Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: 7Rc1YnClp0SnlLYToi8V3KycvU6VFvkx6Pa1hnls9jY=
Subject key identifier: 54:2A:13:31:3E:29:CB:2E:FC:AE:90:1B:77:C4:2D:4D:41:65:51:4C
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 019E1D9137C4EBCAE6677C742B01B989A0F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 1897
Signing time: Tue 12 May 2026 19:01:56 +0000
Manifest this update: Tue 12 May 2026 19:01:56 +0000
Manifest next update: Wed 13 May 2026 19:01:56 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: o7iy0c6i6k1GszbWBihCqwmMsOZBYp9zKHDdLdmscqo=)
2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:37:c4:eb:ca:e6:67:7c:74:2b:01:b9:89:a0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: May 12 19:01:56 2026 GMT
Not After : May 13 19:01:56 2026 GMT
Subject: CN=542a13313e29cb2efcae901b77c42d4d4165514c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:fa:19:bd:c2:12:4a:62:dc:93:55:f1:94:
c0:8b:15:4e:0c:e1:62:b2:78:db:f3:11:9a:f2:26:
d3:08:cc:6f:de:14:bf:ff:90:d3:40:15:dd:1b:50:
de:6d:7a:ba:8b:98:5a:65:e6:3e:50:50:a9:90:22:
8e:8a:0d:8f:6a:70:3e:a4:6c:36:eb:27:01:55:39:
ad:32:44:8c:5b:fc:e9:4e:0e:9a:3b:65:97:4e:ee:
00:ca:02:4e:77:93:43:b5:c3:69:c0:eb:64:5d:24:
c1:db:e5:dc:56:77:6c:48:91:91:1c:90:f2:69:52:
ef:82:8d:94:5b:88:5c:9a:5a:38:f8:c9:d3:cc:a9:
1f:45:86:da:f7:38:da:ae:f4:ad:f7:be:a1:42:02:
c5:5e:b9:bf:fa:e4:71:74:37:3b:bf:e4:44:16:20:
8d:2a:12:b0:07:2c:53:6e:9d:0d:9b:6b:ba:57:0c:
aa:4e:95:fd:09:f4:a5:ef:d2:29:a5:44:10:cf:64:
62:d7:b5:3d:d4:0a:d8:84:ce:7d:17:8c:fb:e7:9a:
b0:a0:74:a8:26:99:30:9f:cd:3f:f9:4c:bd:ee:9f:
e3:c3:bc:ef:03:73:f6:b2:1d:4e:9d:6c:43:9e:0f:
ef:5b:c6:84:6a:8a:6f:3c:73:4b:c5:6f:ee:18:11:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2A:13:31:3E:29:CB:2E:FC:AE:90:1B:77:C4:2D:4D:41:65:51:4C
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:88:26:83:0b:01:cc:3e:33:76:fd:f3:77:00:46:27:69:
f8:e5:26:c4:cf:da:ef:8a:78:f0:6b:36:52:96:a8:08:a2:3e:
b2:ed:9b:fd:96:cd:6c:8d:55:ec:0e:77:88:13:65:18:89:0e:
cc:e6:2d:cd:d0:c4:f1:4c:36:1f:10:ea:43:09:d2:aa:e0:1d:
f6:8a:c6:08:1d:ca:4f:85:ce:0c:f3:7e:8a:e8:26:31:51:66:
8e:35:cf:ff:0e:de:2d:e6:5a:e1:1d:fa:f4:4a:e4:f4:dc:fd:
b6:13:00:29:fc:9b:d6:7c:d0:9d:04:d3:e5:d6:ed:99:60:d7:
b7:d3:1a:2b:fd:3c:bf:cc:81:10:3a:a7:a8:df:bf:a2:e0:67:
71:86:0d:6c:0c:12:a3:dc:c1:d4:bc:5f:3a:c1:28:aa:d8:67:
08:28:cf:fd:90:dd:41:e5:e9:60:e1:3b:ba:ce:4e:0f:82:75:
9c:73:6a:d3:e8:cc:8e:cc:9b:74:e3:92:ab:fb:05:e0:ba:3a:
79:ee:0c:46:b2:55:1c:b4:41:2f:7e:27:ff:5b:cf:a4:50:19:
d1:8e:85:05:7e:5e:9d:4b:a8:ed:4f:2f:bc:d8:9e:6b:2d:d3:
30:15:73:8e:3a:ba:12:c6:8e:cb:0e:0d:98:63:6b:a6:de:2f:
38:03:52:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:02 2026 by rpki-client