Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: e69h3sCHQ/ywltSFPz//y1oVsmBembdx2IpPUaPKTPw=
Subject key identifier: 81:C3:62:26:96:71:89:56:67:48:16:AB:4E:73:3F:EE:59:E7:62:FD
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019E1D909DF490075B8C3CE9E2B878594E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 19:01:17 +0000
Manifest this update: Tue 12 May 2026 19:01:17 +0000
Manifest next update: Wed 13 May 2026 19:01:17 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: IMwTUKNC68fJVMIEOueJD12TStW8cKn7a2pOu6hcmVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9d:f4:90:07:5b:8c:3c:e9:e2:b8:78:59:4e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: May 12 19:01:17 2026 GMT
Not After : May 13 19:01:17 2026 GMT
Subject: CN=81c3622696718956674816ab4e733fee59e762fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:ae:e4:7c:0a:20:31:12:2f:f1:1a:a6:35:
a0:4f:16:a8:14:e8:f2:86:e7:b9:23:7b:a5:20:90:
60:8e:b9:5b:4b:4a:17:a4:69:a9:1c:26:59:3a:30:
e9:b9:bc:a8:f2:23:2d:9e:9f:d5:b9:06:56:dd:3a:
62:c3:b2:c9:a3:d0:e5:12:db:f1:9d:a8:1c:94:34:
15:3f:74:1b:ec:df:51:e8:60:df:df:53:3b:41:6e:
50:08:8e:d0:2e:02:18:24:c7:e7:d8:64:5f:d5:2a:
5c:8a:0c:47:3f:3d:ba:d9:65:c9:2f:5a:a4:70:e0:
81:68:c7:2d:45:9c:2c:30:e7:00:6c:d4:f8:73:a3:
be:48:22:3e:ba:72:a7:7c:4b:a6:4b:db:84:6e:82:
8c:1a:a4:f6:49:da:aa:5b:6f:50:05:cb:81:37:71:
2e:e9:82:7e:01:8b:01:d8:1c:96:55:9a:6e:01:e1:
45:74:00:99:c4:b7:de:23:12:ac:58:c3:c1:b4:22:
d6:70:85:f2:c1:1c:02:66:c1:cf:ff:bc:30:7a:5f:
7e:89:aa:92:3f:3d:4d:de:ad:8e:46:7e:c9:b3:b9:
a6:52:f8:0c:19:f9:d8:4a:d6:bf:a9:3b:5e:62:92:
6a:ae:33:73:64:e5:11:8c:ad:19:24:51:90:b6:b9:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C3:62:26:96:71:89:56:67:48:16:AB:4E:73:3F:EE:59:E7:62:FD
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:94:91:31:4c:2e:90:37:df:a8:48:b1:78:83:7f:32:fd:ae:
b2:96:56:44:18:72:6c:8d:d3:08:38:04:37:e7:2e:74:23:44:
b4:02:66:c1:36:08:c2:cc:ca:a1:3e:34:77:dc:36:b3:d1:8b:
b5:90:5a:03:4d:db:2d:79:19:c2:45:f7:04:74:93:07:98:43:
1c:e0:ba:94:df:f7:ca:7c:0b:19:5e:73:a9:af:16:3f:c0:49:
e8:c2:ac:7b:82:f1:ba:9d:7f:fb:30:e7:3d:41:4d:5b:00:99:
b4:ea:22:b5:30:10:a6:37:d3:fd:a5:59:fc:a5:80:c0:f2:45:
c1:5c:d5:7b:46:88:65:42:b0:07:0a:5b:1d:10:ec:01:29:17:
d0:7a:76:57:45:34:70:85:e8:ac:62:3a:b9:2a:1d:9d:34:1e:
8a:d1:2b:99:fc:c5:6b:69:42:23:df:e2:9a:cf:fd:4e:a0:44:
8c:ad:b0:c1:9a:4b:2c:07:b1:38:03:b6:7c:16:9e:06:f1:01:
94:bf:41:2a:e4:2b:55:79:2f:f0:88:5c:30:de:a6:36:da:5c:
ab:ce:79:ec:8c:e1:8b:b1:b4:1a:48:ac:a6:34:90:e5:66:71:
1e:87:dd:70:d8:75:c0:5b:59:5a:86:9b:06:a1:62:05:51:9c:
5d:60:45:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:58 2026 by rpki-client