Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
File: 1-EAlIIyFaM6OWN4a59g--NKydCQ.mft (raw, json)
Hash identifier: yxCBX7+d9NxcNqg3WjW8xx6q6zPcWO/FrUyIuS4WLDU=
Subject key identifier: B8:C8:BE:8D:34:7A:75:7F:CE:63:9D:CA:FC:46:F8:3B:FF:CA:98:48
Authority key identifier: F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
Certificate issuer: /CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Certificate serial: 019E1D90AA2F8C787217C8FA727387BD27D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
Manifest number: 016B
Signing time: Tue 12 May 2026 19:01:20 +0000
Manifest this update: Tue 12 May 2026 19:01:20 +0000
Manifest next update: Wed 13 May 2026 19:01:20 +0000
Files and hashes: 1: 1-EAlIIyFaM6OWN4a59g--NKydCQ.crl (hash: 35LqvmwehCgMWuhau9D+JZKaer8QuOR1Iz5+G+nbDo0=)
2: 5nyyp5bJ6BfhfIdrL4euf6g3prs.asa (hash: g/gn9GfPYPRaS6oGfe8vAdejuU161UnFwUAxOE+MHZQ=)
3: BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa (hash: USr7fzmawFWbiL1qC8bzafm2rT8+Rqoc2eBnCHzxDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:aa:2f:8c:78:72:17:c8:fa:72:73:87:bd:27:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Validity
Not Before: May 12 19:01:20 2026 GMT
Not After : May 13 19:01:20 2026 GMT
Subject: CN=b8c8be8d347a757fce639dcafc46f83bffca9848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:00:cc:7b:d9:0f:59:7c:1b:2e:cc:59:20:
cb:82:58:06:6f:9b:08:34:69:18:d8:79:c0:96:d4:
44:7a:dc:0c:77:b6:33:9c:0e:eb:4e:c8:e4:13:f0:
9a:af:fd:71:f4:96:ad:71:1e:67:a3:b6:3c:03:25:
f2:d1:62:c5:b2:0c:b8:c2:44:72:71:3c:ac:7b:de:
43:5d:28:d8:47:2b:be:7a:da:d3:04:b3:27:6c:ef:
00:84:bb:15:08:41:cf:bd:6b:93:b0:2f:86:5b:b8:
f2:2c:02:65:48:ad:e8:3d:79:44:2e:17:7e:35:1d:
55:74:c2:14:9a:66:3a:3f:29:c8:97:aa:8c:1b:ba:
54:27:d9:44:16:97:6b:3c:6f:0a:79:c2:bc:08:94:
8a:4c:28:9f:55:b5:1a:0e:c5:1f:75:d0:fc:94:d1:
b3:1c:71:83:40:3b:fd:4b:eb:7c:f6:c0:e9:e7:60:
27:76:05:f5:87:64:f1:8f:5d:a7:ff:e9:8b:a8:ab:
f2:19:b4:9b:da:bd:a7:ae:03:43:82:ec:6b:8a:6e:
63:d4:db:80:6c:86:dd:aa:5b:9c:4a:77:93:2a:5c:
6c:9e:11:9b:b4:a1:25:b1:36:6c:f4:4a:69:8c:31:
9f:41:80:0d:69:3b:22:e2:89:b7:04:48:c1:e3:4f:
9b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C8:BE:8D:34:7A:75:7F:CE:63:9D:CA:FC:46:F8:3B:FF:CA:98:48
X509v3 Authority Key Identifier:
keyid:F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:68:48:da:e9:bc:9d:54:b4:fe:86:7d:be:0e:e6:19:05:89:
db:51:0e:0f:d6:6c:fb:03:49:11:19:4e:8d:4d:5c:24:8d:f3:
a0:c7:50:00:7c:b9:c6:e5:9e:09:1b:a0:aa:6d:33:f4:d8:c6:
19:d0:82:c3:07:ff:37:cc:57:bb:d3:c0:a2:e3:3a:8f:76:be:
9c:4f:18:79:c2:0c:d9:78:41:15:76:9f:60:be:f7:e7:14:a2:
3f:d0:6b:d1:37:cf:67:ad:c6:06:1d:21:ba:56:1a:1a:92:69:
63:3a:2e:3f:22:66:30:2b:ab:05:c2:2a:ab:fb:ff:70:f7:03:
f8:2d:b5:c3:16:98:b9:d9:d8:f6:9e:e1:a6:5e:aa:fb:b8:05:
07:db:5d:89:5f:58:2b:c5:42:fd:91:65:68:80:65:72:20:bf:
16:e6:dd:47:f8:d4:3f:ce:5a:14:5d:51:b1:95:59:4a:58:59:
c4:9b:40:23:77:1e:12:b0:f1:46:6d:67:84:82:c3:05:41:25:
f3:26:0a:16:b5:e5:5f:a7:9d:6f:20:e8:65:af:3c:24:40:5a:
ad:3b:31:a1:1b:78:c8:c0:8a:2d:a7:eb:a9:d5:19:68:74:30:
36:d4:02:11:2b:54:b9:63:05:e3:59:4c:b2:26:a3:4c:d4:d4:
37:cd:99:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:25 2026 by rpki-client