Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: 4zUG68f0Df3TaVwWB2sfcGfggC7qccdOWwFzCSkzlx8=
Subject key identifier: 50:23:0D:36:DB:26:7A:76:54:42:F9:4F:12:D7:33:92:96:A2:DE:07
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019E2881CE6511FB634FF188BA880B8A7180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 190E
Signing time: Thu 14 May 2026 22:00:55 +0000
Manifest this update: Thu 14 May 2026 22:00:55 +0000
Manifest next update: Fri 15 May 2026 22:00:55 +0000
Files and hashes: 1: 8AC5hr87IvNKc2uj2TEkr-2Z034.asa (hash: qt1zTECZT/ge+oHl/7hzl6IVpmrHO5U65Ej5M0jkaj4=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: N/IdM4zo4zz5JWDgvQ+/xkun3mRtObC519D9ScZfi6c=)
3: xo56gz-sHNgNhs5F1QLj5VzEnGA.roa (hash: YHF2lJdgiYyyfdcc4I4hM7f5QuuqDFl1zASnR1Kz4/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:ce:65:11:fb:63:4f:f1:88:ba:88:0b:8a:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: May 14 22:00:55 2026 GMT
Not After : May 15 22:00:55 2026 GMT
Subject: CN=50230d36db267a765442f94f12d7339296a2de07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:c7:f3:cd:69:21:e5:b4:34:33:ac:6e:d5:
4d:b1:16:27:40:2f:94:94:0f:10:1e:5f:94:05:8b:
dd:83:b7:97:36:c2:cb:39:79:4d:13:fa:36:3e:d4:
ac:5b:40:72:6e:97:32:95:24:1a:e9:36:c3:72:55:
8e:bd:4f:39:eb:a9:d5:48:72:82:dc:11:23:20:b3:
83:a2:de:2c:72:9a:31:fa:f6:5f:a9:b7:0e:0b:3e:
7b:54:0e:2c:fa:07:e5:72:8f:bd:a7:e3:22:07:61:
1a:ff:9d:b9:71:c3:37:c5:52:e1:13:91:a8:d7:0e:
15:1f:60:e3:31:76:bf:8b:63:75:f8:1a:5f:75:9a:
93:dd:50:37:dc:06:4a:e1:0a:60:41:8b:64:8f:14:
51:0e:82:6c:19:0f:55:ee:01:76:e1:5a:2b:bb:c7:
85:cc:f5:0d:9f:25:45:6b:cd:b4:e4:91:b7:ea:b6:
23:4d:d2:0d:b5:07:76:07:ea:70:da:e9:20:0c:2c:
65:e2:52:aa:e9:19:fb:94:5f:ed:05:67:08:d5:54:
81:78:73:c5:b2:ac:82:f2:5c:98:70:04:5a:8b:f3:
c2:b9:c4:77:5e:25:1f:be:0f:07:09:0f:2d:29:0d:
de:4d:4c:7e:b6:a4:e9:1a:9c:b4:99:55:4e:8e:b2:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:0D:36:DB:26:7A:76:54:42:F9:4F:12:D7:33:92:96:A2:DE:07
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9c:7d:ed:50:e0:df:9c:75:28:a4:54:ef:33:12:55:df:59:
ca:6c:dd:4d:77:ee:14:26:e6:d4:7a:45:5a:1d:f6:50:6d:2f:
52:89:a9:86:57:fc:15:9e:e8:c2:73:76:99:83:da:82:13:1a:
60:ed:4d:5f:47:d4:43:9e:49:af:01:56:0a:a4:e1:9c:5a:79:
38:e4:1c:d5:a6:15:16:f8:8e:18:3f:18:d2:11:37:ed:f9:15:
46:8a:ee:7e:7f:87:64:77:c2:2e:18:29:2d:72:d3:c7:c3:1f:
ef:f2:2c:38:54:1f:bf:1d:b9:9e:bd:51:d9:b6:3c:8f:42:1d:
08:66:be:79:d1:20:1d:df:0a:96:86:0e:3d:99:ba:91:e5:73:
25:cf:c1:a6:10:33:c3:1c:ca:0c:eb:dc:d0:3b:d9:46:89:62:
e8:a1:26:d2:fc:6c:df:e9:a1:ce:dd:9d:ae:42:c3:1e:a3:c3:
28:77:a3:8c:18:14:55:e8:2e:b9:cc:66:55:81:a2:a6:15:06:
bf:63:fa:66:6d:c3:09:05:ef:d7:fe:53:59:7e:43:d0:86:31:
4c:dc:40:ca:6e:85:88:ee:ec:da:28:a7:55:f8:19:de:fe:a5:
37:e3:4a:e1:49:ca:12:34:d7:06:48:19:15:85:00:5d:5b:0a:
32:fa:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:48 2026 by rpki-client