Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
File: diY1mUnOzyQYxaLbIayrhd2Rk9g.mft (raw, json)
Hash identifier: KeiweHFeb05mEyxU/AvGcP0xxmIYRitM4BYUGhcp/TI=
Subject key identifier: 88:5D:3C:52:BD:5C:32:AC:96:AB:1D:D7:3D:AD:04:1A:A9:C3:7C:52
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 019E1EA343C155F3920641836C70D0995879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 00:01:16 +0000
Manifest this update: Wed 13 May 2026 00:01:16 +0000
Manifest next update: Thu 14 May 2026 00:01:16 +0000
Files and hashes: 1: Ra_O1tJPqxceyq_rAhiwFMOrKjw.roa (hash: Rmyhdy6TeiiXlYpWyq2MVfXDcJgMeLMhA0axqCrhBSg=)
2: diY1mUnOzyQYxaLbIayrhd2Rk9g.crl (hash: N9PX2z5uMUDjSRqo9RwX+++uH+jgTLCkxSqm8m+bNWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:43:c1:55:f3:92:06:41:83:6c:70:d0:99:58:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: May 13 00:01:16 2026 GMT
Not After : May 14 00:01:16 2026 GMT
Subject: CN=885d3c52bd5c32ac96ab1dd73dad041aa9c37c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:01:2c:3f:61:5f:ba:cf:a7:43:83:69:c6:
64:d5:1d:34:75:b2:1a:3d:51:5e:d8:1b:23:4b:af:
bb:b3:a0:26:ce:35:cc:08:86:4d:3e:eb:45:81:ec:
75:de:ac:ca:94:1a:36:7d:c7:9a:d7:57:11:be:13:
bb:af:07:64:a8:f9:4d:ed:7c:6e:c7:6d:6e:40:b6:
75:3d:c5:ba:0c:e3:8d:b6:19:5a:7f:06:9e:9c:01:
17:f9:4a:fa:56:9e:d3:d1:9e:45:b4:fa:31:7b:34:
ae:cb:09:cf:18:e4:c7:f2:35:3c:1a:ba:4a:61:f4:
1a:d0:67:85:6f:4e:1b:50:a2:17:3a:3e:4f:17:62:
b5:d7:af:a6:38:7b:c9:7b:93:b0:06:cf:d4:75:72:
fc:40:6e:d5:05:01:53:ed:8f:2f:83:ae:34:b8:d5:
ad:68:39:de:c9:a2:b0:3f:5e:61:eb:75:0d:36:7b:
44:e3:b7:37:0a:31:7a:81:11:ef:aa:53:58:ca:a8:
bc:ec:13:9a:a5:58:55:f6:b7:39:a9:20:98:cf:79:
c6:60:6f:b6:ce:81:93:98:3a:cb:4a:9c:42:49:ea:
af:4c:c3:c6:8e:9f:e3:a2:98:56:4f:67:73:b2:73:
c6:53:33:47:cc:c4:a3:ba:d9:e7:24:93:66:af:f5:
e6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:3C:52:BD:5C:32:AC:96:AB:1D:D7:3D:AD:04:1A:A9:C3:7C:52
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:86:38:a3:ea:05:7e:9e:93:3b:9c:95:4d:86:d0:18:b0:
61:3b:d4:6a:a7:45:ba:69:e0:06:75:7f:bb:01:46:9c:af:84:
33:48:55:e7:37:03:54:18:1d:cf:c0:b2:08:cc:a1:3f:8f:01:
55:75:f8:22:f2:2c:70:98:67:8b:1d:9e:55:ac:b7:ee:48:b4:
38:36:b7:9d:44:23:df:fb:e0:cb:ef:e3:92:b8:44:9b:89:6f:
42:94:d5:1b:de:5e:2d:61:a4:91:c9:ae:b2:9f:98:7b:9a:fa:
45:2b:53:b4:96:91:df:60:f9:ac:d8:9d:ab:ed:ad:bc:10:50:
b5:64:04:ec:82:ab:23:fb:c4:54:01:a5:02:1f:6a:50:94:a0:
1c:0c:eb:6d:11:47:f7:d2:ae:a4:14:d8:ef:e5:82:68:a4:9b:
f6:39:57:96:9a:27:b6:bf:3d:19:1f:55:ac:33:d3:44:ed:0b:
69:c3:20:32:1d:d1:9c:96:fa:a7:f5:df:cf:0c:5c:ab:1b:9e:
59:71:d0:9e:90:d1:b6:d3:5b:23:e4:08:ff:a6:4d:84:6e:27:
fe:e1:5c:84:18:31:2d:42:b7:21:a1:47:c8:6e:b5:8a:67:42:
69:46:16:0e:dc:b5:d7:88:ba:72:e3:4a:c6:de:0f:a9:02:1a:
9c:aa:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:19:55 2026 by rpki-client