Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: H/2tFK6YdVarv+s/YEZbV3sIazZK8UdxduxEzmEVYt0=
Subject key identifier: 29:A4:65:DF:66:51:78:D4:E0:56:76:51:9D:F9:AE:DE:75:7F:CE:AB
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019E1C7DA76A430206C5CEF23F38754BEA97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 08C5
Signing time: Tue 12 May 2026 14:00:57 +0000
Manifest this update: Tue 12 May 2026 14:00:57 +0000
Manifest next update: Wed 13 May 2026 14:00:57 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: iztn6ec6WOaArfu2MQCAZCqeqUFq9nU43IBf7RCVZBw=)
2: 9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa (hash: Kv7/JJMZellKaJMYAA/q400p0MFHvGxPXd6PvxQ7/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a7:6a:43:02:06:c5:ce:f2:3f:38:75:4b:ea:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: May 12 14:00:57 2026 GMT
Not After : May 13 14:00:57 2026 GMT
Subject: CN=29a465df665178d4e05676519df9aede757fceab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:60:56:9b:bb:b4:89:38:36:68:d5:2a:71:
fe:d8:72:8f:44:97:26:5d:36:d5:9d:ae:83:8f:44:
8c:d0:55:2f:dc:32:6c:54:01:d4:24:69:21:61:55:
be:76:1c:bc:58:7e:ae:f0:f9:25:81:94:f1:05:5a:
e1:8f:94:cd:20:79:44:a2:32:64:15:f4:a3:8f:52:
fd:77:c7:16:37:46:81:81:af:a6:54:22:77:4f:33:
82:1d:74:4a:bc:30:4d:08:ac:d4:c5:d6:95:9d:21:
9f:4a:a5:13:b7:68:42:d4:12:df:58:cc:b8:fc:77:
10:8f:2e:c4:96:9b:8e:5b:82:e8:98:86:89:b3:34:
83:34:61:0f:56:a9:b3:1f:fd:f2:18:b4:2c:e6:6d:
8f:79:67:2e:50:ff:21:e6:a4:f4:a7:7b:81:65:4f:
10:04:a3:60:d7:dd:31:0c:06:ad:bd:8b:04:c4:6d:
76:80:ad:0a:d2:7c:3d:bb:90:ae:67:15:f5:c9:9f:
40:80:6c:8c:e7:21:5d:dc:7c:f5:3f:3c:af:97:04:
2f:e3:1f:e7:39:c5:00:57:56:06:fa:c9:d2:51:ff:
54:08:c9:f9:63:3f:bf:4d:f2:14:5a:5e:f8:28:2d:
48:cb:fd:50:2b:d5:b1:44:0b:e3:78:85:a7:e9:71:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A4:65:DF:66:51:78:D4:E0:56:76:51:9D:F9:AE:DE:75:7F:CE:AB
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c3:e0:09:f6:9c:4a:5a:74:6a:9e:fd:9f:9c:1f:8a:af:64:
9c:8f:c9:de:06:a9:c6:e2:6e:6c:c3:b2:22:15:62:0b:ff:22:
44:35:50:8c:ba:5e:4a:b1:40:de:f7:52:3a:5a:cc:11:cd:cc:
ac:c4:7c:e3:b4:96:f7:c9:09:da:39:d4:6d:de:1f:be:30:e2:
05:e6:ef:f7:4e:e4:0c:46:88:90:7b:50:81:a3:69:12:ec:1c:
78:7e:69:af:85:3a:a9:60:cf:ab:37:c3:a2:dd:ad:68:09:97:
17:59:69:a1:12:24:cd:7c:68:8d:e2:de:5b:05:df:17:c9:7b:
40:db:2f:e9:df:47:65:74:99:6d:ea:fb:3c:cd:6e:f4:13:af:
09:ce:be:9e:9e:d7:5a:62:90:ee:fe:66:81:9d:fb:81:91:c8:
77:be:c2:97:21:36:af:d9:12:81:8d:c2:55:69:2c:53:9a:fd:
27:44:03:74:73:c8:ca:5b:64:34:78:de:e3:3b:bb:c1:c9:4d:
db:c6:b7:72:d8:e9:aa:e5:04:f2:b3:9c:c7:1c:d4:a4:41:e5:
74:65:60:2b:01:f8:b9:90:c8:13:8c:2f:c5:f6:b7:9e:13:65:
37:2d:4c:33:c9:ae:e6:16:b0:32:bd:30:58:d8:c5:aa:2e:5d:
4f:6b:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:42 2026 by rpki-client