Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: lPXtw9/l84Pq+lFshLj97wKgmOuzCTWFdJvcfgZmjGw=
Subject key identifier: B3:2C:28:5C:BE:05:82:3A:4A:0E:A7:E2:5F:92:51:EF:EC:CB:FD:90
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019E1D597825C7D99A60E797556E19CF4E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 0311
Signing time: Tue 12 May 2026 18:01:03 +0000
Manifest this update: Tue 12 May 2026 18:01:03 +0000
Manifest next update: Wed 13 May 2026 18:01:03 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: IjmufR6xFOV+/yfc+LZ0uQbq4SQtI5c33ablt+1WlN4=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:78:25:c7:d9:9a:60:e7:97:55:6e:19:cf:4e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: May 12 18:01:03 2026 GMT
Not After : May 13 18:01:03 2026 GMT
Subject: CN=b32c285cbe05823a4a0ea7e25f9251efeccbfd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:70:59:8c:38:3e:e9:cb:e8:84:ff:44:ca:
66:70:8d:fd:83:5b:18:2d:5e:a7:28:6f:5b:7b:9f:
64:ea:97:26:2c:75:0e:45:e0:a5:a3:fd:96:70:5d:
02:53:4e:4d:ca:71:f5:fe:43:c6:c0:66:48:4b:3c:
cf:b0:90:25:f8:39:22:d5:c7:f1:6b:3f:5f:01:8e:
0c:43:83:76:91:ae:ea:ff:82:0e:58:e3:6e:7a:5d:
66:22:b6:a9:a4:7a:52:43:32:30:db:47:bb:36:43:
35:5c:26:00:c4:0e:44:ab:cc:1f:bb:2e:ea:b5:83:
9e:aa:00:7a:4a:bf:a2:29:04:d7:09:ed:83:f8:64:
98:cd:86:e4:6f:65:ed:42:8f:c9:7c:d9:9e:e9:ca:
a0:b4:52:8a:02:64:0a:4d:69:e1:5e:cc:74:1c:3b:
6a:a7:ba:72:6e:f6:ef:90:20:b6:18:0f:f0:01:86:
17:21:e3:5f:f3:d6:3e:23:f0:5f:f7:ae:17:09:7c:
64:81:a5:7d:41:e1:ae:ca:8f:87:60:67:75:8a:a5:
0f:4a:fd:42:59:2c:6a:3b:d8:5f:1a:e1:db:91:02:
f2:f7:04:fd:1e:b3:d0:ad:c5:14:73:99:d7:ae:ea:
4d:7f:62:2a:d4:09:90:03:07:d0:56:52:e7:07:ea:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2C:28:5C:BE:05:82:3A:4A:0E:A7:E2:5F:92:51:EF:EC:CB:FD:90
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:61:8f:02:d3:ca:f1:5f:49:17:70:34:58:04:04:5f:a2:
d5:75:03:9f:8e:c3:26:a4:3f:fb:81:af:82:9b:6f:6d:ff:33:
c3:bc:cb:b2:3c:a4:6d:df:bb:c4:87:7b:8f:e3:b3:5a:40:c2:
eb:72:b5:67:14:68:6f:c2:05:77:ff:ab:d2:0c:39:f8:ba:fa:
de:05:2b:03:61:9a:4b:e4:54:d5:2d:7a:68:49:ed:4d:2a:be:
ae:87:82:ae:2a:26:92:da:01:85:d0:d1:7a:3e:c1:83:05:6a:
53:62:43:12:92:c0:7f:2e:d4:2e:ad:92:33:0c:b8:2a:6e:e4:
06:59:66:9e:42:9b:df:53:fc:23:2f:c5:73:0e:ce:8a:d9:a6:
85:03:b8:09:6a:18:08:ad:de:8d:48:75:b5:98:c7:a0:52:39:
f4:71:90:83:aa:9b:c3:b2:1b:4c:d4:dc:55:95:a9:2c:93:0b:
bb:f3:22:2e:dd:b2:89:75:d2:5d:58:06:4f:30:8a:1b:51:10:
8b:54:93:f6:9c:b3:a6:bf:0a:ec:96:de:45:d6:95:f2:c3:1c:
2c:08:4c:ad:aa:e9:5e:cf:41:d4:70:e2:cb:8e:d7:2d:b1:79:
f9:f9:90:18:50:d7:46:54:b3:e9:c6:27:d0:7f:bd:75:74:31:
2d:cf:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:04 2026 by rpki-client