Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: rt5UY3sBxRe9bQwuXr7HKK8D4slrR107opQzWsE9JWA=
Subject key identifier: AC:24:9E:A9:4E:AE:21:CC:BA:4A:47:FA:F2:C8:0D:64:6D:29:FE:3A
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 019E2A02AF54C551C85E92AE3EB367557088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 190C
Signing time: Fri 15 May 2026 05:01:19 +0000
Manifest this update: Fri 15 May 2026 05:01:19 +0000
Manifest next update: Sat 16 May 2026 05:01:19 +0000
Files and hashes: 1: ZMTWhcJ1e7tvXHUUl4ANoGMrIWk.roa (hash: 9yOiqGJYeL5bi8PHF9fNeVVcmhOJdy6bDsiWR0m6Ve0=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: 5NN7bAxrY9f3eYSAvdWUhUy7Jra7XahsZDzlgNrPBPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:02:af:54:c5:51:c8:5e:92:ae:3e:b3:67:55:70:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: May 15 05:01:19 2026 GMT
Not After : May 16 05:01:19 2026 GMT
Subject: CN=ac249ea94eae21ccba4a47faf2c80d646d29fe3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:bc:07:76:68:93:1d:82:6e:cd:7e:99:2a:
d3:29:d8:a4:ae:7b:db:e8:a7:1a:1e:a9:2d:88:38:
11:68:10:48:64:41:6b:c1:55:ca:e9:3a:17:5a:f1:
f4:ea:2b:7c:f2:d3:fa:83:bb:74:f6:c1:98:bc:49:
9c:65:bc:4b:40:d9:7f:e0:e3:7f:7a:1e:8f:78:26:
7b:64:35:54:73:7c:d0:d1:f8:01:3a:3a:4a:6f:7b:
61:4b:a3:3b:c6:96:2d:51:36:f4:39:ed:76:18:a9:
60:12:0b:de:35:1c:92:f5:4c:85:1b:89:b6:12:f4:
9b:f2:c1:ae:f1:c8:7d:32:4b:bb:d0:43:33:40:8e:
0a:bf:60:45:09:68:57:32:68:6b:ba:ae:ca:f5:b9:
0a:35:31:b6:de:a2:23:35:af:d2:ef:da:90:a5:b2:
d0:55:40:53:28:07:06:57:8f:00:c1:a9:24:8b:35:
2e:3a:e6:01:6e:d1:6a:bd:b7:2f:62:94:33:2b:85:
41:51:c7:5f:6b:7f:22:c9:8b:b4:ae:dd:0d:8e:c0:
11:60:d0:f6:53:86:ea:4f:03:fe:30:d8:c9:80:48:
33:88:27:52:e5:7f:dc:81:17:2c:71:78:4e:0f:e0:
41:32:68:9c:6e:2f:30:34:ea:25:b7:43:bf:ef:a8:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:24:9E:A9:4E:AE:21:CC:BA:4A:47:FA:F2:C8:0D:64:6D:29:FE:3A
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a4:48:24:cc:a4:0d:1a:a8:4d:68:f5:8f:6b:26:89:ff:6f:
c8:d8:6c:c8:3d:d1:68:32:3d:2f:d4:ae:6f:ec:d2:34:6b:e8:
0a:33:ef:16:9d:65:a9:16:45:b6:3c:dd:e1:3e:3e:18:34:f0:
45:3e:7d:b4:41:0b:8b:5d:91:99:c7:3e:2c:a2:3c:73:a9:26:
87:8d:10:d7:39:7f:b3:ed:ad:41:fa:50:b1:7d:1d:14:d2:79:
fe:3a:5e:5a:7b:8e:63:7b:ff:54:63:ea:0f:ee:2c:b1:89:87:
1f:4a:6e:ec:68:36:b3:e7:c9:d9:fd:38:3a:54:1b:c0:9e:11:
4e:9a:68:4a:9b:ec:e4:72:a6:b5:d4:6a:2c:62:78:d3:81:c3:
d6:59:b1:23:f6:c0:ca:8f:00:0a:d1:07:44:cf:56:aa:34:16:
7c:b6:74:52:60:16:d8:af:2e:b0:a4:1f:8c:64:93:5a:8c:22:
4c:aa:2e:30:1f:35:60:78:f6:3d:43:be:c3:fd:fd:35:76:68:
f8:9d:75:7c:05:56:29:8a:08:ea:ad:4d:d3:b6:ae:20:02:ad:
26:5e:f0:2e:c8:8e:73:a5:08:3f:53:96:92:f1:2f:8a:82:9f:
b7:ca:c1:b8:12:01:46:5f:93:cb:ae:b7:c7:85:be:c6:86:df:
03:1c:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:55:14 2026 by rpki-client