Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: L3GCPs/FZD/NyGinimUKOUcQb//j1wt+SdLl7dr6mCU=
Subject key identifier: 07:D6:7C:20:95:B0:14:8B:69:BD:02:5D:61:F6:F3:95:CB:3A:AF:7C
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019DEC6D2E36B4617B0C5C02C1578B014663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 18EE
Signing time: Sun 03 May 2026 06:01:11 +0000
Manifest this update: Sun 03 May 2026 06:01:11 +0000
Manifest next update: Mon 04 May 2026 06:01:11 +0000
Files and hashes: 1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: NIyetd/VvYGumv73kphwdLPJTkQIvfyd6Rrm+Jed2rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:6d:2e:36:b4:61:7b:0c:5c:02:c1:57:8b:01:46:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: May 3 06:01:11 2026 GMT
Not After : May 4 06:01:11 2026 GMT
Subject: CN=07d67c2095b0148b69bd025d61f6f395cb3aaf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:2a:1c:81:c4:4a:10:47:39:db:fb:c4:c9:
52:a2:f0:06:25:19:bd:bf:f4:12:43:5d:e8:2f:cc:
0a:f2:c8:30:0a:26:15:f1:02:11:79:8d:fc:6f:a5:
d9:3d:13:f3:05:71:71:28:06:e2:88:97:55:8b:87:
a5:07:57:6d:85:e5:a0:d7:6c:59:19:26:61:e2:3a:
29:a5:d9:d0:83:40:c0:f0:e7:ea:76:5c:19:b8:e9:
0d:28:ae:07:7c:a2:91:ce:7d:4a:2b:20:16:e2:a1:
c0:0c:63:b6:8c:64:cc:4b:19:32:02:3b:5d:2a:ca:
17:08:7a:58:b0:2e:35:03:85:2b:1d:ec:a3:e8:5c:
88:8a:8f:91:8e:ae:61:89:3b:51:fc:a6:6f:a0:2b:
5d:52:e6:bc:e6:52:06:f7:36:f6:fe:35:f3:54:69:
9b:32:12:3a:da:e5:80:73:9a:85:85:b6:be:15:9f:
4d:68:06:87:39:09:94:06:30:a3:94:3d:39:57:a0:
41:0f:7f:11:c8:7d:c8:32:0d:c8:2f:41:23:fb:bd:
3b:27:de:d0:98:09:61:a3:17:6c:ad:96:86:06:c8:
d8:98:0b:ce:70:ea:45:15:6d:04:0e:ea:d3:72:48:
1a:f2:19:c8:ba:87:9c:b4:94:cd:e7:6f:81:ef:96:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D6:7C:20:95:B0:14:8B:69:BD:02:5D:61:F6:F3:95:CB:3A:AF:7C
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:84:ca:58:47:1e:84:11:ed:e6:cd:ca:ca:4b:93:c7:fe:c5:
03:7a:9d:76:5e:d6:ba:c5:4a:bd:ac:97:94:e3:b0:87:db:9c:
a1:fd:f8:6a:73:f6:9c:fe:dd:14:de:d0:19:4f:aa:d7:8e:30:
84:37:76:34:28:8f:5e:4e:04:46:aa:f5:82:8e:c9:37:0d:46:
88:cd:a2:06:e8:2b:fc:15:2c:58:54:e6:21:2f:5f:be:28:e0:
69:0d:be:c4:e6:5e:f2:3c:1e:78:8e:30:58:87:83:09:5f:41:
f6:48:07:b5:13:38:50:44:89:05:a0:b3:82:25:45:e4:7a:da:
5d:36:99:c6:c9:1b:48:67:f5:c3:b3:30:18:8a:db:91:8a:c1:
70:e6:ac:e0:ec:88:d2:6d:5c:2c:e0:fa:b8:dc:32:5f:ea:7f:
89:79:38:f5:47:cd:00:18:95:2d:73:2c:36:b4:c2:89:13:cb:
17:da:2a:c7:0d:e6:00:01:08:ca:95:d1:97:68:54:88:c9:9f:
2f:82:53:08:a9:7c:ca:85:10:01:9f:9d:13:06:fa:f6:86:36:
08:26:cd:8a:d0:f6:a4:b3:3f:58:ee:76:42:f2:52:ac:6c:2a:
77:6e:de:d5:58:b4:f0:f5:0a:7e:91:5c:67:20:2a:4f:11:89:
36:ba:ac:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:34:46 2026 by rpki-client