
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: IqMYMaPWv3w+MPZfhkKgBj0mexKu/CLYhQmkyKuqyUE=
Subject key identifier: B1:D5:36:66:64:45:DD:E2:3C:1A:C9:B8:C1:12:A0:B2:CB:CB:E1:05
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019E2994538882CDB2662E06DFED24E09280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 1911
Signing time: Fri 15 May 2026 03:00:46 +0000
Manifest this update: Fri 15 May 2026 03:00:46 +0000
Manifest next update: Sat 16 May 2026 03:00:46 +0000
Files and hashes: 1: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
2: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
3: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: pK5nk5dUFWic7hzNIxGrqI6Oidy1RH7gd4R1R2A8O24=)
4: x7mbec4cpv5N8U0_JFOsofDdp9k.asa (hash: xc6esLHJMBzAKQI4ygNtC8Fx32gcjy+TaKUBFG2ujWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:53:88:82:cd:b2:66:2e:06:df:ed:24:e0:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: May 15 03:00:46 2026 GMT
Not After : May 16 03:00:46 2026 GMT
Subject: CN=b1d536666445dde23c1ac9b8c112a0b2cbcbe105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:d8:43:4a:a8:f4:38:62:de:00:40:6a:33:
9b:f1:00:8c:3e:89:d7:e0:46:d3:6e:12:87:8c:7e:
da:96:23:71:67:09:2b:b6:49:a2:c3:11:25:57:a1:
2e:4a:6f:75:c4:8f:e6:08:eb:5c:51:60:ee:25:d7:
b8:de:8a:47:ec:5e:cd:6c:ad:89:09:51:51:c3:63:
ed:d8:bb:aa:71:d0:d5:07:1f:fc:42:d2:ec:3c:ff:
a3:f9:b9:69:45:bc:cf:14:6f:b5:c0:11:18:0d:3e:
e4:28:76:2c:b6:f7:84:b7:a6:b9:9b:fc:d4:41:ed:
96:69:43:8a:c3:df:96:85:89:13:68:e4:d5:36:69:
56:31:7b:86:10:ae:0c:7b:d8:c5:3b:43:f2:c6:99:
8b:23:7d:b2:8c:f2:25:18:e7:f0:0a:15:6f:0b:c5:
8c:d8:09:13:ed:dc:29:55:eb:a8:de:53:a2:03:29:
2f:96:a4:00:97:89:db:29:c4:dc:cd:dd:dd:65:0e:
dd:db:f5:38:da:3b:dd:0d:a3:f9:75:5c:7f:51:2c:
79:e3:2f:86:a4:91:42:9e:b7:68:5c:6b:34:9b:bb:
bf:b1:c9:72:63:19:11:e7:8e:d0:41:04:3d:5b:db:
81:ac:36:1d:7d:b1:82:39:af:50:96:e7:78:43:70:
65:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:36:66:64:45:DD:E2:3C:1A:C9:B8:C1:12:A0:B2:CB:CB:E1:05
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9c:3d:d2:ed:dc:bd:f6:dd:9b:1c:27:87:e3:ef:91:bc:0a:
6c:af:47:de:ee:25:8a:b1:86:5c:b4:a3:16:f1:ac:6a:15:6d:
f5:15:64:7b:af:82:f5:2b:ab:87:ec:63:c4:7e:01:56:9d:fa:
d5:48:fd:39:ee:24:a2:f7:6f:51:66:07:04:6d:fb:8a:50:e9:
3b:9b:f2:94:d2:da:ab:fa:8b:ee:b4:6c:1b:ca:be:aa:d3:eb:
32:51:00:c9:fd:b0:68:bd:98:69:62:ca:21:0d:1a:31:a3:70:
65:ea:64:75:45:e2:e0:41:8b:b9:80:3c:d1:d8:05:2c:b5:e9:
ab:09:4d:f4:7e:9a:23:e9:ac:a6:d1:6b:ff:f9:c1:c0:05:be:
27:76:97:51:46:2c:bd:25:8e:6d:1b:21:af:62:10:a4:74:a4:
e9:d1:75:b2:13:79:fc:ac:d9:03:c8:40:53:41:29:8e:62:91:
c8:23:9c:7f:1a:fc:ea:12:48:cb:2f:89:5e:27:fc:73:06:9c:
1c:0b:a7:74:b8:d7:f0:bf:24:84:db:0d:6a:fb:0a:04:31:b2:
fd:26:11:3e:8b:4d:bd:aa:4f:1c:70:0e:50:60:64:1c:5f:3b:
e7:01:e0:cd:41:33:7d:d7:c9:1b:55:a5:82:18:26:40:cf:1d:
3f:75:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:41 2026 by rpki-client