Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: KTD0YVyPGUzWvK+s+YYfUjqGqVDIrQBqa16v8bxrRDw=
Subject key identifier: 9B:C3:01:1B:31:21:9B:57:AF:40:AA:1C:EF:BE:F8:D3:29:7A:21:58
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 019E314E27FDD9E74F96C59857E2CA203139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 15:01:06 +0000
Manifest this update: Sat 16 May 2026 15:01:06 +0000
Manifest next update: Sun 17 May 2026 15:01:06 +0000
Files and hashes: 1: 3Leyor2FEESV9ehfqvceffjDMA4.roa (hash: R9naRO5SHDMlr7cq6UrUOi6UWOp5V9CQxQspAjiKZsk=)
2: HwJm9Xsiw9pceQNnNfJ_QCQHcKE.roa (hash: cRdvZKn3ogbb94VbqPI6V/k6GIXa73KMunx92mUxdFE=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: R9cMTLxgcstxSpkm4MLRsHnM/S+bvbVIrmSAweOOmWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:27:fd:d9:e7:4f:96:c5:98:57:e2:ca:20:31:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: May 16 15:01:06 2026 GMT
Not After : May 17 15:01:06 2026 GMT
Subject: CN=9bc3011b31219b57af40aa1cefbef8d3297a2158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:86:dc:10:8c:ca:a7:dd:f3:52:4c:6d:86:02:
28:b7:86:d7:1f:f4:64:10:16:f7:21:00:12:12:71:
d8:b1:b5:41:5c:32:8a:3f:9c:bf:c0:56:32:ad:a4:
3c:a5:5e:74:38:4b:cc:f2:34:7e:be:99:74:37:58:
ba:91:f2:80:8f:c6:fa:eb:8d:9b:e0:2c:35:7d:b5:
e9:e7:25:e1:7a:3a:35:9b:6e:82:c6:ce:3c:fb:64:
30:12:aa:50:5c:7e:00:fc:c7:ae:cc:68:b1:90:18:
10:22:ab:19:16:24:66:c7:01:e1:2d:ea:29:54:78:
4d:68:44:c0:e2:a2:c6:3d:84:4e:5e:77:cb:8c:6c:
0e:31:75:41:9b:f5:06:48:44:6f:77:18:fa:a6:5e:
38:1f:b3:09:97:93:48:f1:ce:34:4a:10:64:87:4f:
fb:74:c3:68:7d:f4:06:3f:77:ba:1d:56:e5:36:b1:
8e:ab:d0:ad:e1:6e:cf:a1:01:4f:45:f2:9d:cc:d9:
39:a7:bc:1d:9d:b8:08:b4:9c:18:e1:0c:18:52:63:
d0:f3:f5:f9:56:d9:e2:60:c8:5a:f4:dd:5a:6a:5f:
28:4c:5f:e7:56:21:ff:06:12:8c:53:fd:2f:fa:89:
7e:c0:d9:6f:34:1a:6b:b8:38:31:2d:91:a8:2a:b2:
f4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:01:1B:31:21:9B:57:AF:40:AA:1C:EF:BE:F8:D3:29:7A:21:58
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:49:a5:fc:be:7f:19:eb:45:1f:f7:fc:92:8b:54:d7:e2:de:
14:90:32:e4:42:bc:c7:92:38:5b:43:5a:1a:b5:a8:9d:a1:14:
85:9d:89:cc:fc:47:23:29:29:ab:e6:81:5a:93:87:4d:91:2a:
41:0f:78:b1:39:bc:d2:cd:1b:77:12:56:ca:79:1c:f2:70:72:
72:f2:5e:0e:f5:0b:b6:ca:7a:1e:0d:df:33:6f:fe:c8:29:51:
47:3c:0d:f4:9b:15:6e:00:ac:40:16:76:82:8c:c7:02:25:61:
67:a8:05:b5:cd:12:66:5a:fd:5d:af:38:2b:d3:31:6f:bc:51:
e8:59:7d:90:f2:6e:ad:76:9b:37:4b:c5:fd:ee:03:de:cf:82:
06:f6:04:83:5b:4a:13:3a:e8:21:c4:e4:a1:c1:a5:bf:1d:44:
1f:d5:ac:ea:34:1f:92:a6:f1:49:a9:94:5e:96:fd:5f:2a:76:
44:7b:76:66:cb:30:0c:94:38:6e:4c:f9:60:57:be:2f:f1:57:
77:df:39:36:0f:26:13:71:97:47:5b:f0:f6:30:e8:77:6d:80:
e8:e0:a8:0b:29:1e:62:d8:58:a3:e5:0f:2a:d5:2b:2e:a2:1c:
e8:5c:dc:ba:83:0f:8d:7b:c0:a7:ff:4a:a6:12:70:6b:63:d9:
b4:31:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:16 2026 by rpki-client