Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft (raw, json)
Hash identifier: tPuT8vQ+rPZDsUkXFd7R01nYucJGZ8EnMoeWaAZTHNc=
Subject key identifier: B9:70:ED:6B:F4:EA:BE:4F:99:F9:3A:55:CE:D9:BD:D9:C8:43:CD:5F
Authority key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Certificate issuer: /CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Certificate serial: 019E1EA3CDED992E8F7A580841A8E40C71B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
Manifest number: 089A
Signing time: Wed 13 May 2026 00:01:51 +0000
Manifest this update: Wed 13 May 2026 00:01:51 +0000
Manifest next update: Thu 14 May 2026 00:01:51 +0000
Files and hashes: 1: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl (hash: FNPB+kc2bgAmH4u0sKEPaU7AnaUfRRXXfVTD+M4nywA=)
2: HvbqYPMAVepvi6ZtkrW2fUxUxMM.roa (hash: kj2P3vyd4ShtsXAZbQsRTziSHIgT6QC6RQY8zqv9EFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:cd:ed:99:2e:8f:7a:58:08:41:a8:e4:0c:71:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Validity
Not Before: May 13 00:01:51 2026 GMT
Not After : May 14 00:01:51 2026 GMT
Subject: CN=b970ed6bf4eabe4f99f93a55ced9bdd9c843cd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:c8:8c:82:ab:e9:90:88:55:a3:13:4f:6b:
b4:46:d9:82:83:a4:5f:b8:d8:43:e2:6a:ec:9e:bb:
2f:31:4c:4d:ac:56:a7:2f:6d:88:b2:30:11:f2:7d:
95:c5:5e:82:4e:d0:fb:81:29:51:78:01:25:eb:4f:
e8:9b:92:5f:9b:db:3c:d1:a8:57:71:6d:e2:99:e3:
50:04:a5:f2:62:7e:4e:62:b6:38:0f:a8:57:a6:cc:
5a:62:5a:e6:02:fe:87:e9:e9:6f:28:c4:ae:d2:ba:
94:ac:59:90:20:e0:0b:96:f5:2a:d3:83:9a:33:58:
79:db:ca:34:cc:47:99:39:5b:26:b8:e3:64:31:40:
01:4f:0d:f0:a3:cf:a3:a5:86:4d:56:51:e6:6d:ec:
c6:09:ed:cf:f4:9b:1f:cc:f8:9a:db:9a:3e:65:74:
3a:89:ac:6d:2b:7b:32:81:30:15:a4:bc:e9:cf:e7:
ae:3e:c8:33:c4:b2:09:cc:19:6d:90:92:cc:2d:6e:
5b:ac:88:a1:30:0f:2e:0b:58:9a:db:8d:a2:49:ed:
57:25:c4:3a:ab:1b:7e:c2:00:79:ca:f4:2d:31:b2:
ad:03:57:43:06:a0:db:df:40:30:1a:5b:34:25:32:
3d:67:48:c4:c3:c8:03:b8:5a:6d:8f:b3:25:55:ca:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:70:ED:6B:F4:EA:BE:4F:99:F9:3A:55:CE:D9:BD:D9:C8:43:CD:5F
X509v3 Authority Key Identifier:
keyid:D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:96:bd:34:72:33:32:25:57:76:70:50:4c:5e:46:5f:7f:0a:
cc:b6:cb:a6:8b:88:7a:bc:b9:3b:bd:d9:7d:31:8b:60:b7:29:
d9:63:b2:ad:a7:32:bb:29:8a:71:82:6e:ad:63:17:9c:bd:fa:
99:b1:40:2b:bb:e5:2c:35:45:a0:75:25:72:af:52:67:3e:cc:
58:bd:e5:76:37:f4:a5:75:6a:c4:da:1c:1f:ac:a6:0b:e0:56:
96:f4:83:4a:de:6c:e1:29:bb:89:e6:de:a1:1c:21:12:d1:ad:
26:e0:c4:56:3a:98:8d:26:7c:c2:b3:fa:20:9d:b9:00:55:17:
2a:eb:da:61:4c:f7:05:02:ab:02:4f:a5:d4:b3:71:ef:77:74:
7f:a8:30:84:23:3e:27:a8:15:94:2a:25:bb:6a:e2:7c:11:84:
a9:4a:7b:4a:7e:ff:14:d2:37:dd:52:35:e4:0d:17:88:ba:7f:
12:b1:ba:4e:13:10:f6:d8:f6:e6:a8:48:9f:e3:2a:28:a5:70:
9a:ea:5c:d4:be:9e:90:fc:94:f4:2d:30:f6:3c:ab:1e:2e:aa:
84:9c:48:ac:45:2c:2d:dc:1c:55:b3:99:66:94:a0:5b:d2:c9:
f5:a9:84:be:56:24:ad:3c:8f:eb:67:03:7b:ae:a0:30:04:13:
a7:ea:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:26:39 2026 by rpki-client