Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.mft
File: 1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.mft (raw, json)
Hash identifier: 1A/kArPGPtVdGp/+7iw8c2cmgGBu+TdaUhHBoCVwinI=
Subject key identifier: 95:D4:67:F1:A3:51:CE:C8:31:1B:BD:96:64:2B:41:A1:B1:44:CA:74
Authority key identifier: F9:9C:40:57:FF:25:09:41:59:C2:B1:FA:04:27:16:B8:58:11:16:4D
Certificate issuer: /CN=f99c4057ff25094159c2b1fa042716b85811164d
Certificate serial: 019E1CEB755FDA9C7453F38E5F7316E3FEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.mft
Manifest number: 45
Signing time: Tue 12 May 2026 16:00:53 +0000
Manifest this update: Tue 12 May 2026 16:00:53 +0000
Manifest next update: Wed 13 May 2026 16:00:53 +0000
Files and hashes: 1: 1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.crl (hash: o3emHFBGz8HouGGpNBpE1ZL2skhpDh2xFR7Cba96fAY=)
2: 3yJeSpT4LVuEpyqncYAk_aiFPL8.roa (hash: cPA4w0XeR2h1dlYvo9g80oVslkyr43gk5H+w6QPSLn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:75:5f:da:9c:74:53:f3:8e:5f:73:16:e3:fe:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99c4057ff25094159c2b1fa042716b85811164d
Validity
Not Before: May 12 16:00:53 2026 GMT
Not After : May 13 16:00:53 2026 GMT
Subject: CN=95d467f1a351cec8311bbd96642b41a1b144ca74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:5d:4c:a8:b2:7a:20:6f:b8:9c:c2:58:28:
2c:b6:ac:7b:2c:ea:b0:b4:67:51:8d:a3:49:e8:94:
74:73:cb:3e:8d:38:b7:40:a3:c5:7f:b5:13:4e:05:
47:32:a3:a2:b5:fb:46:7a:79:ce:c8:10:87:e2:2e:
3c:e2:91:f8:a3:4d:fb:6c:28:08:29:c5:e8:6a:f4:
b8:17:57:2c:02:95:3d:d2:6a:20:fa:2f:55:4a:28:
75:ea:ba:c5:13:64:a7:08:8e:47:e4:2a:d2:68:56:
06:06:86:34:cb:b6:60:dc:88:e3:a1:29:30:71:ed:
04:10:87:a3:06:01:82:17:be:7f:b2:ba:be:4e:85:
b4:4f:55:a5:cb:67:66:a4:37:83:28:6c:5d:42:39:
31:53:fe:e2:db:5d:4b:e2:4a:70:3e:71:2c:14:ef:
cd:ce:da:f3:99:57:d2:67:09:ca:3b:eb:6f:ff:b1:
d5:33:12:ba:f6:21:df:26:ee:07:48:74:83:98:91:
65:48:d3:30:73:b6:f3:91:eb:63:0a:b1:1a:70:7c:
9c:03:5e:a7:fd:1f:9a:60:83:c4:5c:10:87:83:4b:
06:5a:4a:5c:24:07:e0:68:ac:60:81:58:13:e2:8c:
18:fb:02:47:ed:37:bd:0c:68:46:7b:a3:16:4b:cd:
4f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D4:67:F1:A3:51:CE:C8:31:1B:BD:96:64:2B:41:A1:B1:44:CA:74
X509v3 Authority Key Identifier:
keyid:F9:9C:40:57:FF:25:09:41:59:C2:B1:FA:04:27:16:B8:58:11:16:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/395be9-d525-4e65-a018-e02f22eb48f2/1/1-ZxAV_8lCUFZwrH6BCcWuFgRFk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:32:30:95:29:d9:09:79:77:89:ea:13:36:6e:0f:61:0f:42:
79:d6:85:6c:8e:a6:3e:8f:6b:89:f8:09:69:62:29:86:5d:0a:
9a:de:fa:c8:70:ab:3a:01:60:cd:57:bb:3a:5d:55:b7:33:0d:
4d:2f:a9:10:31:fa:3f:84:df:dd:14:39:0c:22:52:ac:a3:fb:
0c:f7:68:eb:db:bb:6d:94:16:d1:0c:b4:77:10:0d:d7:55:4c:
77:8a:a7:72:66:59:9e:ba:41:54:c8:e4:34:89:91:7e:fb:c6:
06:95:8b:36:1b:b9:73:86:fb:ac:9f:0e:37:d9:f0:ae:97:1c:
bc:ea:1c:26:55:40:25:cd:66:1b:de:15:89:68:0e:c4:67:73:
2b:97:83:c0:a0:ed:1e:14:80:f6:a3:8d:9f:0e:d5:96:ee:d5:
9c:01:ba:b7:46:ea:13:df:87:88:0a:8c:01:1f:00:08:17:1d:
6d:0f:53:4b:23:62:8b:15:4d:ca:59:19:ec:ae:fa:2e:d0:ab:
c5:a9:65:53:8c:85:1b:d3:04:5c:7e:4d:cd:b2:38:39:43:c2:
e4:1a:79:dc:f4:bc:27:f3:08:43:90:4e:94:1f:a9:2a:5f:22:
32:d5:cb:7a:6c:14:13:35:5f:07:0f:d8:f0:5f:ab:19:f9:92:
b6:85:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:13 2026 by rpki-client