Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: KuVc0nAn4/55Gwkomnl2nIpkaMXkhYxZaSpfIsz92CQ=
Subject key identifier: C1:73:61:68:7D:C0:44:F2:0D:EC:89:8D:D4:B9:FE:99:06:51:C8:A8
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019E1EA2B9FB704118A4C4CEBF873E59F9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 00:00:41 +0000
Manifest this update: Wed 13 May 2026 00:00:41 +0000
Manifest next update: Thu 14 May 2026 00:00:41 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: oAiOaxNlVve0NuYMzXnrqaCUfzmN+jYHOzmLBJa5nms=)
2: EkysD1nuSYyDinbnDahfH-VyT0k.roa (hash: I2/OA/U368nOnLRCtdWjPsJgwSqvtccdxmLHw2kJW9Y=)
3: RbJbPNiBU0kAmqUheDo0szIBjek.roa (hash: CTVJkxKyBFMb7b5JJrpF23blu0aI0z8ZUdPB6VOt7qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:b9:fb:70:41:18:a4:c4:ce:bf:87:3e:59:f9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: May 13 00:00:41 2026 GMT
Not After : May 14 00:00:41 2026 GMT
Subject: CN=c17361687dc044f20dec898dd4b9fe990651c8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1c:bc:fe:54:a1:ff:c9:00:77:ee:32:e6:5c:
3e:dd:e5:79:5e:9b:37:19:09:b1:9b:87:ec:2a:4b:
df:6a:e9:24:a6:d6:5d:49:63:8b:82:a1:68:0c:e5:
90:a1:40:78:81:65:f7:d4:d2:14:b8:b4:7f:cd:cb:
38:29:63:8e:c7:2d:7d:6e:c0:b2:f4:90:b3:b7:51:
83:73:6f:b8:5c:56:4e:1c:02:82:fe:a6:b7:df:35:
38:a2:0e:ee:4b:d1:ee:e4:17:b5:6e:4d:8c:80:4f:
61:5f:ed:4c:80:d3:33:f2:fd:0c:a6:8c:ce:1b:d5:
42:b0:2b:3d:da:ec:7e:7d:a9:dd:e5:63:47:2f:79:
38:ba:6d:e7:12:44:3c:22:b0:3f:ce:8b:26:c3:f4:
71:51:82:da:87:85:e5:7c:59:d6:c9:8e:03:01:b3:
13:9e:3a:4f:4b:a6:bc:a9:8a:dc:8e:c0:48:ae:f6:
88:59:cf:30:8b:03:ba:34:ec:c5:e9:0f:3e:36:24:
fb:77:31:c8:6b:77:79:aa:e8:37:e9:5a:78:b4:f5:
57:39:15:24:33:9c:24:bd:0d:00:c4:83:db:9e:65:
ac:b9:d0:52:42:51:9f:af:fd:78:64:d7:19:d3:dd:
4d:7a:05:41:a0:f9:3e:ee:4d:b6:3c:42:2d:44:13:
96:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:61:68:7D:C0:44:F2:0D:EC:89:8D:D4:B9:FE:99:06:51:C8:A8
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:98:9e:a6:a1:fe:8f:f4:c2:1a:e3:06:79:33:5e:bf:be:6c:
1b:d8:4e:dd:37:29:be:97:60:fd:5a:a9:b8:f4:c1:5d:19:c3:
b3:e2:15:c9:c7:be:90:b2:13:7e:86:5d:08:52:5f:f8:af:4b:
5b:bf:2e:a0:5c:ae:8b:2a:da:f8:95:61:a7:79:39:80:d7:9b:
8e:98:3f:37:9a:42:7e:ad:de:ca:ee:8e:19:93:b6:39:94:8e:
05:80:77:8c:6f:9d:3a:d7:b8:d4:0f:fc:7b:78:d2:41:9e:f8:
99:65:5c:fc:94:0c:89:4e:43:3f:2d:86:f4:03:02:3a:5c:6a:
19:28:18:f7:30:42:d4:9c:53:46:e0:b0:66:e1:95:c3:bf:cb:
18:1e:07:85:4f:70:9e:b7:19:af:63:85:02:86:2a:d6:01:78:
ab:2f:47:9f:fa:6c:91:18:a9:2c:5a:60:d2:3c:46:b6:35:f8:
65:07:02:3c:6c:96:4e:b2:54:92:1e:70:10:87:04:8b:43:6a:
9c:95:f8:93:d7:b2:92:00:75:0d:35:f0:10:d5:c0:63:b8:1d:
71:3e:82:8b:7f:2a:af:08:a6:89:c5:f1:29:5d:3b:b9:84:28:
95:f4:50:37:58:7b:75:37:76:23:ce:1a:9b:60:4c:af:d5:35:
37:4a:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:32 2026 by rpki-client