Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: UomG0EgNbAcCKsbjZ75PtS/vO8oh+XFQPbNF5XvMKsQ=
Subject key identifier: 19:39:E5:34:CC:92:21:45:34:DC:14:0B:E1:70:93:25:A9:AA:E8:D2
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019E1EA36085C17853B2B7483ED368747DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 00:01:23 +0000
Manifest this update: Wed 13 May 2026 00:01:23 +0000
Manifest next update: Thu 14 May 2026 00:01:23 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: SnkD/IfkqQZ2XXuS5LRaiYlP2vrO3P6JlnCqM3gwNko=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:60:85:c1:78:53:b2:b7:48:3e:d3:68:74:7d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: May 13 00:01:23 2026 GMT
Not After : May 14 00:01:23 2026 GMT
Subject: CN=1939e534cc92214534dc140be1709325a9aae8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:10:e1:a0:56:02:c2:11:94:ef:c1:3b:d6:
06:00:a2:59:29:e9:2d:1c:52:08:fe:06:c6:35:59:
4c:df:f6:e8:c5:50:b1:47:e4:1a:1f:09:93:85:db:
48:5d:43:f2:44:58:ef:e0:d6:70:ec:93:bd:f9:11:
e9:5f:95:1b:c5:1a:ec:0f:28:57:66:61:7f:17:88:
5a:96:0f:a8:af:ee:a1:ad:5c:7b:a3:55:08:1f:1a:
07:28:d4:ff:be:f1:81:c4:96:03:b8:8b:95:c1:85:
de:0c:90:0c:d2:f3:42:f3:17:8f:2d:bc:ad:67:c0:
6b:0f:d1:00:95:d3:f5:19:90:e9:82:d4:44:bc:4c:
89:50:02:21:2f:b4:e7:65:ff:cd:1b:d0:b3:34:20:
3c:7b:08:f9:2c:b5:1d:1d:db:41:54:1b:9b:28:17:
da:34:04:19:a6:e6:be:ff:e0:38:11:54:59:b9:9b:
0e:7c:ad:6e:08:4a:f0:6a:68:b3:7e:78:31:d5:db:
05:58:dc:cc:a5:ea:c0:c7:71:c2:bf:b2:3a:4b:1d:
fb:89:ea:ac:9a:59:3b:7a:a7:52:da:ca:fb:21:12:
6d:b4:76:a8:45:cf:b5:31:61:de:ab:e4:ec:dd:81:
f8:3d:3c:fc:04:3b:44:c0:4a:8e:5d:96:9f:73:86:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:39:E5:34:CC:92:21:45:34:DC:14:0B:E1:70:93:25:A9:AA:E8:D2
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5c:d2:1e:6c:ed:85:83:84:55:cc:86:85:6a:d5:c6:c0:b3:
82:28:bd:49:ff:cc:48:ce:5c:52:b7:c8:4d:3f:f1:00:0f:a1:
d9:b1:fe:91:ec:d0:11:5e:a3:b1:4d:d6:d9:7f:c7:c5:1b:94:
7b:2d:d4:84:d9:46:b4:d8:5b:d1:a3:f1:5b:94:03:31:e3:38:
ac:b0:36:53:db:a1:62:fb:d8:03:67:85:1f:d4:82:9a:b5:a1:
30:de:1a:b5:18:a3:a0:f1:d6:9c:7d:c9:e7:bc:a8:55:5e:5b:
e5:bd:e1:dc:aa:02:34:f7:85:02:14:4a:51:49:98:42:b2:55:
20:02:dc:cf:5e:b0:7b:51:e2:8a:33:53:21:1f:fe:6d:3e:25:
63:9a:a7:fe:ee:2a:be:5f:30:ce:61:ec:cd:19:3f:62:3c:46:
06:8e:f0:8f:b8:42:6e:8d:97:fd:b7:65:fd:18:fa:e7:56:a9:
4b:8c:b3:c2:f7:26:ab:b3:bb:40:2e:6a:f0:30:66:0e:9e:5f:
37:cd:95:24:a6:a1:7f:46:d4:c6:f4:38:1c:94:1d:48:c1:bc:
d5:bc:ed:55:ed:e9:da:30:35:16:d0:96:9c:38:13:fa:fb:10:
f7:56:7c:ba:d2:0f:3b:3e:c4:5e:c9:12:cd:43:40:25:68:a1:
7f:1d:55:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:13:00 2026 by rpki-client