Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: L+CKEG814t6E+HfDlQOzhjW3fINjVfTWnqXyhVx90j4=
Subject key identifier: 3B:2D:B4:F8:24:98:24:E5:E7:93:96:65:78:1A:FF:66:D0:48:3B:9C
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 019E1CEBB08F9F7BD6A836F7F8C717D52D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0B70
Signing time: Tue 12 May 2026 16:01:08 +0000
Manifest this update: Tue 12 May 2026 16:01:08 +0000
Manifest next update: Wed 13 May 2026 16:01:08 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: jjhTgF6DDeGIJGnPk0ec8jpPsxFoFMtZhMHDQZLsv0Q=)
2: zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa (hash: e4WusMf1jCNYs3vcwJpmwZbgUW6eoVWnObCKagC+ZGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:b0:8f:9f:7b:d6:a8:36:f7:f8:c7:17:d5:2d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: May 12 16:01:08 2026 GMT
Not After : May 13 16:01:08 2026 GMT
Subject: CN=3b2db4f8249824e5e7939665781aff66d0483b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:6b:42:d8:68:2a:cc:62:e8:86:68:a9:ec:
38:1e:b0:dd:75:b4:0c:96:01:33:5e:c4:52:55:22:
d3:37:fd:08:a5:96:ff:8d:d1:0f:71:eb:bd:76:2c:
74:a8:75:ce:b9:4e:45:27:8a:99:8e:60:5e:a4:55:
e9:33:4f:c8:bf:dd:bf:38:88:e5:05:3c:ab:f6:c7:
07:ac:73:73:3a:dc:16:9e:c9:aa:c0:82:39:62:18:
f6:d4:63:08:58:71:47:63:d4:66:1b:8c:37:8c:4e:
61:f4:6b:18:3d:64:f7:bc:67:bd:2e:91:08:92:41:
df:9a:f7:2e:10:55:f7:0d:bf:4c:59:2a:c9:f6:05:
16:fa:dc:f9:57:70:e5:b3:0a:5b:22:ee:a1:b8:2b:
44:25:2c:41:42:e5:6a:b1:f7:03:61:e9:48:19:0f:
c1:61:63:0e:be:54:39:61:41:0f:49:81:80:73:bc:
12:a8:fd:f2:e2:ff:7a:e1:53:f6:07:b1:18:7f:3b:
52:ad:a4:3e:f0:cf:3e:38:e6:1d:b1:77:92:04:4a:
0f:1b:b9:81:59:75:2f:18:51:65:b1:c5:6e:5f:f8:
0c:7a:c4:ed:b6:f7:c8:c4:e2:73:da:62:60:3d:39:
04:e0:b9:9a:48:ea:6f:8e:de:40:e4:95:61:4d:b7:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2D:B4:F8:24:98:24:E5:E7:93:96:65:78:1A:FF:66:D0:48:3B:9C
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f6:55:77:e4:46:8c:07:af:d4:2f:cc:81:b7:71:d7:07:2a:
c4:c1:71:dc:a3:65:4e:b1:12:d6:70:56:62:68:fd:b6:da:2f:
d5:22:05:38:40:41:ef:e2:bc:d5:fb:fc:f5:24:3c:49:84:cb:
e9:90:df:2e:82:62:57:1f:73:eb:fe:c2:31:79:cb:ff:58:52:
e1:7b:91:c3:94:56:64:bc:29:b9:f6:24:89:c1:9a:48:c2:3c:
b2:47:1a:6a:e4:6f:d9:3f:79:30:c7:96:17:e3:39:22:da:e5:
75:c8:d3:15:46:0e:b2:d4:58:77:35:3e:00:8e:e0:26:71:6a:
7f:ef:d1:20:1e:26:a4:39:bc:11:9a:8e:3d:cd:0e:bb:3b:db:
01:f4:57:55:58:3f:fe:23:48:d9:9f:4d:a5:68:24:86:42:c5:
a1:e6:1b:42:03:b7:1f:3e:a8:a1:fa:a9:f1:9d:53:15:0f:4e:
73:61:bd:9c:3a:6c:00:b1:cf:81:5b:31:63:1d:30:4d:99:e2:
e3:75:9a:41:d0:31:c0:61:4e:1e:fd:f0:bf:2e:ef:6e:c7:99:
da:08:e8:15:f3:62:54:3d:e7:2f:aa:a2:1e:84:71:d4:51:b9:
45:3b:01:e8:35:92:c0:f4:f8:b1:d5:7d:3a:f4:9f:1e:ad:1a:
92:cb:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:55:54 2026 by rpki-client