Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: eI2VK5Oji7ikzVb9C3D1LVAHhYDS0d1ct2J8MfuzdGY=
Subject key identifier: 58:99:C6:EA:A7:0E:00:8E:73:A9:11:E7:F4:87:F5:56:F4:60:3D:F6
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 019E1F7F3F2FDA1FD51CCC65BC468098AA0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 04:01:33 +0000
Manifest this update: Wed 13 May 2026 04:01:33 +0000
Manifest next update: Thu 14 May 2026 04:01:33 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: Ql6HSV41bS4zLGSGC2kNmvQ7gYYk08NX4b6b0SClZEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:3f:2f:da:1f:d5:1c:cc:65:bc:46:80:98:aa:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: May 13 04:01:33 2026 GMT
Not After : May 14 04:01:33 2026 GMT
Subject: CN=5899c6eaa70e008e73a911e7f487f556f4603df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:14:5a:8d:e1:72:57:1d:f6:c5:fe:1e:d6:
2b:1e:34:21:bc:42:92:b0:29:74:49:d6:d5:92:61:
42:00:59:cb:db:16:1d:37:24:b7:88:eb:bf:17:36:
43:c8:7d:3f:15:d1:85:a9:e1:12:88:73:25:a5:ab:
30:98:9d:23:b2:65:a3:c8:b3:7f:4d:1f:67:9d:d0:
2b:d8:66:4c:89:ec:b2:1b:93:b3:5a:ee:88:7a:27:
27:a1:06:74:94:9f:4e:c2:19:00:ef:45:1a:d6:c8:
a0:e6:83:71:15:a0:e6:27:4d:9c:46:ba:65:78:49:
bc:9c:c9:52:97:89:7a:a3:d6:3a:72:59:97:13:52:
c1:53:1c:b8:d2:40:70:ba:27:a7:a8:4e:e5:55:4d:
4f:01:95:64:ef:f3:24:f0:b2:a5:7e:fc:fe:32:c6:
db:dc:24:8d:d9:51:af:b0:49:9c:47:4a:14:3e:82:
24:12:62:02:58:cb:43:76:d5:97:6a:e6:cf:bd:02:
2c:bf:ca:a4:62:14:cf:95:97:20:3d:e3:41:f2:80:
70:34:91:f3:85:3c:a6:ac:68:58:6c:68:83:c6:d7:
67:0c:0f:95:16:17:61:29:a2:1d:3b:95:8f:33:82:
00:b0:60:5f:13:51:cf:6e:cf:9c:33:d7:8a:42:5d:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:C6:EA:A7:0E:00:8E:73:A9:11:E7:F4:87:F5:56:F4:60:3D:F6
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:97:74:b6:c6:a8:14:5a:2e:bf:8e:3b:53:47:63:4a:6f:95:
fb:11:52:34:ca:da:68:cf:05:8e:c0:b3:fa:53:47:1a:30:6d:
38:53:dd:7b:57:06:bd:44:0a:20:c2:8c:67:a1:72:d4:27:e4:
1f:12:57:31:c1:23:7b:d1:ab:91:71:07:5a:e1:66:5b:d9:ce:
bc:ff:55:21:b9:96:94:f7:33:1d:8c:80:f6:ba:b4:73:82:72:
0b:ed:ed:d8:a1:07:ab:c5:7c:d7:61:c9:22:75:b4:58:ba:18:
4e:e7:11:20:02:99:ad:a7:7a:b5:86:fd:a7:84:b0:19:18:ce:
2a:78:0a:f0:d1:69:85:a2:ca:cd:cc:52:f7:4e:60:82:3a:3b:
f2:0b:fa:bb:a1:b0:07:73:ff:63:e3:bb:7e:8e:25:b6:f9:0b:
11:64:37:38:eb:76:bc:0f:b5:be:b2:86:d2:3c:08:e0:96:93:
ef:46:f1:88:d7:98:b4:b1:82:51:e1:54:cf:3c:c8:b2:64:31:
b1:9e:9e:b9:2b:25:65:8f:fd:23:b4:3c:a4:ed:3b:5f:29:f7:
c5:e0:d1:e6:49:a8:d9:ba:fb:0f:a2:7e:61:27:3a:a0:dd:c9:
a4:ae:83:79:2e:f7:6f:95:1e:9c:4e:bc:77:5b:6c:ff:d2:be:
66:f0:bc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:29:29 2026 by rpki-client