Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
File: 1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft (raw, json)
Hash identifier: qXMbxXmfdDccBP6+1hHfSCfZv5yNvF1p9w3w/SArwPE=
Subject key identifier: FF:11:D2:4D:21:93:D1:F5:52:D4:9F:92:35:88:C2:93:94:7C:C8:42
Authority key identifier: D7:1F:16:59:EA:C9:A6:A3:43:1D:F6:09:F9:E2:E2:19:6A:04:5C:8D
Certificate issuer: /CN=d71f1659eac9a6a3431df609f9e2e2196a045c8d
Certificate serial: 019E1D598C6006EB9F54EDF69EEFAFC0C49C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
Manifest number: CC
Signing time: Tue 12 May 2026 18:01:08 +0000
Manifest this update: Tue 12 May 2026 18:01:08 +0000
Manifest next update: Wed 13 May 2026 18:01:08 +0000
Files and hashes: 1: 1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl (hash: /R58x5ibq/j185U1njeJUojmg2XrQ2yloJdS0ICp6As=)
2: 9nPlOHYAHfyq6nvNreDs-Z27tqM.roa (hash: lVEwvYAKVlQiegB9BUjPpXT5BRTtW+2GQKgK1DFVwe0=)
3: M0nXoemZM80cs7-wgz7LynloKRU.roa (hash: Ml2fWT6fJ60kgFf8AT9u9ZFbZB2Z3iBFnyjQVhvjjO4=)
4: ZPcVr_99m8S8MN4KS8E89rzHdiU.roa (hash: 4ghNNSiKjSYzIHSnF3XQIcioMv7lGSMklZ8MTORFbKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:8c:60:06:eb:9f:54:ed:f6:9e:ef:af:c0:c4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d71f1659eac9a6a3431df609f9e2e2196a045c8d
Validity
Not Before: May 12 18:01:08 2026 GMT
Not After : May 13 18:01:08 2026 GMT
Subject: CN=ff11d24d2193d1f552d49f923588c293947cc842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:99:ee:2f:ca:5f:27:b8:bb:03:ee:cc:f6:
de:8c:da:4e:b2:d1:9b:12:a1:66:b6:c3:8a:28:d6:
ad:8f:7b:c1:69:bc:7a:75:61:e9:93:8c:61:98:11:
02:c1:45:2a:0c:d7:2c:37:a0:b4:c6:24:2a:d2:20:
30:83:2a:08:58:22:2f:2f:d9:8d:30:5d:f3:e3:63:
76:1d:44:a7:bb:f0:1b:50:32:23:66:62:b3:3e:eb:
28:24:5c:cc:a2:78:a7:1d:df:b3:94:fc:b7:a1:75:
c6:56:6d:f3:ee:90:74:20:e3:d5:c1:4b:64:4a:b5:
b9:86:0b:e9:09:61:a9:28:ad:6c:e0:74:fb:d3:54:
1f:04:9b:f4:4c:aa:36:85:9a:9a:5c:40:99:df:c1:
80:7f:f6:e3:78:4e:ea:28:89:8c:44:c3:bf:10:ba:
8d:b2:e7:bb:44:7c:ac:ed:5f:3d:09:af:64:1c:a4:
ec:b4:2b:47:17:18:02:07:e5:41:5d:6a:29:7a:46:
0b:c6:49:5d:8f:c3:65:fa:93:05:2e:50:a0:f0:b1:
f8:c5:17:c7:4a:93:32:f1:05:61:6b:9e:f1:26:11:
4f:15:61:77:17:f9:a8:76:22:69:44:27:3d:9c:ad:
c5:b6:c8:ae:d7:ab:24:08:eb:df:f1:29:e4:47:5f:
6d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:11:D2:4D:21:93:D1:F5:52:D4:9F:92:35:88:C2:93:94:7C:C8:42
X509v3 Authority Key Identifier:
keyid:D7:1F:16:59:EA:C9:A6:A3:43:1D:F6:09:F9:E2:E2:19:6A:04:5C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1x8WWerJpqNDHfYJ-eLiGWoEXI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b36e69-f81b-400a-aed1-5d3efe2109aa/1/1x8WWerJpqNDHfYJ-eLiGWoEXI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:bf:85:2f:0b:ca:1f:78:3e:c0:8b:48:08:ef:3f:8f:53:
74:87:73:15:b3:de:ff:70:40:9a:26:0a:e7:4e:25:3a:b3:47:
dc:64:c5:28:af:ab:d7:4f:5c:b5:d6:22:23:52:ef:a4:78:66:
9f:a2:3f:3a:c7:9f:3e:02:c8:8a:13:c8:74:cf:7a:06:e3:cd:
a2:c7:7d:e1:35:31:81:8b:11:b0:a6:61:8d:e3:0a:ea:ae:c6:
f0:26:ab:40:31:19:b5:a4:2d:b1:d5:b5:0e:8d:8e:22:f0:e6:
80:4d:e9:75:51:af:cc:60:52:8b:cc:9b:9c:5a:9d:74:85:e8:
4c:06:6b:c0:28:19:8d:da:e0:10:24:ec:55:a6:4f:2e:59:3b:
ad:03:2a:29:42:81:03:5e:f3:4f:a0:00:b0:42:02:f9:d3:35:
e5:7c:b1:77:92:7b:e7:0b:b7:97:f2:0d:65:f5:61:37:c0:e7:
ab:b5:64:23:90:2c:a4:92:43:56:d1:45:79:7c:23:f5:f8:f3:
10:0e:47:63:49:a0:25:c8:19:cc:45:bb:64:3b:25:ee:3b:e0:
65:ac:6d:6d:ee:68:37:c0:50:9b:6d:85:18:6c:ef:a0:0b:aa:
4e:9a:d7:de:73:db:74:d1:10:af:a4:7e:0b:3e:3d:03:6a:ce:
20:13:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:13 2026 by rpki-client