Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: kPhnmiZJEvL2nfGQBapmEIDGWjQUpLCXvUt3+H0B8Cw=
Subject key identifier: 38:F8:73:7D:A8:87:8B:C0:60:5F:AD:C8:1E:5C:73:7B:D1:24:26:CA
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 019E1C7D63245387BDB5540F4EEF91AD6655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 03E7
Signing time: Tue 12 May 2026 14:00:39 +0000
Manifest this update: Tue 12 May 2026 14:00:39 +0000
Manifest next update: Wed 13 May 2026 14:00:39 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: 8uAYcC1uDwWQeGPp4UcQ+cy3Dv83V/Fkczrnw/lSZFg=)
2: 7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa (hash: MCVYToIwnCC1cCLBpzOqMu2Pvd8YhgVDSgwS714t8N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:63:24:53:87:bd:b5:54:0f:4e:ef:91:ad:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: May 12 14:00:39 2026 GMT
Not After : May 13 14:00:39 2026 GMT
Subject: CN=38f8737da8878bc0605fadc81e5c737bd12426ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:af:a2:58:8a:34:21:79:6a:01:42:44:28:0b:
a7:85:9d:c0:f4:6a:16:7a:2f:88:5d:4b:ee:5f:d1:
2b:96:46:79:f7:32:e7:18:21:31:37:5c:fe:87:85:
12:b9:73:34:d4:86:fd:c0:4f:f0:ec:3b:38:50:1d:
b4:c7:97:69:6d:b6:7f:61:82:a7:b9:13:d9:f8:2e:
d2:9b:9f:6d:c4:77:30:54:c6:79:ce:50:97:e3:2f:
22:88:ae:c8:d6:a6:0d:9a:b0:f3:06:10:11:66:89:
6c:35:cd:2f:d1:e3:1d:f4:0b:01:7f:dd:7b:3d:15:
bc:8d:5d:68:67:a6:08:58:e2:1c:5e:b7:3e:b7:db:
33:70:54:93:2f:94:18:dd:92:a1:59:aa:7d:65:06:
9b:93:39:b8:0c:ef:d6:23:5c:4a:d6:71:d4:ca:31:
2c:c8:ac:bb:c9:0e:ff:d6:da:2c:e3:93:e8:f5:1f:
aa:69:30:15:db:bd:4e:c9:77:85:59:84:74:39:31:
fa:f8:88:3d:97:2e:f0:18:8a:3e:8f:aa:a6:8d:6c:
97:08:b0:a9:fd:86:7b:05:a5:56:62:59:89:59:da:
5c:14:08:2f:35:93:1e:97:dc:aa:b7:eb:45:7e:06:
dc:7f:64:87:a2:e0:cb:b0:bc:26:db:ec:f3:4b:a2:
b4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F8:73:7D:A8:87:8B:C0:60:5F:AD:C8:1E:5C:73:7B:D1:24:26:CA
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:22:4f:6f:89:3c:2f:a6:71:98:84:8b:6e:e7:65:c7:a7:3b:
67:c7:31:86:fe:bb:a4:75:de:e8:5a:b2:83:5f:64:e3:0b:cf:
fe:c6:1e:20:b3:4e:13:bc:52:e6:a6:c8:20:49:1b:8c:5c:e0:
2e:85:fc:62:7f:77:ba:74:ce:75:a9:49:fd:97:65:fb:76:23:
bd:2e:0a:c2:4b:ed:59:68:86:6f:75:1a:d1:d5:d9:40:14:bf:
70:f5:9b:63:d5:9b:b7:a9:3c:bb:65:ea:16:eb:7b:d1:a0:49:
1a:42:0f:b7:0a:51:06:a2:28:71:48:5b:30:ae:5f:a4:f9:ec:
47:8c:b1:13:21:6a:aa:7f:8f:22:20:2e:d8:cf:5b:d7:32:bc:
ee:47:ce:20:ca:43:c0:9e:b7:9f:b1:bd:8f:8a:80:2f:52:58:
c9:25:0d:05:1a:57:88:83:3f:6f:8b:d4:81:79:05:30:88:97:
9b:22:ae:69:f1:35:03:8c:91:ce:b3:1b:70:a3:60:98:88:a3:
f8:75:77:2c:ca:97:cc:85:ea:de:53:cb:29:53:e0:79:3f:69:
dc:a5:e1:0c:9e:29:68:44:01:9a:64:6c:a3:c4:df:8c:22:39:
b9:6d:27:b6:b9:50:51:1c:0a:d7:1b:5d:b5:4d:f6:89:cf:a8:
99:30:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:47 2026 by rpki-client