Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json)
Hash identifier: RnFxyXiIVmegm/lCX18O9TL32EPy8EUT333XKV2cR4A=
Subject key identifier: 1B:4C:BC:56:90:B5:96:D2:9C:38:11:8E:DB:81:11:62:7E:C2:E1:8C
Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24
Certificate serial: 019E1F113C7E586FD769512445FA44F823C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 02:01:23 +0000
Manifest this update: Wed 13 May 2026 02:01:23 +0000
Manifest next update: Thu 14 May 2026 02:01:23 +0000
Files and hashes: 1: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: X1mt0glawI1w7Gfp1KQw2sBuRkzYVFR9C2cQT4525oQ=)
2: TDkaS-JTvMNiWICWG4ymOlGuWbk.roa (hash: rdEwK1puUd5tKIYhWm5xSUw39iHc4PHVAw0g6tLwiHU=)
3: xfHjlvR4GqmLKHrBF2UQj5zlnl4.roa (hash: 8M7wSB8jbbP+DfjlEMm6KSFYNEcYB3CLaxYLFnfuaa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:3c:7e:58:6f:d7:69:51:24:45:fa:44:f8:23:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24
Validity
Not Before: May 13 02:01:23 2026 GMT
Not After : May 14 02:01:23 2026 GMT
Subject: CN=1b4cbc5690b596d29c38118edb8111627ec2e18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:e5:87:83:26:ec:d0:37:89:67:48:47:10:
67:9a:b6:76:9a:89:17:22:43:e4:5b:d6:8a:6b:4d:
24:15:07:0f:89:a2:e4:fe:10:98:72:da:7a:b7:b1:
e9:20:66:bd:a9:d0:17:ec:27:44:27:06:63:39:2e:
b2:4c:03:6a:c9:55:9f:84:84:50:18:cb:de:4e:ed:
60:ef:0d:23:7c:f7:2c:0c:da:4e:b9:67:f3:48:e2:
9c:39:73:1b:b6:63:1c:80:e1:e8:20:e9:9a:b3:82:
49:73:2f:50:29:d5:e7:d6:da:e3:60:fa:d0:0d:14:
46:cb:65:59:13:5d:a7:58:9d:8b:c3:83:52:bf:85:
93:ed:c0:92:29:d0:35:1c:a0:5a:5c:f5:be:1f:67:
51:66:82:c9:55:0c:bd:2b:eb:8c:8e:89:4b:2b:a4:
b9:e9:da:b8:e1:80:af:f8:29:85:7c:21:6e:ba:ff:
12:d0:ff:7a:84:04:dc:a0:59:85:a3:a2:a9:12:48:
b1:6a:40:5a:a0:6d:46:bd:12:3e:62:72:e0:00:e4:
1e:4b:44:0b:3c:5d:1d:c5:05:10:98:9c:b2:00:57:
3b:8f:7c:10:2e:6a:a1:ac:1d:48:69:9c:c3:8b:34:
fe:49:fc:80:36:d9:c2:3c:53:dc:78:8a:4d:62:10:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4C:BC:56:90:B5:96:D2:9C:38:11:8E:DB:81:11:62:7E:C2:E1:8C
X509v3 Authority Key Identifier:
keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e8:dc:bd:3e:ee:68:e1:15:47:bd:68:98:c8:5f:08:3e:cb:
87:3f:5a:8f:6b:0d:24:5d:ee:2b:52:d5:0b:62:57:af:42:5b:
e4:32:a7:c0:8b:42:47:e0:8d:43:b1:bc:fb:98:d9:0f:47:23:
47:16:c8:fe:95:aa:31:1d:e3:06:ee:f7:89:0f:68:aa:fe:00:
86:6f:35:df:1b:2d:2f:a8:33:83:9d:64:1b:85:13:7e:69:eb:
c0:27:5d:27:7f:93:a1:3c:af:06:1d:e2:11:fb:50:c3:c2:6c:
bd:2f:cd:fb:fb:b3:6e:90:7d:14:b5:2d:c2:b8:1e:17:74:f4:
26:1e:d0:6e:22:7d:77:c5:91:b7:d9:1e:d2:9f:22:0e:68:ce:
86:f9:b4:3a:fa:e0:7a:70:47:1c:a2:09:40:0b:db:63:7f:5a:
73:a5:ed:e0:92:fa:1f:17:76:1f:4f:1a:96:45:c1:4a:e2:35:
b8:52:90:6c:86:42:d4:83:39:00:f0:b8:c5:cc:00:95:2e:8f:
4f:8a:1d:c3:c0:e8:af:4f:17:40:0c:f2:ea:cb:5d:6a:92:09:
ec:89:3d:0b:9c:4f:72:ea:26:a6:02:3a:ea:44:91:b8:29:20:
72:89:cd:5a:4e:7d:33:a5:e6:8c:b8:14:d0:cc:43:23:24:ea:
db:0a:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:06:15 2026 by rpki-client