Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: tYyej1QFF5K307fskppxcMvXG2kdFvD1+wsz8RAhFtg=
Subject key identifier: DC:E0:20:3E:44:3B:CB:6E:C5:00:74:A2:D2:C3:CD:B1:6C:EC:CE:3E
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 019E1C4729F9DD90E75514238B98CB772B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 13:01:26 +0000
Manifest this update: Tue 12 May 2026 13:01:26 +0000
Manifest next update: Wed 13 May 2026 13:01:26 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: 8w3myItLm//Z3rdWDYTaTagE6WOgpz9EwATxxPvUFAE=)
2: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (hash: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:29:f9:dd:90:e7:55:14:23:8b:98:cb:77:2b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: May 12 13:01:26 2026 GMT
Not After : May 13 13:01:26 2026 GMT
Subject: CN=dce0203e443bcb6ec50074a2d2c3cdb16cecce3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:5e:f3:79:b8:f6:e2:fa:77:0d:07:9a:5e:
41:5d:27:86:ea:22:19:21:30:16:75:07:29:44:69:
7d:1f:fb:fb:4f:3f:49:63:5f:85:36:9a:68:9b:d4:
fc:61:23:7b:b3:a3:b8:80:bd:f2:9c:91:ca:1e:f8:
cd:16:f0:78:54:ae:e9:ad:41:4a:44:8d:46:66:ff:
57:94:a2:b1:c8:3d:84:d5:54:4a:48:52:a8:1b:74:
02:0c:49:75:7f:d3:57:17:9c:dd:90:ae:a5:29:4b:
2e:3d:42:7f:b3:48:2c:1d:48:7e:d6:13:7e:17:4f:
ff:10:22:01:e4:03:f3:a5:2f:a3:84:79:dc:1c:83:
22:fc:77:45:e6:38:70:ec:19:34:22:88:ae:98:fb:
3f:78:c7:53:a3:6f:4d:d5:4b:25:0a:85:5a:0b:ba:
fe:89:fd:4c:6a:a5:b8:83:fa:50:95:3d:34:27:e0:
5c:27:79:e0:24:53:10:f1:86:35:7b:84:0a:27:16:
29:f6:1e:d0:96:a2:84:a1:3d:96:1b:30:9b:4b:35:
2e:78:13:ab:0a:eb:a1:4b:f8:5c:d4:53:d2:38:a4:
e1:02:b8:52:80:c5:8d:67:ed:2b:bc:32:df:b0:1c:
50:71:92:c7:2f:ea:77:04:35:da:40:79:40:54:59:
f0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E0:20:3E:44:3B:CB:6E:C5:00:74:A2:D2:C3:CD:B1:6C:EC:CE:3E
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8b:fd:f8:0b:9c:5e:35:3e:0a:4a:25:17:44:56:bc:57:26:
53:8e:31:ff:a0:83:c9:80:e5:1c:05:1a:bd:bc:11:e6:57:f3:
18:7c:06:9b:a1:ea:13:77:02:11:64:6c:9a:a3:22:c2:a3:49:
9a:e3:05:87:e7:44:dd:d0:4b:e4:76:ca:38:a3:6e:f3:96:35:
a1:b8:db:6d:ba:6c:13:82:c5:25:2a:7c:52:99:33:33:02:1e:
44:87:b5:0d:64:fd:fa:47:55:70:3d:2e:f6:e2:be:94:bd:23:
bd:7c:ab:cd:9f:05:81:62:a5:2c:85:96:18:67:18:37:62:f2:
af:fd:06:36:d7:2c:46:21:fd:39:bd:88:f6:08:0c:f1:b6:6f:
b9:83:6d:ba:5a:51:c2:5d:04:15:07:42:2b:6e:f4:a3:73:ff:
44:4a:25:38:16:7d:1f:eb:c5:ad:35:54:bb:7c:45:b6:56:db:
77:e2:ae:69:45:f9:c7:1a:2e:bd:f7:ef:4e:fc:17:27:6a:92:
65:9b:73:df:fc:a2:29:40:a0:11:74:6f:26:0c:9c:7a:6b:d1:
da:37:23:ec:24:51:10:9b:97:3a:d1:3b:91:91:b6:36:41:04:
7e:fd:f6:43:74:0b:01:2b:57:08:88:75:1e:48:df:af:cc:7d:
26:7e:24:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:04 2026 by rpki-client