Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: oxCdPPs/7jFlD7AwKN8UeiiJsdQdr6F+K6ojwtyenQs=
Subject key identifier: 02:E9:C1:67:4D:1D:56:A8:0F:91:E6:A5:E4:D2:EB:29:32:09:DD:B4
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019E1CB4FFBD692F73C2067B83806F010520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 036E
Signing time: Tue 12 May 2026 15:01:24 +0000
Manifest this update: Tue 12 May 2026 15:01:24 +0000
Manifest next update: Wed 13 May 2026 15:01:24 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: qhbdyac/uuNzR9sKhoRzaIzgD3s3kB8UKqo3qGNMhH0=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:ff:bd:69:2f:73:c2:06:7b:83:80:6f:01:05:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: May 12 15:01:24 2026 GMT
Not After : May 13 15:01:24 2026 GMT
Subject: CN=02e9c1674d1d56a80f91e6a5e4d2eb293209ddb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:33:a0:27:08:ce:b5:2b:7e:f1:1e:bb:9f:
dc:85:03:25:95:d0:55:73:81:e5:a1:42:02:de:ee:
4e:92:28:88:c2:b3:ad:6d:33:cc:3d:b0:1e:d3:fb:
0e:69:88:ca:81:46:d5:44:1f:d8:43:99:34:32:3e:
95:9b:80:37:ab:e5:20:4a:b2:ae:2e:2a:b5:32:3c:
a8:f5:22:92:15:f1:c3:86:23:0d:47:52:99:e3:6e:
df:a1:e4:24:b9:26:33:a1:43:48:82:7b:2d:cf:4e:
27:30:6a:eb:b7:f7:a2:b4:73:b0:a0:9d:a6:4f:df:
87:0f:94:ae:07:97:e4:30:7e:33:5f:85:26:27:0c:
5d:e0:ab:b8:9c:16:ae:ab:3e:82:69:a2:f6:f8:9b:
23:ac:b9:f1:42:61:87:2e:c4:41:3b:a4:84:6e:37:
16:72:17:76:43:2a:bf:48:0f:12:7c:bf:bf:d9:e6:
ac:47:d4:22:c6:ea:f0:7f:c4:a3:8a:a9:6a:88:91:
00:64:8e:54:6f:b0:29:23:13:af:85:a5:e0:d2:46:
7d:58:4c:5f:1f:52:ba:73:e2:77:57:17:0e:0a:08:
a5:25:9d:01:9f:ef:3a:bc:f6:bd:7b:1c:cf:9c:15:
58:42:f1:95:3e:9f:55:28:b3:b8:2e:b0:43:22:2f:
9e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E9:C1:67:4D:1D:56:A8:0F:91:E6:A5:E4:D2:EB:29:32:09:DD:B4
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:af:3c:61:44:44:cd:02:7c:84:0f:2d:14:eb:cf:97:f2:1d:
b6:3a:53:ec:0d:f0:7e:91:a2:0e:b4:35:45:f3:e9:bf:bd:dd:
2c:61:46:7f:8b:8e:cc:c8:eb:1f:2f:42:53:9e:b4:71:e5:9e:
84:a2:4a:d5:ce:f5:8f:dd:c8:5d:65:b8:5b:4b:c4:b7:9a:96:
fd:bf:46:e9:96:c3:89:60:fb:4e:06:f4:b6:d4:ca:f3:82:c4:
f4:f0:f6:cd:e5:19:71:3e:4f:69:9f:03:2c:d4:1c:09:86:6d:
c9:2a:34:9e:28:20:ea:34:16:91:8a:d3:ea:67:8d:ba:b9:ad:
fd:c3:24:ee:1c:47:ed:88:42:14:86:f2:4c:e3:04:79:04:01:
af:b1:90:9b:5d:44:c9:63:ac:89:dd:8c:ce:63:d6:c5:70:85:
c3:82:02:fe:7b:09:55:35:ca:e7:3c:02:1d:d3:31:24:f5:84:
79:e7:82:c5:51:bb:62:7f:54:43:f6:08:b2:80:fe:e3:9b:af:
a1:37:68:24:bc:de:57:e8:1f:93:09:3b:c0:92:29:aa:bf:f4:
5d:00:6a:84:70:ce:42:0a:2e:ed:6f:f9:1f:fc:a3:f1:eb:69:
3c:97:85:88:dc:16:b5:7c:e7:c1:e4:2a:43:e0:eb:5a:8e:f2:
68:9f:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:27 2026 by rpki-client