Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: KN68pLM/lknmhElbaZi65Qjwi5lXrjHqNznzhKJASfs=
Subject key identifier: F5:6F:F3:4F:5D:55:BA:77:1A:30:89:2E:2E:6B:F0:E4:1B:FB:16:40
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 019E1BD8A49DF6F5BF2C9862F0876153FE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 11:00:43 +0000
Manifest this update: Tue 12 May 2026 11:00:43 +0000
Manifest next update: Wed 13 May 2026 11:00:43 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: MJjeQobiWE15Ff4et5fXrMbs1LSi50eMLKdWrWZhv/U=)
2: xmPDT0qXzI-WfyPj03f5LiDX-UE.roa (hash: bKQt5YSuFEZd8wxQPDeL7WmtwFEyplerjSwRLOQ9NRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:a4:9d:f6:f5:bf:2c:98:62:f0:87:61:53:fe:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: May 12 11:00:43 2026 GMT
Not After : May 13 11:00:43 2026 GMT
Subject: CN=f56ff34f5d55ba771a30892e2e6bf0e41bfb1640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:2e:8e:04:0d:a3:06:17:0a:f7:d8:66:72:
a0:0d:65:7f:85:3b:18:52:24:c1:0a:48:94:76:76:
44:09:c6:04:d6:a7:89:38:5e:bd:b9:59:44:14:ea:
3e:0d:c9:43:1e:a8:9e:c5:40:df:68:dd:99:3d:2e:
b6:63:3e:48:ff:fb:cf:2f:3a:10:cf:40:4b:ed:bf:
93:2c:f0:fd:95:51:b2:6d:02:15:d9:df:d6:65:9e:
ed:6d:ef:a0:c8:0f:20:08:f4:3e:8f:da:b4:03:f4:
c5:25:f0:15:d5:80:87:a5:55:63:35:0a:1f:25:6f:
4b:08:0b:67:92:b2:ce:83:f8:16:ca:ff:86:e7:cf:
77:d5:83:ec:02:0c:13:c1:dd:f6:b6:58:ff:f7:9f:
ef:cc:45:70:67:b6:f4:fd:3d:cf:7d:9d:02:e6:78:
00:33:e9:5e:14:18:40:32:f8:03:0f:7e:d1:f6:a2:
07:d6:bf:b0:59:a7:bd:ff:ec:b6:06:69:5f:7b:7d:
8e:f2:40:1d:6b:54:a5:c3:11:24:42:0d:93:be:de:
ac:9d:ff:2d:71:f4:b6:ff:d4:c6:8b:a5:e0:df:67:
1b:3a:9b:fd:0f:3d:87:35:91:50:ec:e4:02:e4:a8:
4c:50:7d:bd:b4:97:1a:70:af:34:5a:b2:3d:55:5d:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6F:F3:4F:5D:55:BA:77:1A:30:89:2E:2E:6B:F0:E4:1B:FB:16:40
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:96:53:fc:7c:06:0a:89:fa:cb:c7:bb:5f:a8:08:e0:0c:d1:
b1:f2:35:02:4e:e9:30:ca:8f:0c:6d:cc:ba:02:e3:d5:e0:2f:
8f:ed:f3:cf:14:1c:38:cf:60:64:a3:39:34:ae:17:4f:64:16:
aa:cc:08:79:69:86:d8:1b:ba:2e:6d:77:8a:c7:67:60:7e:d8:
d7:e5:dc:27:fd:8d:98:ed:39:88:b3:c6:71:77:ea:b6:0d:df:
70:23:cb:5e:eb:2d:92:75:71:fb:9d:68:43:5f:3d:3c:dc:38:
89:32:c0:d8:75:b8:62:eb:6b:19:72:d7:c8:96:23:ef:3a:20:
f7:ff:18:f1:e7:b8:0f:4b:99:21:20:0d:76:ec:ab:80:83:79:
f3:11:2d:a2:d4:4b:81:33:fa:e7:60:b1:3f:00:4b:f0:e9:be:
29:c3:47:30:50:98:ea:b3:47:ee:82:f2:ae:88:ce:e9:2c:4c:
ae:3b:f9:bd:ea:0a:b9:8d:b3:ce:d4:bd:ca:00:ab:7d:9a:97:
ba:3a:27:a8:4a:ee:ce:fa:c0:01:23:02:0a:af:b2:3d:e3:8d:
da:3b:77:57:21:7a:10:45:5c:79:aa:83:6a:6a:59:b4:34:31:
9a:ba:4a:fb:6a:44:b1:75:74:01:6f:71:95:0d:f4:8f:e1:99:
cd:60:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:31 2026 by rpki-client