Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
File: RKO0P2R-HncUzRMHZMu8SBTnoUg.mft (raw, json)
Hash identifier: no098cIt/QH4HJ6eucAGC2apNuPKD8DAHKVwO1J4ASI=
Subject key identifier: 46:00:3B:B6:61:18:F2:BC:DC:41:D5:12:B8:E9:44:30:80:47:23:FA
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 019E25B76F537A5556AF0231D7F61FEB965F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
Manifest number: 190F
Signing time: Thu 14 May 2026 09:00:38 +0000
Manifest this update: Thu 14 May 2026 09:00:38 +0000
Manifest next update: Fri 15 May 2026 09:00:38 +0000
Files and hashes: 1: AEfnrK6ix3lgbRrsMfPKWVRCzjE.roa (hash: qwyfmOqhQfxk+SJv3YNNgHlxe2wh96nicliB7SifUfM=)
2: RKO0P2R-HncUzRMHZMu8SBTnoUg.crl (hash: 5cDWlyfiKKWD/7IucE6sb7//I9BOTfD9wOEyek2/kEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 07:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:25:b7:6f:53:7a:55:56:af:02:31:d7:f6:1f:eb:96:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: May 14 09:00:38 2026 GMT
Not After : May 15 09:00:38 2026 GMT
Subject: CN=46003bb66118f2bcdc41d512b8e94430804723fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:42:04:fd:b3:36:a3:f5:61:78:1f:83:ea:
f4:06:1d:c0:61:d9:41:e0:29:01:92:1a:cb:0a:6f:
a3:8e:43:9e:01:a4:c1:ed:e8:8d:6e:c0:2c:02:40:
11:ba:ab:fa:27:25:3c:59:61:8b:bb:6b:1e:7a:dc:
37:19:4a:7f:70:e0:41:8f:d4:f7:87:05:3a:2b:a9:
7e:b3:06:26:68:c4:be:f4:fc:ca:07:45:c2:d7:cd:
f7:bd:9c:83:a3:00:7c:43:8e:75:0f:37:56:d6:e3:
6f:f4:82:70:b4:48:12:d6:31:0f:50:30:51:3e:a5:
13:b6:46:13:64:fe:c6:d3:93:a9:a9:fd:e8:5a:1d:
7d:4b:c4:89:15:73:15:b8:32:23:3b:e5:89:90:55:
6d:de:3f:a9:fc:c1:72:d5:c3:7d:6a:1a:e4:6f:0c:
43:87:0b:09:6d:c2:dc:de:e2:cb:aa:11:35:0c:2a:
90:91:3e:50:62:d0:84:98:d6:bf:89:d9:a5:3b:c5:
d4:4a:43:1d:85:5d:52:5b:a4:09:b2:55:a6:1e:bb:
bb:af:33:68:80:ce:12:0d:0f:2f:7d:30:56:81:8c:
b9:e0:c7:8d:27:ca:02:38:58:91:d9:62:9c:2d:06:
77:66:d5:22:5b:3a:45:08:6c:fb:fa:61:f3:45:07:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:00:3B:B6:61:18:F2:BC:DC:41:D5:12:B8:E9:44:30:80:47:23:FA
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:38:88:eb:17:ca:65:74:13:f1:b2:f8:d0:0e:cd:76:cc:34:
c2:20:b9:79:a0:59:f3:75:35:5c:ac:a2:2d:4d:45:cd:a5:a8:
0c:ad:2a:a4:6b:07:ce:ba:e1:34:fe:b9:a1:15:fb:02:6c:7f:
8f:d1:ac:f6:db:52:8f:3f:e0:41:23:57:dc:44:d7:af:20:b1:
33:45:1f:66:d8:58:28:16:b2:ee:b1:58:43:a6:c0:43:03:06:
98:31:16:f9:f2:e4:ce:8d:d3:86:2a:12:c1:00:59:d4:5f:2d:
ee:17:be:92:73:d2:5e:32:bb:c4:37:f5:e0:75:7d:d9:86:16:
74:b5:d0:82:32:18:5b:4f:1b:74:31:64:e6:7a:e1:2b:34:aa:
92:d2:a7:97:eb:f3:6e:02:7f:c8:1f:af:23:15:34:d1:de:37:
a6:68:b8:47:b9:70:51:68:53:d5:16:a6:f5:d6:95:03:58:6e:
56:aa:60:f8:6c:f5:26:15:ac:ff:0b:7c:c8:e9:18:c9:cc:c8:
c9:a1:dc:2d:69:55:4e:01:94:14:61:90:3d:cb:77:2f:65:94:
3b:45:ea:2d:1e:d3:dc:7a:09:2a:e9:0e:01:39:c3:db:62:c6:
e4:18:35:68:2c:17:cf:c5:98:2f:6c:8c:99:99:0a:2a:77:12:
b8:0f:90:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 12:17:45 2026 by rpki-client