Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: oI2f7SM4Nv/W7P4ihtalYKpGrlnHzh8OdIF89q5ZG8M=
Subject key identifier: 97:43:DC:A0:A0:3B:D0:84:01:66:FD:85:21:F3:F4:67:16:12:1C:39
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 019E1BD94CF888C2FAD21C28255F1D9D8AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 08E6
Signing time: Tue 12 May 2026 11:01:26 +0000
Manifest this update: Tue 12 May 2026 11:01:26 +0000
Manifest next update: Wed 13 May 2026 11:01:26 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: oKeEIc54UguLYpoW4eg8Rg+VDwkrsNRUFn9AAh7yPDQ=)
2: rMIMTjbHaNV7xR9gPtw0A_pkuLU.roa (hash: NFH0+DidyU00k9B3v8wVAxHBrFD7dy/UWv2YYeeqFAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:4c:f8:88:c2:fa:d2:1c:28:25:5f:1d:9d:8a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: May 12 11:01:26 2026 GMT
Not After : May 13 11:01:26 2026 GMT
Subject: CN=9743dca0a03bd0840166fd8521f3f46716121c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:8a:00:82:25:ee:8a:1e:1f:0c:12:d9:9d:
30:94:2b:d0:92:e9:7d:39:4d:7d:1f:4a:c8:35:ba:
49:c2:07:6c:f1:bc:4d:f1:31:22:4d:f6:40:48:b0:
6d:15:2f:1f:9e:4e:2e:40:e7:da:42:8a:1c:e2:93:
40:8e:da:c6:70:f3:fe:37:88:32:94:5f:68:df:bc:
8a:90:19:29:a3:2f:ba:92:95:4a:fb:0d:14:c4:cf:
e6:f5:fa:e9:31:43:68:92:79:ad:e8:04:52:ce:5d:
af:d3:89:fd:b7:b0:45:00:ba:77:f1:2f:a4:dc:2f:
b2:40:fd:2f:ee:b0:a4:2c:77:9c:6e:bb:02:7e:a8:
5a:a6:81:55:4f:ed:ee:b1:9d:3c:49:48:68:de:89:
65:24:b2:df:84:b8:23:c1:ae:37:b7:e3:31:f9:2b:
b5:64:dc:48:9e:b8:87:43:c0:cd:6c:54:81:57:f3:
83:69:fb:ee:4a:e6:cf:5b:42:6a:25:e7:75:74:bd:
cb:ed:fe:39:9b:d5:a8:2a:c9:b4:b8:0e:a6:93:7b:
95:f2:22:1d:c5:9b:70:95:89:9a:4c:01:1a:82:3b:
73:14:96:b8:d8:41:22:44:07:54:5c:c7:1c:4b:b9:
5a:ec:6f:8b:60:ea:0a:38:bd:4e:e5:4f:a9:2d:b1:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:43:DC:A0:A0:3B:D0:84:01:66:FD:85:21:F3:F4:67:16:12:1C:39
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:be:42:fd:e5:0b:3b:11:be:8e:85:9f:68:e1:87:e3:b6:cb:
2c:7f:b2:c5:9a:44:11:f1:1c:53:01:5c:2e:61:d6:82:85:06:
56:14:71:63:10:79:cb:42:09:b6:bf:0a:a7:b2:1f:5d:0c:0a:
6f:a3:ba:ea:b7:41:37:26:66:5d:ab:7a:0d:76:66:8e:33:5c:
86:d9:60:6f:b9:96:45:88:08:be:61:20:c2:a7:fd:e3:b6:28:
e5:96:65:6e:6a:f6:fe:f3:3b:22:99:b9:8e:0c:d5:33:14:8c:
b9:9e:06:d1:c7:64:1a:bc:90:c2:99:17:6d:59:ba:0b:8f:e7:
f8:69:8d:ff:01:61:d0:26:1c:89:16:12:03:16:14:52:dd:1f:
ca:6b:0c:16:52:40:32:41:10:ae:19:01:66:73:33:29:54:d2:
63:3b:db:fa:83:f0:d7:2c:4f:ad:c5:44:1f:85:e5:1b:8b:13:
bf:e3:45:f3:ec:fb:18:12:c9:92:cd:4f:50:e4:b2:60:0c:85:
47:61:d7:9e:f6:14:19:3e:99:7b:1a:ec:c9:1c:86:8c:ec:11:
9a:0c:cd:be:de:52:7d:21:96:bf:83:ea:58:2c:1c:af:0b:e8:
76:97:8f:db:be:b2:f2:ec:dc:2e:89:15:3e:9e:b9:4b:76:48:
22:8e:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:21 2026 by rpki-client