Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
File: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft (raw, json)
Hash identifier: EFUFEjgnEEG6Pn80QqfysYhaKUxCECkoxYIDp3cUbMA=
Subject key identifier: 71:64:C3:46:07:0C:36:D2:DE:08:3B:A8:4E:E4:9B:F0:EB:AA:70:6A
Authority key identifier: F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
Certificate issuer: /CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Certificate serial: 019E1BD8C43F59052B6A5FF0012B309075C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
Manifest number: 0107
Signing time: Tue 12 May 2026 11:00:51 +0000
Manifest this update: Tue 12 May 2026 11:00:51 +0000
Manifest next update: Wed 13 May 2026 11:00:51 +0000
Files and hashes: 1: 1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl (hash: WLBqN4tYm6pdkck52DDP+X1BMxzgu9P07KW8TaJxt8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c4:3f:59:05:2b:6a:5f:f0:01:2b:30:90:75:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80dedd8d40dbf23e110540c430d94ec3878963a
Validity
Not Before: May 12 11:00:51 2026 GMT
Not After : May 13 11:00:51 2026 GMT
Subject: CN=7164c346070c36d2de083ba84ee49bf0ebaa706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:21:0e:c8:21:fe:8d:18:9c:a6:58:84:1f:
76:69:07:f3:62:03:79:0f:3d:55:a8:dd:b3:4a:1c:
42:62:82:e2:d8:eb:b3:55:b9:70:5a:e6:de:11:a4:
99:f3:60:8c:64:1d:d4:e5:1c:15:08:83:a4:2d:53:
b9:b8:b4:76:e8:02:11:f2:9f:0c:6b:0f:41:21:9a:
67:73:2c:02:da:2d:5a:d9:d6:e5:14:17:1b:c5:e4:
51:a3:ac:96:bf:43:41:2f:05:d2:c5:20:8d:85:5e:
63:e7:8f:e9:02:b2:c6:92:c1:30:a4:94:65:ae:b2:
d0:85:b7:92:6f:05:e5:96:a6:13:a4:ab:62:70:1a:
dd:f9:24:36:5a:bd:a1:1e:00:b2:78:69:74:32:de:
2f:e7:0e:b6:ea:53:29:97:c4:1b:8e:17:58:b4:20:
83:33:31:73:ab:75:d1:d6:ad:65:a4:ad:6f:5c:9d:
7c:da:f2:b5:3d:74:b4:0f:4f:84:d2:26:04:c1:5a:
21:5e:2d:58:78:a2:5d:cd:ab:3b:d5:de:b3:9f:11:
16:b9:ab:81:75:e6:89:b2:94:bc:75:4c:02:d4:2e:
9e:c0:8e:3a:d9:5a:c1:9c:df:f3:9b:a0:df:3e:b2:
88:f8:b8:f4:05:92:7a:6d:87:f2:1a:26:09:0f:cb:
6c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:64:C3:46:07:0C:36:D2:DE:08:3B:A8:4E:E4:9B:F0:EB:AA:70:6A
X509v3 Authority Key Identifier:
keyid:F8:0D:ED:D8:D4:0D:BF:23:E1:10:54:0C:43:0D:94:EC:38:78:96:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/12b49e-2f2b-45f4-b4e8-3a8ce9eb2aea/1/1-A3t2NQNvyPhEFQMQw2U7Dh4ljo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fe:b8:04:55:4e:f1:fc:60:49:d1:02:bf:3d:f1:08:20:e0:
a0:f9:f1:ae:a1:9a:8a:f1:61:ed:de:08:9f:f7:ef:37:3b:b2:
3e:fb:79:0c:f7:2c:bf:27:b8:a9:7d:0c:85:e0:2c:ae:d8:cd:
2f:3e:d3:c1:3f:38:28:0c:9c:3d:6f:75:34:c2:00:1a:86:fd:
0a:ea:ec:bf:a9:18:2a:38:59:4f:98:aa:d7:ca:31:3e:50:b8:
1e:7a:0c:10:c4:87:2c:44:bf:c8:c3:67:7a:2f:50:29:b3:2f:
73:6b:ac:ec:4e:58:3e:7f:42:c3:2d:84:6e:c5:1b:0a:c6:24:
89:dc:91:29:d9:4b:6a:b1:c8:77:ac:8a:92:58:32:5c:bb:84:
42:e8:2d:bc:00:87:b6:95:8a:a6:70:44:5e:1f:f2:62:8b:e1:
a9:f1:23:dc:91:28:dc:47:13:27:54:6b:7c:55:ab:1f:69:12:
d9:e4:44:b2:d8:ce:be:2c:87:73:62:fc:0a:ae:c6:ff:a1:1f:
1d:80:3b:a4:da:2d:df:df:40:c9:42:ce:1f:80:20:c0:ee:9b:
69:60:2d:84:eb:38:43:ca:59:35:bc:4b:fc:72:9c:dd:19:86:
91:db:25:a5:59:05:55:77:79:5b:c7:8d:b7:79:1c:ec:1b:65:
7c:ce:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:33 2026 by rpki-client