Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
File: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft (raw, json)
Hash identifier: 8aBgSqYCskAJtu4cE2b6YALtzyB9fZdYd/NBdGFHNb0=
Subject key identifier: C2:9A:E8:F5:A8:95:92:05:41:8C:A3:CF:CB:D6:FF:AD:0E:1E:B2:3C
Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Certificate serial: 019E1C7D88A6C1F130149ABE343C1D73D0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 14:00:49 +0000
Manifest this update: Tue 12 May 2026 14:00:49 +0000
Manifest next update: Wed 13 May 2026 14:00:49 +0000
Files and hashes: 1: 1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl (hash: eDHYygZrjacryiJ2NFBLheKbnM5jxAWtvo2j/VCQO5s=)
2: B3jjvlnWK_ho4oeQ7H-8m6t4uX8.roa (hash: iNRcPuAK86hIo1jsy7oarAHxhqJd5nCDCcCEDbaTlTQ=)
3: IwISPZAq_lfMVYJDL-7wMWue3aU.roa (hash: z6+EXeevPDa78xk3kdWEbfuhp5KcLTsL2G6IDYHQCnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:88:a6:c1:f1:30:14:9a:be:34:3c:1d:73:d0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570
Validity
Not Before: May 12 14:00:49 2026 GMT
Not After : May 13 14:00:49 2026 GMT
Subject: CN=c29ae8f5a8959205418ca3cfcbd6ffad0e1eb23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:65:96:e0:50:64:3c:82:91:c2:70:38:48:04:
90:27:4b:bc:3b:97:9c:8c:32:94:71:7c:4b:7b:74:
42:6f:92:ce:f8:92:ab:1c:85:f8:de:ad:5b:81:cd:
a1:da:10:80:2e:06:62:a0:ce:06:34:b4:81:b3:9e:
aa:b1:cd:39:78:6c:e1:0a:e5:c7:fc:fc:3e:e1:6f:
84:93:91:1f:4d:19:32:b4:85:e6:85:b6:02:ea:4d:
61:73:c7:56:f3:4c:c2:68:ff:b2:c4:4c:ba:68:5a:
e7:16:fd:bd:b9:86:e0:ef:cb:0c:a5:83:59:0b:87:
7d:94:14:d6:a7:50:a2:e1:95:2d:ec:33:06:36:74:
c4:22:a8:0e:9e:38:f1:9f:38:16:5a:ef:b1:c8:67:
91:d4:e4:49:46:42:b5:ee:ab:15:0e:6d:b1:c3:0a:
fc:c4:24:66:d2:fa:51:aa:b2:83:1c:19:f3:e9:da:
eb:01:0c:b2:56:2e:f6:b6:79:7c:4f:bf:42:8b:d7:
ed:97:1b:43:b0:7c:42:53:0f:f8:12:40:22:07:3f:
55:ba:4d:6c:7a:02:c0:28:8a:37:1b:d1:0a:d6:56:
94:c3:b1:cc:cd:ca:51:b5:f7:6d:ba:8f:9b:ee:85:
78:23:7a:4e:d3:64:78:12:88:7e:6d:ee:e9:a2:fe:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9A:E8:F5:A8:95:92:05:41:8C:A3:CF:CB:D6:FF:AD:0E:1E:B2:3C
X509v3 Authority Key Identifier:
keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d8:c4:7c:69:0f:32:fe:8d:24:0f:47:0f:b8:8b:11:e6:23:
06:d3:ae:7b:c4:a9:46:8f:78:ea:d5:70:4c:93:33:75:5e:b7:
56:e6:4c:cc:a9:11:17:85:ee:34:45:da:ff:00:cf:e6:33:f1:
24:55:49:ab:f9:13:e6:54:5c:3f:0b:23:0b:69:dd:7a:8c:07:
82:89:70:c4:ca:dd:4f:e0:16:f9:10:26:c8:8d:0b:54:37:0c:
75:fd:d0:05:96:8c:1c:48:9b:b4:89:87:c8:ff:2f:6a:f3:a5:
7b:1e:65:b4:d4:1c:2c:92:6d:de:08:31:a3:e6:d3:7d:40:08:
19:f3:91:64:52:9d:6e:f8:37:01:70:48:c9:0f:fd:ef:62:1c:
0c:e6:de:a3:9f:f3:e6:91:69:7c:f6:a3:07:d3:45:ec:03:19:
b4:31:8e:3e:90:f0:11:8e:7f:db:1b:1f:a8:11:1c:fe:fb:04:
e3:5d:41:ba:9d:e0:36:88:c2:91:ab:99:64:83:7c:31:53:de:
53:02:b1:4c:d3:ff:a5:51:f9:47:cd:0b:ac:8b:95:fd:ee:e4:
5c:2d:86:43:14:e2:93:71:2e:2c:ed:7e:88:5b:da:9f:ff:60:
0e:d7:75:a4:3d:b8:05:ca:49:d9:46:f4:4a:72:dc:91:3a:e6:
2b:5e:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:30 2026 by rpki-client