Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: IGY/G4xxDFXJjpO1dEhCrIWYrow8nv9ToMeXxy3APK0=
Subject key identifier: C9:BB:6F:F1:06:77:F6:13:2F:B6:26:2F:34:17:23:4A:84:7A:84:86
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 019E20FF4A577C81279F7B1B37DE9B91645F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 11:01:01 +0000
Manifest this update: Wed 13 May 2026 11:01:01 +0000
Manifest next update: Thu 14 May 2026 11:01:01 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: kiBUXJ1gjtZTvNdhGqyOl5izMjbLPraOsmZy9vC8oc0=)
2: WPaT0Y7RS5CA12LK1l6IVoc8b5w.roa (hash: RbeOiouCG0/fdoKUcqWun90nLWJeLto+KTqvRhLoP/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:4a:57:7c:81:27:9f:7b:1b:37:de:9b:91:64:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: May 13 11:01:01 2026 GMT
Not After : May 14 11:01:01 2026 GMT
Subject: CN=c9bb6ff10677f6132fb6262f3417234a847a8486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:f7:2e:d9:0a:7b:fa:29:fa:45:48:71:bc:
f6:c8:b6:b9:1d:91:0a:08:19:31:2a:13:26:b0:d6:
e5:5b:88:c1:a1:22:53:09:3c:c3:5d:09:56:18:72:
4f:fb:20:13:e7:bd:16:20:23:10:fb:be:38:af:ad:
b4:56:d6:21:bf:80:92:da:9e:2b:dc:97:dd:a4:9d:
d6:65:e1:83:e2:4e:60:6e:86:49:28:ff:49:f7:78:
d9:7a:ec:40:37:b4:b3:fc:c0:98:6d:e6:91:8c:0d:
34:87:ed:7c:34:2a:dc:55:f0:a0:ec:b9:54:ad:7f:
03:be:77:b0:48:c5:6d:6b:b2:8b:ef:42:f6:9d:18:
6e:5a:94:55:bc:2d:14:bf:f0:a6:32:29:d1:5e:5a:
18:61:68:9b:d3:58:f2:9e:18:9d:5e:14:b5:da:6d:
ab:02:40:e0:bb:e1:df:4c:94:2c:46:32:9e:e5:76:
62:a4:4e:ca:37:19:72:cb:d3:a6:31:ba:32:2e:ab:
ef:ed:22:f0:8a:55:49:0c:b7:d7:c4:77:80:3a:f3:
da:6c:12:cd:81:42:a0:1f:c5:0f:d5:2f:68:bf:66:
eb:4c:c2:07:65:37:d6:70:37:ed:d9:28:74:61:9f:
2d:01:a6:7b:da:4f:ea:5d:1c:8a:33:cf:a2:dd:25:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BB:6F:F1:06:77:F6:13:2F:B6:26:2F:34:17:23:4A:84:7A:84:86
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ed:54:fa:b5:76:a1:26:60:fc:6d:b8:fb:03:2d:83:9b:8d:
87:5f:4d:49:4a:ff:6e:ed:e1:43:ea:39:f4:1a:a6:a3:9d:86:
4a:30:59:f7:0a:8e:a1:77:e4:ac:c5:40:36:f0:32:14:65:63:
79:86:e8:14:ac:0d:5e:4e:03:53:20:cf:38:97:a2:3a:e7:cb:
90:90:50:3a:45:da:bd:7d:4c:0e:53:05:a7:f9:41:2a:e0:17:
1f:12:a6:15:12:e2:c7:cc:f8:5c:c0:2c:84:a3:9d:a8:04:27:
09:b9:11:8d:69:d6:4e:e7:fb:71:47:38:6a:c7:c9:70:ab:a6:
88:a2:3d:d6:d8:18:74:8e:ca:34:16:8c:b2:b4:e3:1d:d8:bc:
15:83:5a:f1:b3:ae:a9:ee:2d:95:3b:36:3b:cb:3f:1f:90:5a:
40:e3:37:ad:42:39:75:80:b5:4a:e9:0e:48:8b:76:41:81:d8:
00:b2:98:cc:3a:a1:67:6f:e7:62:da:93:52:70:9e:7d:29:fb:
83:07:c1:2c:97:37:c9:66:80:79:5b:80:40:89:52:64:ec:fe:
1a:de:1d:4a:f0:1e:f1:30:57:4f:7e:06:06:7e:8d:90:6a:6e:
cb:59:db:5d:bf:7f:c4:d9:b9:5e:80:63:96:8f:bf:96:93:b1:
ae:b8:37:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:43 2026 by rpki-client