Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: 6zvMKXncbvdT7jMhvFS7uzBYjSho71rnHBfl51OBHnE=
Subject key identifier: BE:2A:66:A3:9E:85:CB:D7:08:DA:73:47:55:34:69:FC:7F:FA:18:8C
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 019E1E356F2267BFE8FFDC186952ACC93B82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0E11
Signing time: Tue 12 May 2026 22:01:18 +0000
Manifest this update: Tue 12 May 2026 22:01:18 +0000
Manifest next update: Wed 13 May 2026 22:01:18 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: 6upL7UnEuAAOvXlhW4Gs7DQzMfelaFQc8uXQHK17KjI=)
2: LcZ01B8XER2_rfHNBUAgVCnzOW8.roa (hash: 0WZJeMvXyTID6Mtu4m//BfRpROZSkchZp8tEs1f8aqo=)
3: tTSKZ9SBm5TzwVGPFr99l5iaN7Y.roa (hash: 6iyRKX1ykzt8wMyhT1hUZtasJQSEcc9fv+Jwo+YKOD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:6f:22:67:bf:e8:ff:dc:18:69:52:ac:c9:3b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: May 12 22:01:18 2026 GMT
Not After : May 13 22:01:18 2026 GMT
Subject: CN=be2a66a39e85cbd708da7347553469fc7ffa188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8b:08:dd:62:29:61:c5:d1:09:4f:53:bf:9f:
70:65:7d:85:05:29:1d:a3:2c:dc:59:7d:17:55:d6:
77:8d:26:ef:8b:7d:79:5a:cf:b4:d6:29:de:c5:61:
b9:5a:a8:53:bf:9b:15:54:e1:c3:ff:a5:90:1f:fd:
2b:22:f4:ff:ec:b9:01:c3:ba:1b:97:f6:aa:7d:83:
8f:73:e3:c0:48:14:14:10:c1:de:e5:83:d2:2d:87:
ec:15:df:b6:29:25:2e:9b:9b:fb:72:18:7e:3a:17:
d8:58:a6:7e:7e:5c:70:f6:00:3d:84:65:5f:31:b4:
5b:91:19:be:cd:d8:d4:63:cb:35:f6:75:80:ad:fb:
32:d4:fb:8b:c6:2c:36:e2:5c:bf:7a:73:c6:71:d1:
43:71:a6:b7:73:f4:6d:d8:59:c7:fe:20:80:80:de:
99:f4:11:4c:d9:f4:0c:43:be:b5:75:ef:d9:20:a0:
24:b7:fe:ac:a5:45:24:bc:1e:c0:98:22:77:57:5f:
3a:76:94:67:c7:38:a0:e8:71:29:eb:1e:b8:af:82:
d9:c3:5e:56:5d:bc:c9:df:34:25:39:42:20:72:93:
f2:6c:8d:67:c9:5e:e7:8c:49:c1:94:3f:aa:2d:80:
9b:4a:11:9a:e3:52:98:34:a2:8c:0e:9b:dc:c9:b1:
0f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2A:66:A3:9E:85:CB:D7:08:DA:73:47:55:34:69:FC:7F:FA:18:8C
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:8a:4b:f8:03:4f:ca:2e:71:d7:65:99:5e:2d:c5:2b:e5:
1d:ea:f0:b6:30:4d:35:3c:e6:2b:f2:59:0c:58:92:88:9e:e4:
e1:27:a9:b3:05:75:31:ea:21:db:14:f2:85:63:2d:a1:ff:b0:
03:7d:10:09:93:af:fb:3a:24:5f:d6:8f:31:ec:9d:ad:d9:48:
2b:1e:48:79:ba:ea:e9:f9:3b:c9:cd:d1:f1:c9:75:5f:14:e7:
6c:e5:9d:50:0f:7d:d4:e9:86:46:db:a1:29:f6:db:b6:24:3a:
c1:4c:3d:e5:24:a7:e7:01:87:bf:e6:a9:3a:3f:51:f9:72:23:
f8:0a:bd:d1:5b:11:3e:8c:a1:d8:2a:60:51:7f:a8:2e:ec:fc:
5b:78:94:2f:90:6e:de:81:db:7a:8c:4a:72:f0:6a:a6:47:61:
85:49:28:7d:18:39:03:17:e5:42:95:4a:14:cf:01:b5:3a:be:
15:fc:7c:58:d3:5e:a6:cf:d1:8e:dc:59:b6:65:76:e0:85:2d:
a6:8b:ca:10:f3:70:ad:62:d8:8a:18:46:db:a9:33:1f:71:7f:
cc:31:f5:af:79:7d:fa:36:d3:fd:7b:a8:26:95:e4:bd:49:d5:
10:56:5c:4c:77:10:6a:22:b8:67:57:39:fd:e0:f9:88:f3:56:
a7:60:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:22:48 2026 by rpki-client