Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
File: dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft (raw, json)
Hash identifier: r7kCxiP+b6i5Dbys1J6IsXCrF0cUU/R03HnJlngoeVY=
Subject key identifier: EA:58:20:9C:B7:D8:F1:8C:D6:69:3C:4D:45:26:32:A7:73:DA:C8:68
Authority key identifier: 74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
Certificate issuer: /CN=7450810f13df8d9019f157c36fbd0f6db9862992
Certificate serial: 019E1CB4687DA3162CD61BB56B32FE939B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 15:00:45 +0000
Manifest this update: Tue 12 May 2026 15:00:45 +0000
Manifest next update: Wed 13 May 2026 15:00:45 +0000
Files and hashes: 1: BzyRKVh8G6MxV92pq1WYXw5su3Y.asa (hash: 3hX1G/8KfCcJykl9PaVXJ9wMH1P2QICFRRtGllgYDUo=)
2: dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl (hash: 1pe9QrNwRxRetyuNNNNnGG+D7PVGjiUDfgfI3QYux9c=)
3: yV3n7Of-XfxujJs_oZpOk9T5zxc.roa (hash: RWU+lLoWMG+Uf+PGBYW1EPxQGP3cMIviVCgLyu7si9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:68:7d:a3:16:2c:d6:1b:b5:6b:32:fe:93:9b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7450810f13df8d9019f157c36fbd0f6db9862992
Validity
Not Before: May 12 15:00:45 2026 GMT
Not After : May 13 15:00:45 2026 GMT
Subject: CN=ea58209cb7d8f18cd6693c4d452632a773dac868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:61:f2:62:3e:b9:72:6d:88:3c:11:fb:25:
f2:1a:08:c7:99:eb:40:75:23:4a:ce:8d:86:dc:67:
95:ce:bf:98:eb:a7:8d:a1:bd:df:a7:18:18:0f:33:
d3:d8:08:ff:d6:2c:f1:9e:16:b0:b4:fe:f0:59:c8:
3f:30:63:32:0d:cc:ec:34:ae:62:ca:18:a2:e5:6a:
c3:89:e7:f0:9a:19:0e:db:64:fe:f6:de:21:58:19:
3c:4a:6d:f3:5a:ff:a4:22:68:ff:95:4d:0a:8c:f9:
51:d5:29:03:a9:ec:f5:49:89:81:65:02:4b:66:46:
ca:96:b4:fe:60:00:a7:59:99:9c:d8:38:a7:be:af:
99:5f:71:c4:71:c6:40:2a:a6:25:35:14:87:e2:e8:
71:d8:f7:ef:94:60:92:a3:55:b1:59:5b:7e:f0:ef:
92:17:34:60:06:c0:e5:db:c5:47:b0:01:ed:01:56:
9b:ec:60:6a:5d:64:83:2f:2f:04:00:7b:b9:04:45:
4d:63:30:eb:a9:e3:ea:1c:ee:93:a8:87:87:bc:ae:
9c:49:df:5c:07:46:93:9b:8a:bc:0a:5f:19:4b:c4:
92:f3:06:e9:00:03:f4:d0:83:c3:de:5e:ca:b3:99:
e9:41:60:c3:16:a8:f5:bf:81:9c:4b:7a:b6:af:91:
4d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:58:20:9C:B7:D8:F1:8C:D6:69:3C:4D:45:26:32:A7:73:DA:C8:68
X509v3 Authority Key Identifier:
keyid:74:50:81:0F:13:DF:8D:90:19:F1:57:C3:6F:BD:0F:6D:B9:86:29:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFCBDxPfjZAZ8VfDb70PbbmGKZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1335d6-b4d6-4c83-8b0e-8f215c09ae72/1/dFCBDxPfjZAZ8VfDb70PbbmGKZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:50:cd:cb:93:29:35:c1:4d:dd:54:60:4e:a9:99:94:58:0a:
be:13:5d:b7:71:4c:10:3b:5b:4b:42:18:0d:17:a8:47:ef:a8:
b2:ff:2c:25:09:d2:98:16:21:1e:05:d2:40:b7:48:28:40:78:
93:d0:fc:1b:8b:16:71:91:9a:41:52:f8:d9:1b:94:a8:8d:e5:
68:58:ab:6c:d9:8b:11:3f:c9:25:1e:6a:3c:61:e7:5d:c1:ba:
29:50:68:46:57:eb:52:6a:9e:ce:0d:ca:53:11:32:4e:97:27:
94:9d:5e:47:94:d7:00:e4:f5:68:f1:60:a4:e3:8c:11:5d:44:
af:63:1e:69:b5:6e:2a:44:b8:a7:56:67:d9:68:c1:41:72:a5:
02:03:25:14:c4:d3:05:5a:b7:16:aa:93:b1:81:b2:0b:79:57:
bb:e4:46:84:25:bc:b8:82:46:da:6f:a6:04:29:25:30:91:d2:
8b:2f:35:39:05:d0:e5:e6:7f:7a:8d:a1:38:08:e5:f2:36:81:
d4:22:c6:2d:b0:2a:89:af:7c:8d:60:5f:2a:40:74:9d:cb:a0:
5b:15:d1:b7:c1:c8:4d:41:5f:a4:31:3a:ba:9f:a2:14:cf:76:
e0:50:df:ad:7b:9a:7c:94:dc:b8:a0:0e:f5:d5:e5:77:46:fe:
0e:4b:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:17:08 2026 by rpki-client