Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: 9jx/thVcw8JRl/O7bgdrGbvAOUnbzos3x+cU8rJrDoE=
Subject key identifier: 9B:44:0D:3D:FD:A7:3A:34:A1:25:DE:35:13:62:FB:02:E8:2A:01:A2
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019E1CEBC68D2FA81CC034B2E042EEC4B25A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1884
Signing time: Tue 12 May 2026 16:01:13 +0000
Manifest this update: Tue 12 May 2026 16:01:13 +0000
Manifest next update: Wed 13 May 2026 16:01:13 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: BePzCfdbRxLA7py9LPjQyaKk1GpE8XyvSsZC55UJIj8=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c6:8d:2f:a8:1c:c0:34:b2:e0:42:ee:c4:b2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: May 12 16:01:13 2026 GMT
Not After : May 13 16:01:13 2026 GMT
Subject: CN=9b440d3dfda73a34a125de351362fb02e82a01a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3f:33:7b:b0:5e:62:27:46:9e:8f:32:8d:50:
60:d1:7f:33:94:e3:54:8d:9e:a6:7a:72:c7:26:29:
17:47:19:82:0a:37:56:4a:9b:85:1f:13:1e:2a:36:
1b:a9:81:a6:55:14:92:03:9c:81:f0:77:4e:35:ca:
2d:20:23:95:dc:7b:a3:95:15:44:2b:93:5a:12:90:
e8:5a:14:a7:70:63:34:95:35:99:e6:fb:26:0a:9e:
ed:c9:94:da:5a:9e:61:60:a0:f6:74:a6:e4:85:7a:
c0:44:b7:5f:2e:8b:4c:c3:1e:67:c9:8b:7a:bf:a5:
7f:34:c9:66:22:f9:d8:56:f5:57:96:44:43:66:79:
0d:e5:05:f3:3e:0c:d6:3f:f6:c4:83:59:e1:66:b0:
32:81:ea:15:63:e4:94:be:bb:b9:09:aa:d9:39:51:
18:d0:97:6c:b0:f6:5d:d5:d1:99:a0:95:ae:c9:53:
a3:35:25:02:b2:ec:22:4b:55:12:d1:de:81:d9:2f:
ff:46:83:2f:3b:3d:e2:e0:dd:f5:67:c4:1f:55:b4:
dc:04:8f:03:5b:bd:15:a2:ab:b2:d6:5b:2b:a2:94:
59:d7:a7:b4:1a:87:32:57:9e:1c:a6:7f:41:4c:99:
7d:58:95:57:b3:76:a6:74:75:34:98:1b:b6:64:32:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:0D:3D:FD:A7:3A:34:A1:25:DE:35:13:62:FB:02:E8:2A:01:A2
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:66:f9:9e:f4:de:35:7d:3a:5d:2b:42:cd:7c:a6:a1:93:95:
5d:aa:ec:eb:01:af:23:27:d8:77:a0:28:15:49:7f:45:12:b8:
3b:e4:00:c5:56:ff:74:66:35:a1:51:26:77:99:2a:f4:2a:b9:
c1:db:51:c1:46:50:2e:23:37:f7:2f:fc:ca:4f:4d:a1:39:e4:
8a:0b:83:2c:da:27:5f:51:58:3c:1f:54:5e:1e:2b:2b:f9:3a:
2a:3a:44:30:d7:97:a2:9e:6d:12:e1:94:63:2c:04:25:fd:0e:
13:cf:d3:4f:85:1e:bb:eb:5c:a1:56:d5:60:bf:cd:cb:ea:1b:
68:4d:c7:a7:46:41:af:b5:91:7b:71:d6:f3:cf:41:e7:f9:1f:
13:a8:2c:75:e0:3f:eb:a6:e7:4b:0b:1d:2a:51:a3:43:54:8e:
89:52:fd:c6:07:c3:94:98:e0:4d:88:e9:83:f4:95:97:27:ab:
06:ca:51:3b:05:ea:a0:84:dc:51:53:24:b4:6d:60:7f:1e:26:
45:ad:d4:2e:37:25:bc:79:33:83:20:13:4f:68:94:34:5c:f2:
b5:c7:9e:5c:88:f9:cd:c3:13:0a:cc:19:cd:15:05:31:c7:90:
77:a5:a8:4e:8d:b8:ed:64:0d:52:f0:87:81:f6:4d:5b:1e:31:
a1:cb:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:08:35 2026 by rpki-client