Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: OTzmDGTv/UQO22f//4+KRjm2NWJuGmUqegG8qbzsBG4=
Subject key identifier: 1A:5C:7A:53:36:DF:54:CE:60:48:7A:69:88:A2:13:CB:58:A4:A6:3A
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 019E1E36055414A58B490624CE4754F4CF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 22:01:57 +0000
Manifest this update: Tue 12 May 2026 22:01:57 +0000
Manifest next update: Wed 13 May 2026 22:01:57 +0000
Files and hashes: 1: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: JZbdWGjhLcB86e+gum6tnljJNWjhSAmAfHclX2SovrM=)
2: lBKb95x_7BAv49LYfrO19Hosuas.roa (hash: u8R/9/gVEM8wPOouFpMqLvJteQ0bg4i6gAiI/GzejGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:05:54:14:a5:8b:49:06:24:ce:47:54:f4:cf:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: May 12 22:01:57 2026 GMT
Not After : May 13 22:01:57 2026 GMT
Subject: CN=1a5c7a5336df54ce60487a6988a213cb58a4a63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:21:ed:5f:c1:ca:c3:4e:a6:ba:8b:cc:e7:13:
a8:34:d0:07:aa:b4:dc:ab:68:49:24:be:69:1d:ff:
98:cb:6f:55:a5:e8:95:b6:a8:a6:ea:a3:1b:0d:03:
e5:48:2e:54:40:92:11:81:86:97:bd:87:ba:54:c8:
58:dc:4d:d7:44:25:ed:0b:e3:39:b8:81:2b:6a:d0:
d6:3f:aa:31:d3:51:e2:54:24:95:46:ef:11:9b:74:
21:80:19:cc:41:03:83:ba:17:2c:29:ce:8a:af:46:
f3:21:5f:c4:5a:cf:07:b8:bf:37:60:3c:4d:85:f0:
28:2c:ae:1f:20:01:34:3a:17:a9:c0:75:8b:03:18:
16:78:77:13:11:ef:78:3b:92:f7:3e:e0:e9:d5:0a:
07:fa:29:e2:e9:6e:6c:5b:06:24:45:e2:2b:ed:40:
d6:66:44:fa:2f:e5:b1:14:2d:a6:6c:32:e8:63:94:
c1:8e:5f:22:a5:30:64:1d:8a:d8:e1:1b:0f:1c:48:
4a:56:a9:87:26:24:7e:71:9c:c8:e5:93:72:da:30:
27:ae:91:ad:6d:60:7b:62:a6:58:86:8a:a2:02:63:
37:f4:92:d5:2e:86:91:cb:69:e9:93:72:91:65:3c:
5e:18:54:1d:31:a3:90:70:49:55:cb:de:49:d5:65:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5C:7A:53:36:DF:54:CE:60:48:7A:69:88:A2:13:CB:58:A4:A6:3A
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d0:ad:2f:30:f2:58:75:95:1b:b2:2d:48:38:29:e1:9e:ee:
1a:ed:25:c5:2e:ec:ab:8b:3e:22:87:cb:2b:19:97:f8:58:ea:
f5:92:8a:f1:a4:93:95:93:85:96:d2:ea:8c:f3:95:f0:59:3c:
b6:a4:53:66:14:cf:d6:5e:61:d3:b5:66:f9:fb:f6:54:b3:db:
38:0a:90:6e:ae:2f:e3:c6:ac:9c:2b:b1:34:ab:4b:2b:42:4c:
9f:1d:63:77:ff:ab:18:17:42:4d:f6:60:6b:08:1d:8c:28:ab:
e4:35:7a:b4:6c:82:33:9e:60:3f:7a:a0:52:ab:e3:ec:57:6b:
d6:7b:86:eb:30:98:59:41:61:5d:2d:81:30:86:92:18:f7:bc:
3f:6c:77:80:41:71:cf:e7:a6:b1:70:a9:fd:4b:23:ad:f1:dc:
5f:65:d9:d1:26:1d:fe:56:ce:92:ac:8f:e7:48:61:d5:a1:16:
56:81:b9:a5:b7:f8:ba:04:97:0f:40:d0:aa:f2:63:53:11:aa:
0d:7a:c0:f2:85:2d:98:0c:60:cd:c9:ac:fe:90:11:a7:20:da:
0c:2b:3e:aa:27:b0:9a:a4:59:49:c1:e9:ba:b8:ef:2b:63:4c:
56:db:18:8d:29:b1:f0:59:1d:de:af:4e:db:5b:23:a3:a5:67:
d2:48:17:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:23 2026 by rpki-client