
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: A1iIF8eB+QKpKbxNXJlPMLkA2lMrHjZSX5kvjsCno7E=
Subject key identifier: 92:FD:DE:D9:84:E0:84:32:B3:EE:C2:1C:9A:66:58:2E:90:42:CE:19
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 019E1CB512AFDE63A542FB168B42BC390E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 13B7
Signing time: Tue 12 May 2026 15:01:29 +0000
Manifest this update: Tue 12 May 2026 15:01:29 +0000
Manifest next update: Wed 13 May 2026 15:01:29 +0000
Files and hashes: 1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: 4eKIlWGTGd0VITVwqaiMyFOG1PcB88xnZ9ZpzIk3lvQ=)
2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:12:af:de:63:a5:42:fb:16:8b:42:bc:39:0e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: May 12 15:01:29 2026 GMT
Not After : May 13 15:01:29 2026 GMT
Subject: CN=92fdded984e08432b3eec21c9a66582e9042ce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:99:57:eb:c2:fd:8a:e9:28:0d:ce:f7:d5:
a7:ec:c3:2e:09:3b:0f:87:b1:cc:f7:5a:ba:48:34:
97:c0:dc:01:73:f5:91:aa:ed:00:f8:0c:d4:a6:24:
4a:ac:51:05:82:85:ad:1f:8f:5e:02:63:eb:d9:cc:
76:95:74:a6:61:85:8e:df:1a:09:be:f1:75:85:df:
19:5c:7b:1a:d1:8b:78:74:77:f0:7f:12:2b:fd:bc:
58:57:34:1a:18:4a:0e:bb:c1:b2:de:85:7f:8b:71:
ba:3d:8b:ae:06:a1:b2:53:66:78:c1:bd:21:30:5a:
13:85:4d:44:ab:c4:8c:c4:2e:68:e2:d7:82:a8:d5:
c1:bf:6e:e1:78:37:77:97:7e:08:6f:76:f1:56:13:
c9:0e:0e:00:fe:8d:ac:0c:51:67:7a:57:96:bf:60:
e9:8a:16:f1:1b:22:0b:a2:9b:49:b5:c0:27:bc:b7:
ad:97:99:5a:93:9f:4e:d2:00:8a:8c:2c:7a:a3:7d:
d5:f1:5b:d2:fa:85:71:d2:b0:e8:f6:af:3b:7e:91:
95:0d:79:9d:51:e1:c7:50:e1:c5:e5:39:35:11:ec:
4e:0e:8b:a0:d1:b2:1a:35:cf:52:8f:31:1e:7b:75:
d3:fa:6a:29:6c:d2:06:28:8b:6a:ed:99:07:ab:9a:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FD:DE:D9:84:E0:84:32:B3:EE:C2:1C:9A:66:58:2E:90:42:CE:19
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5a:aa:96:ea:15:92:ed:2b:12:1a:8d:19:20:58:23:34:bf:
22:db:2e:15:92:59:d6:17:9a:f3:4c:59:ee:63:46:ca:5e:ba:
7e:03:fa:39:c2:db:11:49:52:99:fc:e8:b3:55:2a:7a:18:b2:
bc:7e:0f:2e:96:8e:01:b2:5c:25:91:94:3a:a7:b5:de:14:9a:
2d:7b:4c:8f:94:9b:51:74:00:ce:53:b0:c2:15:51:11:6a:f0:
12:92:ca:bc:4c:93:de:f5:eb:88:59:81:ab:39:6a:0d:3d:80:
81:c8:65:78:4a:96:23:34:e9:16:e0:68:9e:7a:4b:c3:e6:f1:
d5:69:52:72:af:83:df:f5:36:33:fb:fe:88:8d:e2:51:24:1e:
9b:27:f6:60:0c:77:09:71:e4:10:56:a8:9d:a8:71:f8:7f:6b:
b5:6f:70:22:2f:5c:76:d1:67:53:24:c8:8a:33:50:f6:d5:4f:
90:d9:ba:9f:0d:f0:7f:d3:64:9c:50:98:62:63:8b:b3:40:1f:
56:74:b2:74:69:30:24:5c:42:ce:af:69:a0:dd:20:32:4d:7d:
8f:cb:a0:e5:7b:a4:34:69:cd:ba:b6:ce:ea:4b:55:0e:80:38:
53:99:2b:4e:c4:09:b7:ca:b7:a8:68:cc:9c:35:dd:81:c2:6c:
60:49:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:24 2026 by rpki-client