22:dc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: May 14 08:01:54 2026 GMT
Not After : May 15 08:01:54 2026 GMT
Subject: CN=c375682dcceee1977745d95633ce35f185e988be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:8c:b1:2c:40:85:3c:64:df:65:a1:0b:3a:
f3:f6:97:ea:85:43:d8:58:8f:d0:67:ee:99:44:ba:
5a:d8:34:9e:d9:8c:a5:98:3d:f1:f3:8c:28:e0:53:
11:80:d3:e4:b8:90:7c:dc:62:c3:21:df:8e:d8:e7:
79:71:25:65:df:c0:e1:08:a2:04:f1:95:f5:fc:be:
a1:0d:c1:e8:5e:c6:16:98:99:3f:75:ac:a8:c9:72:
46:f4:c2:bd:83:37:bd:7e:0b:55:43:46:17:37:51:
14:34:45:3e:88:4b:59:a3:11:18:10:b4:48:92:59:
f8:e1:95:bf:ac:35:da:ec:2b:44:7d:bb:db:43:81:
e9:a3:87:1f:93:78:76:ec:4e:dd:c8:3a:89:2b:33:
51:c6:fa:6f:12:d8:fa:31:58:27:c6:3e:0f:73:b4:
93:cf:50:dc:2c:44:f0:a7:e7:47:15:1d:92:f9:09:
9e:e8:e9:be:c7:bc:d1:7d:a7:8a:fb:a5:87:ad:1e:
86:0c:28:ca:2d:46:e3:b5:0e:5d:7e:33:8d:d8:bf:
68:fb:7e:3c:89:16:5c:f6:e2:55:ae:fb:0e:98:34:
cc:54:67:49:85:46:1f:a1:f1:8b:14:87:ec:4f:f9:
9b:50:53:0f:89:74:66:ef:11:84:22:28:b5:5f:76:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:75:68:2D:CC:EE:E1:97:77:45:D9:56:33:CE:35:F1:85:E9:88:BE
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:8f:56:00:44:77:d8:72:f3:4f:36:e2:c7:00:74:52:8b:cb:
a1:ff:17:c9:0d:a8:07:0d:f7:ec:b2:26:86:71:d8:55:73:54:
ca:82:49:36:6f:b7:ca:2a:bc:9c:b1:49:e5:38:cd:59:86:9f:
06:99:44:0c:c2:3d:e3:16:b1:7d:38:bf:4f:f9:65:ea:66:ae:
20:2f:4e:aa:6c:e6:df:10:cd:34:ae:62:f1:9f:c4:3a:f2:34:
49:1a:01:e2:5e:52:83:79:17:cb:cf:a0:f7:3e:ef:ee:f2:be:
6d:57:a8:15:32:ca:7e:fc:85:97:68:0e:3c:86:11:d3:5d:65:
cc:91:5e:28:90:8d:55:7d:aa:67:ba:26:55:2b:c3:4f:cb:ea:
22:58:01:a6:31:5d:8b:28:cb:11:f9:e1:9f:5c:64:42:83:05:
ea:9f:39:bf:09:49:50:36:2b:bb:a8:64:a4:99:7b:3c:e9:0e:
8f:7e:2a:77:ea:ff:d6:5d:07:a5:d8:7c:f1:cd:fd:b3:1e:fe:
ef:60:0d:6a:26:38:a2:77:85:b5:05:5c:a2:0d:7e:2f:22:11:
ba:00:a9:78:00:77:17:4c:db:b8:38:21:b5:9b:80:ae:7b:e7:
fa:02:f7:62:64:75:09:58:ce:80:9b:11:77:1e:af:df:97:c0:
07:30:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 13:58:59 2026 by rpki-client