Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: vr65KWvAl9pXudqc9zDAl+CvtzxkUSx6cIHDXOW72rw=
Subject key identifier: F4:FF:D8:60:41:97:B6:5D:07:FF:2E:C6:6B:3A:88:0B:99:4C:95:CD
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019E20C89167F23F9FF5ADAA5B18C7B3D0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 10:01:15 +0000
Manifest this update: Wed 13 May 2026 10:01:15 +0000
Manifest next update: Thu 14 May 2026 10:01:15 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: JiwJmlltpWYjLkwSwqIPkVaRPOy16PmW8irbM2pFmic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:91:67:f2:3f:9f:f5:ad:aa:5b:18:c7:b3:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: May 13 10:01:15 2026 GMT
Not After : May 14 10:01:15 2026 GMT
Subject: CN=f4ffd8604197b65d07ff2ec66b3a880b994c95cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:40:24:30:5e:48:b2:ef:4b:66:c3:ad:90:
58:a1:4d:7c:7e:71:c7:7f:3f:52:89:11:c4:31:4a:
cb:3b:9a:f8:51:a5:32:3a:6a:13:66:f4:32:25:31:
b0:8d:6f:d8:67:64:ca:ce:80:bc:24:d7:24:52:39:
d7:68:8b:5e:c6:8d:87:c9:b8:15:ac:f6:10:6f:42:
45:25:c2:f5:04:4b:b5:ed:84:4b:a9:24:77:e8:d8:
3f:17:98:ba:7b:c6:dd:95:95:94:f8:c0:97:e0:89:
34:e8:d8:2b:cd:de:be:13:6c:95:da:fb:31:35:b6:
5a:b2:3d:f5:66:9d:ad:e0:3e:5d:52:56:19:3c:ad:
07:5c:11:19:96:c9:63:ed:72:b1:ef:43:c5:fb:a1:
69:fc:46:3c:fd:e8:17:d5:e6:7b:35:68:4b:28:85:
9e:7d:53:16:ee:a1:fd:5b:8b:3d:9f:a5:aa:4d:38:
17:94:8e:2e:b2:a7:23:09:6c:b1:b3:f9:01:d2:98:
8e:6a:bc:a0:56:a2:44:35:f8:57:fd:a9:2a:50:56:
36:2a:89:c5:b2:97:51:90:58:01:4a:39:70:07:a8:
85:26:20:67:a5:b8:ab:2e:88:e1:dc:26:0a:98:19:
ec:45:d2:3f:f5:8c:26:1c:e7:e4:7a:1e:51:fd:e3:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:D8:60:41:97:B6:5D:07:FF:2E:C6:6B:3A:88:0B:99:4C:95:CD
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2b:1e:64:a7:4f:1e:cd:b5:f5:0a:f9:7a:a1:49:83:78:9c:
99:4a:1e:5b:ec:d3:f1:82:a1:5c:76:42:62:45:a9:c0:36:cb:
12:05:5a:dc:9b:ad:85:53:de:f4:0e:76:f6:eb:66:c4:5d:5e:
af:c1:8b:60:c6:4f:3f:5a:58:ae:50:06:8e:78:d6:5a:93:49:
4a:ed:e2:6d:d9:17:11:15:68:3f:b9:a5:73:c0:e4:3a:e7:d8:
76:5e:93:6c:12:ed:e6:9b:6d:38:a2:fd:b4:b2:89:c2:ab:c0:
17:14:d5:33:3d:80:8b:c9:42:58:52:ec:51:11:95:03:97:4a:
49:97:0e:22:d9:ea:02:1b:c9:de:37:8f:97:a5:87:42:e1:72:
0a:5d:e1:55:27:07:a1:23:db:74:4d:58:06:d1:fc:c9:4a:70:
84:0d:8a:b7:8e:5c:d4:4f:3d:8f:5e:d8:e1:f7:ca:4b:c9:02:
10:1b:b8:46:04:04:ad:94:11:6b:00:91:e6:15:99:f3:36:c3:
6f:cb:76:b8:53:1b:ca:5b:be:b9:51:4b:46:a9:e7:a7:5e:99:
22:b9:38:78:9b:50:30:eb:99:45:ee:a4:1c:15:da:26:fa:00:
b7:f3:42:2c:1a:6c:a9:5c:2b:7a:16:66:47:5c:9e:e6:93:2c:
d7:33:29:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:31:40 2026 by rpki-client