Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: yDxhVWSnVwHYCxKJyrllXpmyowRlVksWrN7gGkto1CY=
Subject key identifier: D7:A4:B3:15:16:01:92:C9:BA:FF:8B:59:FD:CB:F4:C3:3E:BF:1F:0B
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019E1E6C611D7AC25464C2357CE910CA6762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 15A8
Signing time: Tue 12 May 2026 23:01:19 +0000
Manifest this update: Tue 12 May 2026 23:01:19 +0000
Manifest next update: Wed 13 May 2026 23:01:19 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: 3zY/6wEFXOhrP9qJcTeZFlDKUxKzySAtYFErY1usNR4=)
2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=)
3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:61:1d:7a:c2:54:64:c2:35:7c:e9:10:ca:67:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: May 12 23:01:19 2026 GMT
Not After : May 13 23:01:19 2026 GMT
Subject: CN=d7a4b315160192c9baff8b59fdcbf4c33ebf1f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:9a:88:9f:5f:51:9c:86:42:c4:3f:45:07:
fc:fd:bd:95:b3:4e:16:a9:bd:dc:00:3b:f8:2b:ab:
cf:7a:79:3f:c3:ac:44:2a:21:e7:25:2c:da:70:f3:
1a:07:32:33:cb:25:11:ab:5e:bc:c4:f8:07:ab:b8:
64:9e:57:30:cf:58:ba:1c:9e:bf:32:2b:f9:5a:a8:
48:3c:78:40:0e:3e:c0:11:29:23:9e:d2:0f:6f:a4:
67:75:6c:4f:df:39:d8:be:e9:dc:8c:d3:97:d8:0b:
3c:e2:bb:04:ae:f6:a4:c3:11:66:45:91:e1:61:00:
f7:72:f0:00:98:ae:75:dc:07:e4:27:0c:c5:69:f8:
45:ad:38:bf:ef:86:c7:f3:ee:7e:34:65:ef:91:f4:
b4:9b:86:26:5c:2b:15:76:71:33:21:0b:79:b5:61:
e7:c4:48:15:ca:3a:12:29:06:9b:0a:3e:a7:b2:cb:
98:d5:40:2c:f1:64:04:84:fc:e8:4f:73:8c:ff:d7:
00:83:05:56:f1:44:9f:db:5d:79:63:b4:58:a8:ae:
88:ae:e8:b4:a4:e0:00:fc:ad:25:3e:29:40:a1:44:
5e:72:98:ad:9e:ef:4d:2b:88:e6:47:b6:75:ea:a4:
d4:b1:69:0b:dc:be:92:bf:eb:f5:ce:ed:1b:dd:20:
f0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A4:B3:15:16:01:92:C9:BA:FF:8B:59:FD:CB:F4:C3:3E:BF:1F:0B
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a2:f4:08:8e:dc:5e:8e:ca:69:ed:90:4a:f8:48:0d:40:64:
d6:4c:93:80:56:0a:26:1e:54:56:b0:55:59:43:39:cc:c5:02:
9e:bb:83:f7:93:b7:f0:f3:68:cb:89:d0:e9:52:d5:d3:77:f1:
eb:d9:84:ac:c0:53:5e:55:bb:57:58:3a:e8:70:6f:49:3e:dd:
dd:43:bb:cf:3c:eb:20:3b:9b:b7:45:59:35:0b:29:47:03:35:
ac:9e:bd:ec:b4:dc:fe:0c:64:a5:51:95:a2:6c:e4:66:20:be:
3e:8f:95:5d:40:6a:44:70:7a:96:50:e8:20:42:48:25:82:ef:
4f:78:f4:aa:66:e8:4c:b2:e4:d2:c6:bc:0c:94:91:cc:6a:88:
23:73:e0:53:14:a7:e0:ce:2f:1a:6f:84:94:05:be:fd:a5:9b:
4b:cb:72:bb:a4:f9:0b:5a:84:17:75:9f:47:80:e8:1a:54:28:
00:a8:36:c3:b1:37:f4:75:26:8c:62:d6:4f:69:d3:00:4c:99:
36:a8:4a:cd:9e:9a:69:96:35:96:ec:ae:fa:e3:f6:84:61:5c:
ec:19:09:1f:79:be:09:fc:1e:02:23:0f:49:01:30:c5:a4:93:
a4:b2:99:86:cd:3b:3a:2f:8a:3a:14:1d:bd:79:25:df:70:4e:
4f:2d:e0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:35 2026 by rpki-client