Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: AzeDaSfcelQ9z0CSMislcIOO5sdQJK5JeTeI94w/seg=
Subject key identifier: 95:DB:3E:E8:EB:9D:3C:F0:DD:7D:21:30:82:D4:54:62:8B:2F:EC:D0
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019E1E34FB640AC3A2FCC8BF4727D4945D0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 058C
Signing time: Tue 12 May 2026 22:00:49 +0000
Manifest this update: Tue 12 May 2026 22:00:49 +0000
Manifest next update: Wed 13 May 2026 22:00:49 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: TqXdlGmnnAFMne3uQsnlM3wcNsgY9Z7pkp8yTSSMkzM=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:fb:64:0a:c3:a2:fc:c8:bf:47:27:d4:94:5d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: May 12 22:00:49 2026 GMT
Not After : May 13 22:00:49 2026 GMT
Subject: CN=95db3ee8eb9d3cf0dd7d213082d454628b2fecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:40:58:35:08:f6:ea:98:17:80:50:68:c3:
99:60:b3:75:75:c7:a3:c0:b6:21:df:21:b0:06:a2:
45:f5:39:34:13:58:81:83:8e:b7:78:64:c2:f8:1a:
1b:5d:a1:a5:0a:6f:ef:c2:55:02:bb:d1:36:5d:7b:
c8:84:41:5b:41:3a:e4:69:c7:2b:fe:f2:dc:54:59:
97:4d:c1:87:d5:63:49:82:94:cc:3f:0e:ae:b4:ec:
92:f8:09:98:f4:bb:92:52:06:9e:f7:3d:1a:d4:41:
dc:0e:e0:6f:48:c4:b2:25:54:64:02:8a:19:9e:44:
3b:06:ca:fa:71:69:60:61:59:dc:2e:d2:e3:f4:82:
17:a1:4c:f2:1e:22:96:51:e1:75:9f:87:36:ae:12:
14:88:87:f0:e2:6d:a1:ad:4c:54:06:7d:bd:e0:5c:
da:57:be:b6:24:d4:3f:aa:f8:18:37:3c:af:5e:62:
7e:1b:f0:81:98:a1:39:97:d7:c0:8f:76:c8:76:88:
4f:38:74:ae:e1:d7:5b:5e:f2:27:9c:97:4b:50:66:
80:db:cc:b7:43:55:f1:29:02:2e:70:c3:ef:08:f6:
76:f4:b4:59:23:32:0c:ed:5e:7b:0c:94:c8:f9:b4:
8d:e0:3e:d9:31:36:11:e3:c7:ae:8e:eb:51:ed:3f:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DB:3E:E8:EB:9D:3C:F0:DD:7D:21:30:82:D4:54:62:8B:2F:EC:D0
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:eb:e5:6b:49:11:5c:70:3c:5c:4d:9b:43:15:4e:16:3d:17:
c0:de:c8:2d:92:b3:3a:40:56:9b:e3:3b:4f:e8:74:27:02:27:
e3:22:b6:79:9a:3b:a9:08:7c:8b:02:99:44:3b:93:1c:0c:24:
ee:14:f0:01:cb:07:11:ab:dd:77:4e:0e:00:17:ea:bc:8c:ba:
89:46:b1:ec:0c:85:e4:f3:f3:9b:8b:3e:5a:1b:f7:cd:76:7d:
4a:b4:90:20:9d:88:74:b4:b1:89:0a:f1:2c:e2:9f:d8:fd:ba:
11:36:98:33:63:1f:97:94:17:8c:28:49:47:c2:5a:d9:86:ee:
b9:e0:94:37:2d:fe:01:67:8f:7f:85:f9:85:26:b0:1d:6d:8f:
d7:41:7b:ba:5a:8f:de:97:ab:01:d0:a7:25:84:c2:ca:19:03:
f8:70:e5:47:8f:c3:95:d0:9e:02:bb:a5:8b:5f:ed:2e:9b:2f:
e9:99:fa:94:55:9a:f5:14:64:ce:d9:6e:c7:dd:cf:a3:87:eb:
d2:9d:63:7d:a7:37:4c:30:66:b6:de:68:93:17:30:d9:42:c8:
71:f3:c1:96:04:6b:15:b9:3c:0f:2c:cf:1b:b7:06:c4:c3:be:
1e:56:15:2e:af:ee:a4:9f:50:b4:60:ce:31:c3:f1:bf:43:59:
24:ff:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:44:44 2026 by rpki-client