Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json)
Hash identifier: SdkWec504GKp9ouGpPNFTMGZEndYKGkMYO7lpGU7BQM=
Subject key identifier: 23:1D:DD:5D:B8:82:6D:3F:E8:B0:06:85:C2:81:21:4B:EE:82:7C:01
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 019E1D23071AC9FA748D6CDA8CBE11CE337E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
Manifest number: 1309
Signing time: Tue 12 May 2026 17:01:35 +0000
Manifest this update: Tue 12 May 2026 17:01:35 +0000
Manifest next update: Wed 13 May 2026 17:01:35 +0000
Files and hashes: 1: 1-earsS0WLz1IJKO-WJXouPRRDc.roa (hash: 0PMS6Wj9PBe3RqKaVauppM1NP8rM+o6ZHX9nxGiIcug=)
2: BQMAZ1-GEH5r12U7WPk6XQ_xa2o.roa (hash: hON2VcGx2tnVP3W4DtWqeENmyb4FIH7O20nZquH7iUI=)
3: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: L6XXcwTYMmdOnZfLFufPF/dS9BqMYA7d+U+bQkBGa8s=)
4: Nffyfowdb4DCXyl-CUibDbck5aw.roa (hash: +korLpH5t+ySKaX06qHUvdV0iVtoQyoQxEXvg5jMwS0=)
5: zYExE-CWB4WrYD1j1mlYKlry5zU.roa (hash: aQw4vgQl/XUfRZ1hivO701ANJNV8KUYzIDEJLZE7u/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:07:1a:c9:fa:74:8d:6c:da:8c:be:11:ce:33:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: May 12 17:01:35 2026 GMT
Not After : May 13 17:01:35 2026 GMT
Subject: CN=231ddd5db8826d3fe8b00685c281214bee827c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:13:80:f3:90:00:7e:f5:ad:67:34:fe:cd:6d:
57:68:39:58:bb:93:c0:cb:28:51:c0:89:a7:44:d4:
88:af:69:dd:b6:47:2d:1a:6d:05:c1:01:72:0e:fc:
a6:6c:04:84:a1:62:f2:a2:4f:c3:ff:2d:9d:d7:34:
60:47:58:47:ce:50:d8:8a:a6:4d:05:de:29:23:14:
f8:4e:68:8e:1b:5f:e6:14:2c:7f:3d:7e:9c:8b:d3:
53:82:91:15:9e:7c:76:02:4f:fa:ad:dd:4e:d6:be:
e0:4f:06:5b:50:b7:ec:c2:5c:fa:e8:2a:3a:45:eb:
10:8f:2f:38:02:0b:86:63:20:57:2b:02:2f:e9:77:
6b:df:76:f8:f8:64:2b:26:94:d3:65:c4:20:36:43:
02:52:3d:67:ef:53:ae:fd:83:89:17:15:12:2e:0e:
23:77:7e:4d:43:27:1c:84:06:56:db:26:d1:49:42:
9d:4e:7b:a1:59:e9:06:6c:94:77:7f:54:51:39:c6:
97:53:0d:e8:32:2c:33:97:ac:e9:88:6e:11:aa:ed:
d0:83:af:49:82:48:33:91:d8:ae:b6:0c:3b:d0:f8:
88:5a:78:d7:79:11:1b:ca:70:95:0f:12:41:d6:32:
27:03:c9:3a:dc:5e:e8:00:8b:d8:b3:28:f9:64:aa:
7a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1D:DD:5D:B8:82:6D:3F:E8:B0:06:85:C2:81:21:4B:EE:82:7C:01
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:93:5d:04:fa:76:36:10:2e:73:42:50:29:5d:29:01:89:7b:
b3:c7:20:d7:9d:31:bd:e1:6a:44:dc:c8:a6:a2:0b:91:64:4f:
69:10:78:63:09:de:67:ff:2a:3d:46:67:43:d6:5f:41:79:18:
4c:a6:4f:b0:01:f4:af:97:9e:48:3c:ca:ba:ce:fd:9a:29:b5:
9c:f8:72:63:dd:b9:65:5a:39:1f:23:c5:b1:2c:66:57:bc:05:
f5:1d:1c:44:3f:01:05:8c:93:1d:7d:8e:ab:3d:9b:99:f4:1a:
9b:63:31:c0:d3:be:10:2c:23:61:83:ef:a9:ed:14:75:7c:d2:
13:3a:be:bb:80:68:8b:bf:67:ea:86:de:61:7b:10:17:29:0f:
1d:f7:6b:80:59:bf:1b:cc:4e:f9:5a:6c:07:7c:24:59:27:16:
18:b5:d2:41:ad:a2:32:3a:a4:19:7e:8f:8b:fb:7d:b4:33:4c:
2f:50:d5:4e:0f:2e:b6:be:ca:9b:c0:ff:f8:d5:51:73:d4:7d:
f9:77:f0:e9:91:c9:ed:49:cc:7f:89:23:d7:77:d8:9a:6a:5c:
d0:78:63:8d:0f:53:36:45:b4:a1:48:17:c9:54:34:8a:40:fe:
e2:a0:71:fe:85:5a:63:b5:02:18:65:b4:ca:15:96:e5:4d:2f:
ef:98:18:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:58 2026 by rpki-client