Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: 9oti0n4w9O3l8UZZMLXMojerKmcdTXCUxbxAZ4E8OGw=
Subject key identifier: C9:FF:FA:1D:5F:4F:87:4F:33:99:07:7B:F4:06:4A:66:38:F9:37:42
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 019E1D593B5EEA7CA2AB54D9A8F07B7FCC93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 0454
Signing time: Tue 12 May 2026 18:00:47 +0000
Manifest this update: Tue 12 May 2026 18:00:47 +0000
Manifest next update: Wed 13 May 2026 18:00:47 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: tzZoIJbtc997eQsOxQ7VVMpupfMegW1RhxRCH3Ba2b8=)
2: yX9ydvOKgI9DtKgtlG1m9Fn2ZI8.roa (hash: qPtAu4bwy3Juh5so6bwqIDZWhOQpRsegMYoucr8NrwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:3b:5e:ea:7c:a2:ab:54:d9:a8:f0:7b:7f:cc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: May 12 18:00:47 2026 GMT
Not After : May 13 18:00:47 2026 GMT
Subject: CN=c9fffa1d5f4f874f3399077bf4064a6638f93742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:1a:80:88:bd:09:84:de:7d:87:0c:d7:cb:
e0:1c:8e:f6:d5:93:cb:d4:a3:1d:af:13:c6:43:b8:
b5:df:bd:48:71:d5:d4:ab:ee:16:fe:a3:73:51:52:
32:69:d4:94:bd:52:36:51:b0:01:53:39:09:7a:23:
80:ea:82:cb:a4:bf:87:fb:7f:81:c9:b1:3b:93:60:
72:0d:d4:da:15:3d:02:df:21:19:85:f3:09:db:3a:
6d:99:00:e0:0e:42:d8:ca:7c:88:3d:3a:73:90:26:
3c:c5:d9:68:3d:fc:e8:3f:00:34:1b:e1:80:d6:02:
bb:8f:51:9d:f4:42:1e:c2:3d:90:fa:2d:7b:56:ed:
13:10:f6:f7:be:18:4f:7e:2a:10:2b:9a:79:92:4b:
a4:bf:da:4a:4d:4c:22:41:48:94:7b:88:75:88:f5:
58:05:e5:da:f5:53:07:39:e8:9a:4c:d7:a1:f2:da:
53:b1:b6:3a:1a:9e:61:d2:4d:ab:00:43:5a:a4:08:
5b:dc:a5:38:7f:aa:07:73:87:bd:1d:d8:81:76:ea:
5a:ba:30:1f:bb:e3:a4:6e:aa:25:60:fd:57:18:4e:
4d:e2:16:f4:80:e1:44:ee:eb:57:8b:be:95:06:19:
71:d4:a1:69:cb:e8:07:4e:04:fe:1e:6b:8c:44:c1:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:FA:1D:5F:4F:87:4F:33:99:07:7B:F4:06:4A:66:38:F9:37:42
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:91:87:1b:07:cd:54:4b:cc:93:af:9d:ad:36:04:6b:32:74:
84:90:a3:78:6d:d6:c1:73:91:18:5a:39:8d:60:29:c5:01:56:
f9:90:c4:97:6a:2b:f2:09:09:f6:0f:35:e4:ce:21:3d:ef:f9:
2c:37:4e:36:57:a8:20:62:a5:59:74:c2:d5:cc:d1:1b:87:a9:
99:cd:d4:a5:17:39:41:a3:67:30:d5:00:6c:e2:29:7a:7c:cb:
f7:8e:2c:60:e3:e0:38:27:0e:b1:f9:bc:ef:f9:f8:cf:1a:f7:
53:03:8e:c9:43:3b:11:f4:52:1e:a3:ad:55:12:74:f1:3d:c7:
1c:d6:cd:6e:10:66:8c:0e:ef:78:85:d5:f2:26:e5:ee:a2:1d:
16:0a:f3:1e:66:ff:91:2e:76:93:0b:59:ed:25:04:78:4e:b4:
3d:44:3f:cf:13:87:2a:fc:49:ef:96:4b:7e:12:64:09:55:2e:
ef:42:1f:f6:59:60:3e:0f:67:96:77:65:ee:fd:a9:1f:bf:26:
16:68:66:a0:55:c5:2a:68:ec:26:1d:07:bb:ab:f0:a0:bc:9f:
63:ce:af:19:3e:af:02:31:f4:2b:5b:b0:67:50:b7:a6:4f:67:
e9:57:53:60:a9:be:76:0b:f0:03:7b:03:37:9a:1c:54:6c:ba:
d9:2f:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:24 2026 by rpki-client