Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
File: 1PDpygJ6-SWAVKdz1981haJ7Q60.mft (raw, json)
Hash identifier: qZ6yMnvfLFm0LlPJFlb/qlxAqPaYXYLN4Mk7XuDOmhY=
Subject key identifier: 56:58:6A:2F:9F:4C:E7:69:B6:F6:28:10:CE:1A:4E:2E:06:EC:06:45
Authority key identifier: D4:F0:E9:CA:02:7A:F9:25:80:54:A7:73:D7:DF:35:85:A2:7B:43:AD
Certificate issuer: /CN=d4f0e9ca027af9258054a773d7df3585a27b43ad
Certificate serial: 019E1BD9120B10E8BD646D6CA1A09948E84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
Manifest number: E2
Signing time: Tue 12 May 2026 11:01:11 +0000
Manifest this update: Tue 12 May 2026 11:01:11 +0000
Manifest next update: Wed 13 May 2026 11:01:11 +0000
Files and hashes: 1: 1PDpygJ6-SWAVKdz1981haJ7Q60.crl (hash: 405ktmhjZul4U2/gkzI1tUL1t+5eOgSMXuiiX4w3CzU=)
2: tPh9q4Es1lUOr4Bxk22S2XZXPck.roa (hash: Dt+BHwi/gVmE8Y3zSl5BpcPA/QBKnLsdcWn+hxuageo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:12:0b:10:e8:bd:64:6d:6c:a1:a0:99:48:e8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f0e9ca027af9258054a773d7df3585a27b43ad
Validity
Not Before: May 12 11:01:11 2026 GMT
Not After : May 13 11:01:11 2026 GMT
Subject: CN=56586a2f9f4ce769b6f62810ce1a4e2e06ec0645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:51:e3:51:97:c8:3a:7d:f2:50:1f:1c:9c:
38:7f:e7:16:4b:1d:1c:f0:73:52:07:d4:fc:6a:27:
1f:85:e4:d5:14:2b:a5:74:be:37:44:d5:c6:f7:45:
c8:b7:66:4e:96:92:c4:35:bb:b1:76:e4:81:1e:c1:
65:55:e2:2d:a6:b4:e1:5c:1b:00:4b:d3:e5:65:21:
ba:a8:17:14:4d:6f:80:ca:bf:c5:64:27:f7:cd:e6:
76:08:11:59:3a:1a:b8:06:77:c2:75:69:f2:27:09:
5c:93:f5:76:24:8c:62:20:f7:08:13:9f:f8:c6:32:
0a:ef:b4:af:bf:5f:1b:eb:ef:6b:cb:a5:ef:6e:ce:
46:7a:a7:d7:32:4b:24:0d:db:4d:11:87:c1:c4:60:
da:68:5c:3f:b4:09:07:a6:5f:65:7b:09:35:c9:f0:
36:ff:b6:0a:a7:d1:d0:ea:14:ce:22:2e:6a:9f:43:
17:ce:8a:3f:ca:19:e2:fb:fe:9b:a6:19:f1:ec:7c:
75:2b:6d:33:d8:d2:c8:c4:52:ed:a6:5f:d2:32:da:
a4:5a:fd:f0:0b:04:ad:63:55:a5:4a:8b:30:6a:d0:
14:29:e2:1c:5c:4c:5e:68:46:19:a4:19:c9:74:0d:
4b:4c:fa:71:9c:5c:fe:41:5e:77:21:35:d5:cd:b1:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:58:6A:2F:9F:4C:E7:69:B6:F6:28:10:CE:1A:4E:2E:06:EC:06:45
X509v3 Authority Key Identifier:
keyid:D4:F0:E9:CA:02:7A:F9:25:80:54:A7:73:D7:DF:35:85:A2:7B:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PDpygJ6-SWAVKdz1981haJ7Q60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/12da50-ce77-4a15-9d56-8956078144a2/1/1PDpygJ6-SWAVKdz1981haJ7Q60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ea:3d:ea:d5:02:77:8a:34:d5:44:87:80:2a:38:a9:93:2e:
c7:f4:1f:d1:3f:2d:aa:f2:11:5e:d2:2f:5d:12:34:52:19:e9:
d9:46:65:4d:55:f9:ef:06:1c:2d:9a:a6:07:6e:23:a0:da:a4:
bd:a2:20:c3:84:1d:77:14:3e:b5:82:17:21:03:cf:41:a0:4a:
4f:2b:19:93:b4:fb:13:b2:ae:25:3b:bc:34:23:ea:65:8c:7e:
ad:d7:a6:53:a9:d2:60:f3:ab:2b:00:57:83:1d:3f:c8:09:af:
10:a9:13:9c:d8:7c:76:3d:3f:89:ee:84:65:10:a6:f3:f8:13:
ad:71:20:70:56:ae:e1:49:ac:5e:35:c7:55:a5:23:55:2f:41:
0c:96:59:11:f3:95:a8:72:12:3e:c6:23:96:69:eb:f2:d5:b4:
ab:65:58:9e:b5:22:ed:29:ba:ff:8b:b6:cb:59:64:c6:0b:77:
de:cb:0a:09:60:e8:fd:f5:0f:de:a2:b9:28:b0:da:96:96:3c:
c4:04:36:59:cf:00:67:ee:d0:2f:d3:46:95:c2:2e:a8:fb:54:
84:7c:e0:a5:32:f0:b4:0a:32:eb:ff:a3:bc:f0:90:ac:62:ba:
64:50:59:a5:c5:03:a6:a4:5c:db:e3:8a:eb:4a:82:c6:af:55:
7b:3d:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:22 2026 by rpki-client