Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: hnDP8HbjyF146452sZNVPTHoneqKXJp1Fg8jF8lpYAQ=
Subject key identifier: B2:76:81:77:00:5C:08:D3:3B:CD:95:6C:42:7C:75:2A:97:85:90:61
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019E1F110AB6D4F807E7ABD523B82334160B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 12AD
Signing time: Wed 13 May 2026 02:01:11 +0000
Manifest this update: Wed 13 May 2026 02:01:11 +0000
Manifest next update: Thu 14 May 2026 02:01:11 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: PrquHymgvnulRnvqf2Z5Dp0Ve/R8bNhtLhbYqdgPVCc=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:0a:b6:d4:f8:07:e7:ab:d5:23:b8:23:34:16:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: May 13 02:01:11 2026 GMT
Not After : May 14 02:01:11 2026 GMT
Subject: CN=b2768177005c08d33bcd956c427c752a97859061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:22:27:54:0a:38:d6:da:46:b4:d1:32:2d:
03:c6:81:dd:e5:f6:69:3a:6c:0e:e4:53:bb:68:ea:
31:b1:0f:0a:f2:6a:d7:0a:1e:69:df:ed:ae:34:c8:
44:82:25:bb:f9:ce:19:49:3f:39:00:d3:63:1c:34:
93:78:a0:97:e7:07:82:23:f2:7f:4b:25:18:88:96:
61:63:c7:7d:e1:ea:ea:c9:cb:7c:57:fe:7e:94:52:
82:bb:d6:be:48:66:89:11:c8:22:00:a8:85:23:25:
24:9f:91:02:61:cc:d2:af:97:08:a2:bd:21:52:b5:
73:df:2a:59:cc:57:80:9e:1a:02:7f:37:d7:b5:e9:
2f:a3:c9:17:bb:4c:f2:46:8a:a2:1e:40:9b:98:54:
b6:73:5d:4a:e9:ce:cd:3d:05:f7:a8:25:f1:de:62:
bf:ad:53:97:24:9d:a5:d0:d8:7d:ff:0e:3f:35:37:
33:db:c4:d7:3a:54:c2:57:c9:6f:85:4f:a7:ec:59:
29:cd:0d:a7:7e:08:42:66:47:9c:99:fa:ab:12:a0:
17:9c:d9:4f:da:76:9b:fb:d1:7b:c1:43:bf:f1:7d:
15:51:73:5d:fb:31:1e:4e:f9:1e:80:2d:a4:ab:2e:
12:ad:d7:7b:56:e7:2e:ad:38:03:5e:7c:96:4e:a0:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:81:77:00:5C:08:D3:3B:CD:95:6C:42:7C:75:2A:97:85:90:61
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:86:ab:6b:6c:de:3a:f1:62:18:68:da:44:3f:97:22:f8:56:
01:4f:86:94:2c:6a:15:3d:a2:a8:81:e0:86:e9:47:95:e1:78:
05:51:57:45:c3:3d:a3:bd:e1:47:2f:1b:d6:45:9c:c4:7c:9f:
71:6e:78:c9:5a:03:7e:4e:7e:c9:8f:52:c8:d7:c3:b8:02:8d:
51:c1:e7:88:fb:ed:18:94:f7:e5:d5:f2:d2:4e:cf:d4:08:23:
de:1b:56:51:7f:be:3a:0d:08:f4:a6:ac:9f:f5:60:af:ad:43:
00:64:94:61:db:a7:0e:53:52:86:a0:f1:72:25:70:fe:ea:ed:
b9:90:49:96:f3:81:3e:61:ab:b7:e1:cb:88:9f:e2:9b:fc:45:
ec:bb:27:9b:3e:8f:18:8c:64:4d:12:24:a0:aa:20:b7:42:9b:
12:57:25:0e:6c:ac:b1:33:ca:92:52:ef:cc:36:43:df:f1:b9:
68:2d:11:ba:35:fe:3d:e4:d2:33:de:d7:77:af:ea:28:c1:65:
c9:6d:07:7e:d1:91:b8:09:99:82:27:c8:0a:72:10:14:6b:d5:
7c:4a:71:d1:c5:73:3d:e1:2e:cd:77:fd:91:86:b0:32:c4:2f:
92:4d:d4:ac:65:9c:52:ce:b0:5f:21:a5:58:98:0d:79:f7:cb:
7e:c4:24:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:45:09 2026 by rpki-client