Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier: Iuzmvkkv/v6on9D29OM/Q5frvLOWs+beVDnmi/M8YQw=
Subject key identifier: 2E:3A:E9:61:01:9F:FB:A2:81:08:D1:DD:97:FE:44:6E:54:E0:4F:07
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer: /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial: 019E284ABCD78BB88F484FB326846A77EF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number: 189F
Signing time: Thu 14 May 2026 21:00:47 +0000
Manifest this update: Thu 14 May 2026 21:00:47 +0000
Manifest next update: Fri 15 May 2026 21:00:47 +0000
Files and hashes: 1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=)
2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: zu3YnJXYv3sL+7sJAH6N6aokDaX0LamaR3BTg2FWzdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 21:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:4a:bc:d7:8b:b8:8f:48:4f:b3:26:84:6a:77:ef:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Validity
Not Before: May 14 21:00:47 2026 GMT
Not After : May 15 21:00:47 2026 GMT
Subject: CN=2e3ae961019ffba28108d1dd97fe446e54e04f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:76:79:e8:e8:e4:3b:e2:b4:da:ae:62:fe:c9:
7e:a8:ae:73:8f:be:bf:06:44:5e:20:32:fe:c2:3b:
38:2c:ca:4c:1b:57:a7:7c:72:fa:04:ce:7b:29:40:
20:f1:3f:28:b3:2a:0f:2f:a3:f3:a6:f5:01:13:b1:
d1:5f:9b:33:94:f5:ef:49:4b:b6:0f:23:ce:91:dc:
60:98:48:0e:d0:bd:24:2a:41:bc:e0:18:56:31:ee:
c9:8c:02:ac:9a:25:d3:75:40:cb:a2:62:e2:2c:eb:
51:72:50:51:57:76:fe:7d:d4:2e:8a:0c:38:38:e1:
cd:45:b8:0e:92:0c:61:0f:60:d3:60:35:b4:5b:91:
91:97:02:7b:b1:cc:5a:9d:fb:0c:d5:c7:97:64:6a:
1d:94:ee:d2:17:0f:eb:fa:c1:90:b8:6d:1f:23:0a:
02:30:ec:de:38:b0:bc:54:2b:cf:9c:f5:82:19:21:
63:40:d2:85:07:9e:b6:8b:25:9f:78:42:53:13:f7:
53:59:11:7b:ec:74:9f:10:0c:48:46:2c:cb:b0:8a:
1a:d0:74:43:ce:7b:65:c2:92:78:1b:55:ab:d3:94:
c2:54:13:34:09:b4:60:aa:b9:49:74:a2:ac:36:bf:
49:1f:1d:3d:16:74:1c:e1:fc:c7:44:2a:9b:29:e5:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3A:E9:61:01:9F:FB:A2:81:08:D1:DD:97:FE:44:6E:54:E0:4F:07
X509v3 Authority Key Identifier:
keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:8a:cb:6b:bd:aa:b1:77:ea:b8:54:e3:23:3d:23:23:24:f8:
c7:ec:2e:b2:c5:c2:4c:79:41:06:66:e2:5b:3c:b1:12:2c:87:
36:2f:a7:5c:13:b4:6f:ed:8f:2b:0f:ad:8f:a6:81:99:ba:f5:
bf:5a:74:30:13:d0:53:f7:e3:37:a9:2c:dc:8a:d8:d3:12:aa:
4c:97:ee:88:c3:53:ee:61:ac:82:50:9b:96:4d:2d:a7:ff:3a:
1a:c2:bc:f6:91:96:4a:23:2a:5f:2b:03:43:f7:67:b1:a4:91:
b9:7c:04:f5:2f:79:4d:fc:32:a5:55:32:60:f5:3b:82:f2:4a:
7f:d6:7e:63:ba:85:50:7b:9c:d6:98:81:12:ee:a0:c2:fc:8f:
0d:30:91:ee:8e:a1:60:5f:65:ce:3e:b2:45:b1:20:b7:97:3a:
cd:d6:63:cb:a3:52:61:e1:27:92:9d:77:4b:f6:f0:f7:13:4b:
1c:e3:b1:2f:4e:68:27:1e:1e:a7:cd:63:53:9f:88:cf:c1:11:
4a:6b:a2:61:d3:67:82:aa:b8:77:1c:cc:d1:3f:69:85:66:ba:
e9:7d:bc:c9:df:2b:69:65:20:18:9a:ec:c8:2e:bf:b0:60:17:
a3:3f:16:44:c4:a0:d2:6e:ec:97:84:37:55:d4:a5:73:c3:5e:
35:f1:b0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:27 2026 by rpki-client