Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File: 1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier: nPxnYz5iMZwnfh/jZb0t3BKkHnH3gYu9a2xG7EW/zjg=
Subject key identifier: 26:2E:25:AC:09:93:1A:28:41:15:77:BE:3A:5A:A8:2F:9D:10:DE:5A
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer: /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial: 019E1D22D5EC7FDCE5366FFF5D53E7F84126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number: 0528
Signing time: Tue 12 May 2026 17:01:22 +0000
Manifest this update: Tue 12 May 2026 17:01:22 +0000
Manifest next update: Wed 13 May 2026 17:01:22 +0000
Files and hashes: 1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: GUKHRu8apVwFDgj5E8DhVDTc5DlAyWnHgWQqcQrMrxw=)
2: irsd6se3UI4Vehs4kcliozefsFU.roa (hash: fTkE3KDW/GsXrLu5wWzp0YdBO44h0Y6GslfTVrGJEkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:d5:ec:7f:dc:e5:36:6f:ff:5d:53:e7:f8:41:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Validity
Not Before: May 12 17:01:22 2026 GMT
Not After : May 13 17:01:22 2026 GMT
Subject: CN=262e25ac09931a28411577be3a5aa82f9d10de5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:bb:c9:fe:fe:fe:ac:88:7c:8b:8b:bb:a0:
f2:5f:21:db:00:85:88:34:8c:61:74:7c:15:cb:8a:
11:e8:81:82:e0:e6:26:cd:18:67:c5:00:5b:a0:3c:
48:78:12:ae:dd:84:0c:09:4f:ae:37:3c:ad:6b:82:
5e:be:81:39:84:16:41:11:7d:1a:c1:89:4e:0e:d5:
f0:62:51:21:40:db:7b:db:32:a8:fb:da:b9:bf:5b:
66:61:61:53:42:10:c8:db:d4:1c:c4:08:ca:4c:0c:
26:4a:aa:15:9d:e6:7c:8e:e5:94:cd:46:91:95:d1:
ab:ca:b4:a4:3c:2b:66:d5:47:cb:9a:31:04:46:b6:
fd:40:f3:dd:8d:81:eb:f6:92:6c:9c:02:b0:c9:35:
76:9b:76:6e:8d:03:53:1f:9a:0e:9b:0b:49:1f:03:
36:43:83:aa:ad:e6:be:3b:de:0d:8f:c9:6b:53:79:
33:ba:2a:53:3b:4c:52:c2:6c:b8:21:5c:66:9f:ee:
fd:57:b0:87:9c:c2:f4:40:0f:a8:16:35:e7:ea:95:
e5:d3:f0:78:bf:f0:60:49:86:b3:4b:22:61:28:c8:
c6:cf:07:91:56:b3:59:8a:ba:8a:df:00:f9:ed:a1:
a2:5c:e5:1c:d8:46:2e:34:31:51:9e:59:03:9e:9f:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:25:AC:09:93:1A:28:41:15:77:BE:3A:5A:A8:2F:9D:10:DE:5A
X509v3 Authority Key Identifier:
keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:69:b6:61:01:bb:6d:9e:27:41:1a:71:1a:5b:e0:c4:07:6c:
09:f9:a6:ab:28:05:e6:91:44:89:b1:4f:ef:7e:f0:70:de:53:
cf:f3:af:6c:b2:87:2a:a5:3b:c0:1f:2f:63:f8:e9:42:b1:1e:
04:ea:11:14:28:1f:f5:66:5b:4c:c3:f1:53:ae:b8:3c:dc:e8:
ae:dc:66:b0:a9:b5:31:ba:aa:38:a4:51:32:ac:04:c2:07:b8:
97:7a:d3:79:ab:b5:e7:91:84:63:9e:75:33:e3:de:44:b8:a7:
f2:6f:2a:de:f2:db:22:d5:97:7c:d8:29:72:12:10:1b:d7:29:
9c:ab:4d:8f:9c:54:27:d2:ed:8f:66:dc:65:d7:59:60:72:52:
86:7a:a1:84:d1:99:74:2d:8c:d2:bf:ae:ae:89:27:02:7e:49:
4e:21:d0:89:27:22:d5:c7:a6:58:5b:28:ab:26:5e:db:ce:7f:
ac:34:42:af:cb:35:b3:e0:08:a0:0b:a2:7c:df:96:05:d5:33:
50:c2:4f:fd:a7:62:7d:c5:cc:e3:1d:26:a2:10:e2:c1:9e:cd:
89:bc:dd:c5:5f:f1:60:1b:8e:5f:53:ed:fc:af:f4:1f:67:3c:
5f:db:bf:ca:81:01:e7:47:54:25:8b:bd:4a:40:03:5f:8f:64:
ed:ff:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:27:20 2026 by rpki-client