Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: /FDP+p8cNCBKdLU5k1hqQzgXGPLS9XsIZg7vQXZS9Sg=
Subject key identifier: 4A:5E:0A:25:2B:3D:E0:22:06:17:A1:75:3B:40:CE:BF:40:94:94:DE
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019E1CB4C5B2D89A884679B796B316603179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 15:01:09 +0000
Manifest this update: Tue 12 May 2026 15:01:09 +0000
Manifest next update: Wed 13 May 2026 15:01:09 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: eCdSp/4TdaHJRkq7OXzClqCH9QQ2Ebw8GPAADJvySpw=)
2: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (hash: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:c5:b2:d8:9a:88:46:79:b7:96:b3:16:60:31:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: May 12 15:01:09 2026 GMT
Not After : May 13 15:01:09 2026 GMT
Subject: CN=4a5e0a252b3de0220617a1753b40cebf409494de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:43:80:95:00:ce:38:86:d1:dd:f2:84:12:d4:
03:4e:4b:85:62:ba:d8:0e:a7:62:85:d0:24:14:32:
6d:a0:b9:6a:fd:87:77:46:1d:1d:b1:9a:e4:ae:d5:
9c:84:94:60:45:cb:08:8b:29:3c:2a:93:a1:c2:ae:
d3:3e:e4:00:6d:1e:dd:56:96:e7:9a:36:5e:da:f6:
21:ed:9b:48:e3:67:88:8b:1b:bc:9b:db:83:a8:32:
96:6d:5a:ae:f7:b0:0a:e2:12:de:c0:ce:5e:1a:88:
62:84:3e:13:6a:82:fa:c8:f9:ca:4f:cb:0c:8a:a0:
ee:60:00:20:c8:f6:ae:1c:95:81:7f:ce:a3:c4:25:
a8:40:cb:fc:39:cf:f9:a9:c1:ed:0d:53:3d:0e:c3:
5c:59:ae:76:c8:42:a5:5a:ec:14:38:90:de:e1:98:
0c:bd:9c:66:cd:f1:a7:fb:33:e2:51:7a:13:58:21:
fb:0f:bc:90:7c:31:0d:72:df:d3:cd:45:cd:44:37:
93:f0:62:e1:30:7a:d9:c0:9d:5c:e9:69:4e:35:2c:
5d:6f:25:48:59:6d:bc:95:de:78:64:df:78:53:6a:
67:23:76:e9:a8:12:d0:7a:db:48:b1:51:72:d8:f5:
9c:68:6f:fa:b1:1e:4f:d8:ec:6e:05:4c:de:d9:c4:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5E:0A:25:2B:3D:E0:22:06:17:A1:75:3B:40:CE:BF:40:94:94:DE
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c1:f3:ce:e3:fb:9d:e7:0c:0f:77:1f:20:ad:f1:8f:ac:2f:
1a:39:b9:50:45:ff:f7:b9:52:da:d6:fa:62:c9:95:10:4b:b9:
07:fc:d9:bb:c8:b6:3b:6d:67:97:db:4f:43:16:4d:2a:b2:0f:
3f:3e:31:08:c0:be:d0:51:53:a9:53:69:bb:0a:fe:c7:ea:ee:
c2:6e:49:eb:52:9d:01:c6:a6:b0:01:78:e7:f5:aa:cf:b2:69:
43:6c:2e:85:06:18:18:ab:55:41:ac:fe:1c:c7:4d:68:ba:06:
1c:89:69:41:c5:98:21:99:1b:81:6d:40:b6:53:5e:b7:81:ed:
6e:2f:d5:33:36:bc:07:ad:cc:e4:f9:c8:92:ea:56:12:3c:16:
8f:70:e9:93:5a:a7:a5:7f:31:ec:ef:79:9c:75:ec:53:c4:d0:
3a:ca:e3:65:d7:5c:81:7f:85:38:0c:96:b2:d0:a4:f4:02:26:
3c:43:da:70:71:08:48:cc:d8:62:7e:15:e4:a0:38:02:ae:19:
eb:76:bb:44:a4:31:96:a6:e2:aa:7c:a1:a9:96:99:ad:6f:e5:
ed:17:c9:39:04:c0:51:12:bf:c4:03:00:0d:32:9e:05:e5:0d:
4e:53:59:66:3b:d4:10:d1:9b:b2:ee:d2:2d:2d:5d:2c:de:11:
46:bb:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:06 2026 by rpki-client