Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
File: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft (raw, json)
Hash identifier: i4z2oNrefvqJwP5GM8W5YoSVt6AcJAHbnBf5uvO5wiQ=
Subject key identifier: 1D:EB:CA:F6:CA:68:96:61:FE:94:84:28:C7:C4:6B:33:57:B1:48:6D
Authority key identifier: FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
Certificate issuer: /CN=fab83685739986dcd451448335573014db439a23
Certificate serial: 019E1CEBC47594116E1768968AF3867EEAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
Manifest number: 010F
Signing time: Tue 12 May 2026 16:01:13 +0000
Manifest this update: Tue 12 May 2026 16:01:13 +0000
Manifest next update: Wed 13 May 2026 16:01:13 +0000
Files and hashes: 1: 1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl (hash: NSlF9sv0u3+060HIjpxL7H4uTxsu6VGCbCtWyzbtibU=)
2: nZ2XwNFQLf2h0SLAi5f3Buw9fRw.asa (hash: bF5GVzIJ+Z1iyL4IEN2BL/2vVGouaPZjAaqQawiT1Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c4:75:94:11:6e:17:68:96:8a:f3:86:7e:ea:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab83685739986dcd451448335573014db439a23
Validity
Not Before: May 12 16:01:13 2026 GMT
Not After : May 13 16:01:13 2026 GMT
Subject: CN=1debcaf6ca689661fe948428c7c46b3357b1486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:30:1f:0e:28:45:90:31:0d:83:ce:7a:75:16:
95:af:47:7f:69:42:ff:c7:a3:4d:ff:bf:ba:8f:71:
90:e6:15:9f:69:6a:ac:31:ec:62:96:df:fd:9f:d6:
35:d5:6a:c5:73:6f:16:a6:b9:16:ff:2b:c8:ad:d1:
4e:37:c4:18:c1:50:59:9a:0c:cd:12:52:95:a9:c6:
a5:3e:1b:52:6e:0c:b9:e8:ba:6f:3e:d7:cd:c5:ea:
ae:aa:43:ca:0a:a7:eb:24:0d:7b:06:94:f2:c0:4a:
25:0b:ed:c9:66:1b:8b:83:e6:7d:28:fa:e3:06:ee:
05:8c:e7:29:31:83:86:5a:02:7d:8d:2e:31:ed:67:
b6:9e:a4:ac:8f:04:80:02:ad:c2:1a:0c:79:d0:0d:
c5:9a:37:01:52:b4:5b:64:b1:0d:2c:03:15:bb:c5:
82:a8:00:93:de:b3:16:02:04:e7:19:59:f5:f8:9b:
df:b6:31:ec:d1:2f:93:c0:2a:ed:39:7f:64:71:bb:
0a:88:83:d1:04:fa:8b:bd:01:2c:aa:1e:54:b5:41:
76:73:f8:ba:d7:d9:70:aa:87:f7:4b:0c:c1:2f:e5:
05:ba:6c:44:47:de:7f:e5:5f:f0:c8:ef:85:6e:03:
b4:27:d2:b6:c7:c4:9b:bb:1a:13:61:c0:2d:1f:24:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EB:CA:F6:CA:68:96:61:FE:94:84:28:C7:C4:6B:33:57:B1:48:6D
X509v3 Authority Key Identifier:
keyid:FA:B8:36:85:73:99:86:DC:D4:51:44:83:35:57:30:14:DB:43:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/66c029-68de-4334-b92c-5e17a62231b5/1/1-rg2hXOZhtzUUUSDNVcwFNtDmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4d:34:e3:cb:a4:e0:4d:de:67:71:84:13:0d:1d:64:2c:89:
80:0e:37:e8:92:b8:e3:77:bf:24:5c:5a:91:c7:31:6b:93:ff:
f0:ff:d7:78:cc:42:1c:52:be:f3:5e:4c:2e:87:95:b8:c0:41:
b3:1e:6a:24:25:3c:cc:95:15:4a:9b:8f:65:34:84:17:de:52:
e3:90:99:8b:33:54:d3:6f:35:b9:40:1a:4c:fc:ed:b2:3f:65:
d2:e6:85:8b:56:7d:7d:44:9b:c7:e5:37:af:41:9b:50:fb:7d:
11:0f:43:ba:39:5a:0c:11:26:9e:5e:cd:16:72:3b:25:8b:3f:
61:de:2f:19:9e:c5:83:cc:91:67:f6:3b:17:d7:90:f2:95:12:
3c:06:e2:b3:31:d2:46:30:d0:46:f3:9e:00:37:1d:14:02:8c:
d9:78:f4:99:aa:36:c8:1f:b7:cb:26:a3:5c:6f:71:ff:c6:bf:
32:fa:77:00:7a:25:e9:21:e5:18:82:78:b5:ce:44:e6:68:59:
78:c4:8b:b3:69:43:11:a5:2a:c9:36:5d:a3:c0:0e:c7:dd:3f:
0d:72:8c:d0:bc:18:91:1c:63:d3:02:81:7f:ee:59:22:11:22:
e2:7b:58:81:f7:0a:c1:1f:3b:a5:db:a2:40:4b:e4:53:69:f8:
43:31:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:34:43 2026 by rpki-client