Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: GfuH3R77gblnd1EFOqsiL0gPsdOcBr5AYKpSnbfNgKU=
Subject key identifier: B8:D8:B1:1A:EE:FE:83:6C:E9:68:1F:B4:C9:DC:40:E6:DF:63:E3:E1
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019E1D22922E5019ABDC112F6DEA3C167CD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0B54
Signing time: Tue 12 May 2026 17:01:05 +0000
Manifest this update: Tue 12 May 2026 17:01:05 +0000
Manifest next update: Wed 13 May 2026 17:01:05 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: tYzCHxVNQsrS/oAdjJBCYhU13jYUoKsJ5AWIhiTx1jI=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:92:2e:50:19:ab:dc:11:2f:6d:ea:3c:16:7c:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: May 12 17:01:05 2026 GMT
Not After : May 13 17:01:05 2026 GMT
Subject: CN=b8d8b11aeefe836ce9681fb4c9dc40e6df63e3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:8c:17:73:dd:90:62:7c:0c:ef:2b:32:b5:
4e:e6:f8:7a:ba:fc:ea:03:cb:39:da:88:45:1f:2f:
a5:20:2a:1f:4e:a7:37:a6:31:c2:06:97:dc:5e:f7:
cf:54:a9:53:5c:52:55:fd:43:9c:ba:19:b8:ba:19:
ee:a6:58:73:eb:b4:54:27:f8:2c:5a:c6:7c:65:e7:
c0:83:5f:d1:f3:b0:5c:c7:9c:f4:3a:24:5d:32:05:
d9:64:6c:4e:39:e4:bc:d0:ae:97:b4:30:dd:c2:bc:
04:46:0c:92:ac:fa:00:0c:fc:a9:62:13:a3:d5:f4:
de:c1:0f:2f:df:4c:bd:7c:90:49:c5:3d:2f:49:9b:
f8:56:1c:94:f7:dd:b9:db:d6:c7:39:1a:ad:ba:e0:
ec:c8:5d:6c:9f:d7:30:df:4a:ba:28:af:21:14:98:
1d:98:87:26:73:ab:a7:56:a4:6c:72:54:96:5b:07:
f8:9d:61:96:c1:43:ed:19:14:fa:82:44:43:45:b7:
ef:88:12:12:f9:83:2f:9f:20:06:30:ad:1d:03:3c:
31:69:85:9a:b5:0e:c1:96:a0:3b:a4:55:5e:06:30:
13:b1:bc:ee:1a:8a:f2:e0:c7:d5:5a:6e:60:d0:5a:
5a:26:96:69:5f:a7:83:2f:bb:e4:ad:a3:a8:87:5c:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D8:B1:1A:EE:FE:83:6C:E9:68:1F:B4:C9:DC:40:E6:DF:63:E3:E1
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:20:e6:f9:42:46:0f:7c:a3:3b:bf:6f:f7:14:ee:5d:a4:
1c:a3:49:85:76:67:1d:15:88:74:b7:8e:fe:56:87:cb:6e:0b:
e4:8a:d8:0c:5f:13:8d:3a:db:88:35:3f:69:b7:50:fd:7f:b2:
98:23:3e:62:20:bb:fe:de:1c:f8:1f:1f:be:e4:c4:6c:7e:7f:
3d:13:b5:d4:a0:9d:56:65:4f:a6:ae:28:46:10:56:fd:5d:31:
94:e4:01:45:e4:2b:8b:c2:59:7f:60:f2:2e:de:0c:c4:c4:da:
e5:c3:4a:04:53:a9:5e:04:9b:d7:d9:19:89:66:48:ea:b5:df:
27:5c:4b:be:8d:9b:25:d2:07:03:6d:89:e0:33:63:65:08:2b:
e2:66:90:5f:8b:cb:d1:7e:83:d1:ba:bc:c2:4d:ea:ea:53:b1:
cd:e4:32:60:a1:52:e5:76:ec:59:16:12:b0:cc:a5:a0:09:89:
01:fc:ff:46:0d:37:4e:de:83:0c:ee:d6:f1:c0:fa:6d:8c:d4:
31:e7:86:ac:b1:02:01:16:08:40:59:e2:d4:dc:0f:f3:4a:a4:
c8:35:9d:e0:f3:74:5b:02:42:14:08:f2:de:36:86:67:37:ce:
0e:56:98:83:5d:7b:b0:f1:e5:ec:3c:2a:dd:a1:38:e3:7b:cc:
7d:8d:aa:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:31:11 2026 by rpki-client