Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: qdGEYbGXRy8mic3KN3h0wIl9LQNPn8BVfOtkkI3MGJo=
Subject key identifier: 62:2F:BA:9E:81:A9:3D:97:1D:31:AD:47:41:DF:B3:6C:8B:CA:DF:24
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 019E303B568CFA4C65A2CDF702217783C372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 10:00:55 +0000
Manifest this update: Sat 16 May 2026 10:00:55 +0000
Manifest next update: Sun 17 May 2026 10:00:55 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: +gcrgVQSShQ/dP04skScrq87A4vI7vhVtSxuImkEop8=)
2: 6lRgb3MGRN0CzqxKgomWEIyJ3Mg.roa (hash: CYhce381HzbX7vSncPONtF+Lbdg5xHx48Q/vd4tyB6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:56:8c:fa:4c:65:a2:cd:f7:02:21:77:83:c3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: May 16 10:00:55 2026 GMT
Not After : May 17 10:00:55 2026 GMT
Subject: CN=622fba9e81a93d971d31ad4741dfb36c8bcadf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:28:ab:21:83:2e:04:e1:8d:d9:42:ce:bc:
19:5d:de:9c:cd:98:84:51:ec:a5:39:64:93:71:23:
54:f8:90:ba:1d:24:1c:99:67:f0:98:dc:97:d1:05:
14:dc:07:c4:4d:24:21:f6:fc:28:13:8a:82:92:ed:
d9:bb:ad:44:59:44:dd:1e:6d:21:70:af:7c:0a:64:
70:7e:93:8c:28:3a:88:1d:d2:92:c7:cf:35:5c:2b:
c8:52:43:f3:43:50:e3:5d:ee:c0:fc:04:8f:b0:bd:
04:21:de:33:0d:76:05:1b:03:1e:6f:de:ce:f9:2b:
13:f6:fb:b7:ae:ac:2e:c9:03:19:22:9f:e6:9f:0e:
f6:cd:d0:0c:0a:47:10:55:64:cf:60:a1:9b:cc:8e:
56:49:8a:73:80:83:36:e4:1e:f6:08:bc:aa:ac:e5:
c5:bd:b9:82:fa:ea:77:0b:0f:2f:db:42:92:e0:7a:
35:0c:64:72:96:0d:6a:81:fc:14:46:b7:c7:86:e5:
ca:3c:91:b4:6f:e9:f9:24:99:be:d2:d0:a0:28:0b:
87:1b:73:cc:c7:7e:dd:f7:df:6d:3e:2e:56:7c:fc:
44:61:0f:7e:80:8a:de:a4:82:b2:b0:51:05:c6:e5:
40:49:04:94:d0:3d:55:0f:79:0b:ff:94:b7:3d:b9:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2F:BA:9E:81:A9:3D:97:1D:31:AD:47:41:DF:B3:6C:8B:CA:DF:24
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:76:17:e2:29:da:a8:4b:38:61:22:54:2d:6a:1f:2f:58:63:
2a:09:00:93:3e:24:13:4f:6a:97:96:e1:7a:d0:53:ff:8d:d4:
dc:c9:dd:ea:18:5c:c3:12:a5:ca:be:08:e2:b5:89:1b:a5:7d:
44:b5:9b:b4:40:87:8c:ad:c6:fa:05:75:28:98:00:7f:3d:12:
12:06:19:bf:48:a2:a2:37:0e:bc:77:a6:b8:17:c0:d3:b3:3c:
d5:6b:ae:0a:a3:1a:10:6b:ed:c8:9b:d7:69:d9:c5:38:c0:77:
e4:81:b3:69:0d:5b:76:04:d0:1b:14:c3:3c:78:98:19:86:57:
e2:3f:dd:1e:9f:c3:0b:00:18:b6:46:a8:bd:82:ed:90:a0:a5:
da:8a:9a:93:b4:3b:10:5f:06:2e:21:1c:28:94:22:c0:2c:e7:
1b:36:b7:db:86:4f:35:94:f9:c7:a5:d7:cd:d4:32:53:a1:dc:
41:36:33:45:6d:1c:48:91:e9:3d:f7:f4:af:e1:96:41:95:6b:
94:62:38:19:1b:fc:34:e5:a1:43:37:f4:9d:a8:40:e8:a5:dd:
ee:be:dd:2b:0c:58:bb:8b:73:6c:4c:1b:29:4b:c9:77:9f:bd:
81:2c:7b:fb:0e:72:80:53:f1:6a:89:5d:9e:42:c4:10:7f:65:
71:b4:c1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:25 2026 by rpki-client