Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: jNZx9E//776PE9VQZ5wIlIZZWHtCQ7eBrWFSZAfIcX4=
Subject key identifier: 78:C5:DC:78:5F:3B:3F:82:97:86:BD:D8:A4:0B:41:9C:D5:46:F2:0A
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019E2091FEDA040942461479F0BF931B0A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 0750
Signing time: Wed 13 May 2026 09:01:39 +0000
Manifest this update: Wed 13 May 2026 09:01:39 +0000
Manifest next update: Thu 14 May 2026 09:01:39 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: ++5Tuo7R3Jwgr3WNHhNZ+pkOktHKNA+jJzMzQ7oPEvI=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:fe:da:04:09:42:46:14:79:f0:bf:93:1b:0a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: May 13 09:01:39 2026 GMT
Not After : May 14 09:01:39 2026 GMT
Subject: CN=78c5dc785f3b3f829786bdd8a40b419cd546f20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:06:c9:e4:88:34:fd:de:2a:9f:ce:65:bf:
c8:c1:d2:a5:eb:e2:aa:09:02:79:ae:27:25:ee:92:
a3:a5:e1:99:f7:51:8b:1d:58:f1:3e:3e:4b:96:19:
61:ab:1b:fa:00:0b:cd:ed:d5:ea:29:3b:84:bd:73:
4d:09:56:fb:1d:8d:60:87:4a:0e:cb:a5:56:0c:df:
12:2e:40:aa:f4:08:e0:3a:1a:ff:bb:4d:e2:19:92:
03:55:06:4b:19:4e:a9:7b:e7:e0:0f:10:f2:4c:f0:
3d:35:74:23:ab:20:8f:48:97:60:43:e2:fe:f6:d0:
dd:2d:f8:07:c6:79:c5:00:ca:ed:c8:61:48:fd:35:
52:de:9a:88:08:7e:32:b9:04:b1:6f:e9:01:06:8c:
fe:5e:85:ad:f3:0b:cb:be:8e:e3:10:93:8e:79:b7:
a0:f2:8e:0d:d5:0f:0b:6c:7a:75:56:d9:0e:c4:09:
dc:fa:49:cf:88:3f:49:65:0a:29:43:4a:72:06:13:
f8:3e:99:40:57:11:52:03:ea:42:65:1a:af:29:b8:
5f:29:de:e7:e8:2c:e9:17:3f:4a:61:67:c0:84:c9:
21:88:28:55:94:e3:f0:eb:0f:fb:09:df:ed:c2:31:
a2:ed:d4:89:2a:28:2a:b7:86:1a:55:83:9c:bc:ed:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C5:DC:78:5F:3B:3F:82:97:86:BD:D8:A4:0B:41:9C:D5:46:F2:0A
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:53:26:31:e8:a3:4e:df:b7:eb:dc:27:16:af:1b:7e:10:
c7:d8:b1:64:07:de:93:dc:f3:37:90:78:b5:15:96:a2:d6:0b:
57:6b:24:a1:c7:27:43:d7:a6:3e:1c:c5:18:df:a9:5c:42:41:
b5:4f:8d:e7:4f:68:7a:55:92:9d:5b:35:8e:00:07:70:ce:f8:
3a:44:25:44:1d:bc:d7:c5:26:09:14:2f:80:ec:4d:c9:85:58:
92:47:4f:3f:08:f2:32:2d:39:de:ce:c5:ae:1e:ab:df:30:e3:
f5:f3:2d:64:b4:14:bc:46:1a:0c:00:99:7a:ae:2a:de:77:f0:
f9:81:05:bb:3e:d0:b7:b0:b8:23:27:9d:e1:28:dd:db:b5:c8:
da:a0:49:00:45:fd:1e:69:90:ab:e1:00:c2:fd:86:fc:eb:9b:
6e:81:dc:7b:cb:87:1d:8d:47:c1:f7:a3:0d:1b:e5:ce:4a:97:
0f:e7:40:2e:22:c3:4e:70:33:7e:01:c4:f1:b4:d3:cc:de:ea:
2f:64:0a:b8:17:cb:2d:f9:b5:72:f7:65:8f:3c:67:cc:59:9a:
90:65:f1:e1:15:d9:b4:8f:78:a9:5e:29:44:9f:31:73:ca:5b:
22:67:ba:86:e2:06:4c:3c:6f:bc:a7:3e:07:86:17:b4:2c:d8:
83:0e:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:29 2026 by rpki-client