Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.mft (raw, json)
Hash identifier: vpZEKJku3HSo6D7ydC1ziDXfJUtlPuobF0UntNeakUc=
Subject key identifier: 13:DC:D3:19:FC:65:C0:69:0C:81:CC:9C:FB:B6:D6:1C:FB:8D:70:AD
Authority key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Certificate issuer: /CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Certificate serial: 019E1C7D6162A9A45ADB70C501D85E943DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
Manifest number: 0267
Signing time: Tue 12 May 2026 14:00:39 +0000
Manifest this update: Tue 12 May 2026 14:00:39 +0000
Manifest next update: Wed 13 May 2026 14:00:39 +0000
Files and hashes: 1: 1s78oMbNlHbTMBVgOHLSYb8rNTY.crl (hash: aru0h/iSp+Iq94FrfWiLMdQD/KvHAApD8HI9orpfODQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:61:62:a9:a4:5a:db:70:c5:01:d8:5e:94:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Validity
Not Before: May 12 14:00:39 2026 GMT
Not After : May 13 14:00:39 2026 GMT
Subject: CN=13dcd319fc65c0690c81cc9cfbb6d61cfb8d70ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:47:6a:05:45:e1:9d:67:e8:de:6b:f8:df:
52:a2:1b:a8:f1:45:70:29:51:94:0e:93:01:3b:48:
6c:8f:8b:9c:13:04:1f:dc:46:47:4c:20:5b:8f:e0:
cb:7e:55:51:61:89:bd:90:10:a3:d6:a3:9a:bc:b5:
fb:02:5b:34:61:fb:0b:7f:3c:99:c3:03:ff:cc:eb:
14:32:46:66:45:b5:09:35:2d:04:95:6c:bd:83:1e:
30:3f:41:72:ab:2a:18:bd:6f:51:e1:5b:88:82:4f:
c3:24:ff:8b:c7:9e:9f:50:2c:f2:7c:7b:ea:3d:ee:
a9:df:08:3e:f8:33:4c:2f:30:2f:cf:25:bc:70:08:
11:ca:7e:d0:d2:9a:99:86:95:43:f1:b8:58:56:c7:
3e:b3:fe:6f:7f:da:95:81:a8:6e:e2:7a:6a:e4:7e:
33:22:2a:4f:0a:07:b1:6c:26:37:fc:82:2e:03:33:
81:ea:03:ea:a5:53:42:04:e6:2d:e6:67:05:f2:70:
a1:67:cd:c7:12:ff:ef:d9:df:f7:8b:af:60:e4:69:
aa:6d:ee:e8:36:bb:cb:bf:81:6c:05:d3:9d:7f:b8:
75:e9:ea:6d:bf:ce:8a:3f:26:d0:9e:55:38:ba:2c:
5a:b2:44:88:33:ce:1b:0f:92:87:4a:bf:3b:8b:bf:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DC:D3:19:FC:65:C0:69:0C:81:CC:9C:FB:B6:D6:1C:FB:8D:70:AD
X509v3 Authority Key Identifier:
keyid:D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bd:0c:7a:ae:4c:55:6d:1f:13:d2:21:f3:36:25:85:c6:66:
ce:bc:36:c9:ed:eb:d3:90:c6:03:68:35:c6:0d:fe:9e:82:ef:
fc:2f:63:e1:bc:b6:be:0c:78:c2:b8:2f:d6:1c:75:ad:29:f1:
82:68:4a:51:af:19:78:7c:44:41:5c:1b:96:b5:88:36:59:ce:
49:e1:7d:6f:73:50:3c:1b:19:b7:81:e5:ac:b2:07:c0:95:b8:
f1:b8:cd:31:21:a4:c7:60:67:8f:c7:9e:5b:17:c3:e2:1f:43:
96:d6:9b:19:02:c7:01:52:e6:a2:d7:1d:de:6a:c2:56:cc:65:
e4:74:da:00:60:45:23:9a:1e:f5:36:42:d1:e2:8e:ed:3d:91:
aa:73:e7:39:7c:46:aa:c0:bc:ce:28:12:d3:9a:62:e8:f9:ad:
19:95:9f:27:c9:2d:b3:0f:65:c5:0d:69:99:0c:8a:8f:64:6e:
64:80:1a:78:fd:f1:06:af:81:79:24:63:de:14:68:76:c5:9b:
db:33:99:09:71:95:ab:36:31:81:2b:a2:90:9e:89:92:76:47:
be:f0:5b:28:6f:05:8a:02:cc:07:86:08:1d:6f:90:9b:fc:43:
61:63:18:04:2b:9b:69:c6:a6:30:9f:d5:ff:3b:98:fd:26:ee:
20:37:26:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:48 2026 by rpki-client