Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: yohwXKfYoAMBFtDLF+dEgpSOepoRzVlTKqvo5fTCaGk=
Subject key identifier: D0:87:E7:F9:6D:6C:C9:DB:98:CD:DB:73:40:AA:26:10:D3:F7:C3:EB
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 019E1DC714C75A646845A7B440BF7E195227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0D57
Signing time: Tue 12 May 2026 20:00:46 +0000
Manifest this update: Tue 12 May 2026 20:00:46 +0000
Manifest next update: Wed 13 May 2026 20:00:46 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: oNmyAzqu4kfZrXC9+G4iZyNDyBFRBNnvzAZcq8tHHTQ=)
2: P79D1v19Ian523KEZhSWszXoZD0.roa (hash: XkrTvVGVwlwgPhzg8wu1CLzCIaP1i1FjUsoY2a47FY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:14:c7:5a:64:68:45:a7:b4:40:bf:7e:19:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: May 12 20:00:46 2026 GMT
Not After : May 13 20:00:46 2026 GMT
Subject: CN=d087e7f96d6cc9db98cddb7340aa2610d3f7c3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:0d:90:4a:b7:85:62:b2:9c:e8:70:f6:6b:
0f:d7:73:e9:64:7d:93:82:c3:cf:0b:c2:de:9e:d5:
27:b6:4c:d7:26:9b:04:a7:8d:f6:d6:66:7a:3a:f6:
37:38:f1:51:d3:de:0f:1c:71:11:62:9f:f8:b3:44:
00:2e:1c:b0:2a:6f:95:4e:aa:50:6c:20:a5:80:c4:
90:c0:0c:8d:5d:95:5f:29:99:38:b5:79:35:49:63:
16:84:bc:33:18:bf:ba:a4:55:84:d9:36:25:76:ce:
32:ea:95:8e:8d:85:84:65:06:ed:dc:d7:3a:36:25:
18:e1:08:ec:c0:eb:f8:0f:8d:d2:99:47:fb:ae:d8:
23:0f:67:43:df:01:33:ea:18:a7:bf:cd:47:6a:8d:
57:23:23:aa:07:e9:81:59:88:be:9d:77:9f:58:db:
1c:f9:45:e9:ea:ff:9d:b9:5b:6c:1e:f1:a1:45:fa:
e6:25:2e:37:a2:f3:1f:2c:25:10:13:45:86:b1:c9:
56:42:8a:39:de:3a:5b:8a:1f:85:3f:cc:1c:58:51:
89:4e:f7:a1:a6:a8:55:76:51:09:39:e6:dd:15:c5:
63:94:47:b0:66:d2:3a:f7:be:93:82:3e:4a:95:5c:
1a:5c:1a:8a:1e:19:1c:6c:fa:07:50:11:54:fb:16:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:E7:F9:6D:6C:C9:DB:98:CD:DB:73:40:AA:26:10:D3:F7:C3:EB
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ab:4c:d7:5a:fc:70:1c:be:9a:3b:de:d4:0b:ea:71:00:d6:
46:08:5e:20:ad:63:c6:2e:61:d4:b4:1c:ec:94:b9:5b:50:ff:
9e:41:ec:38:06:8b:47:40:bc:18:10:e0:ca:80:99:82:d6:0e:
0c:bd:16:fc:f4:e5:ad:0d:82:b2:8d:e9:a9:3e:4c:94:78:59:
ce:8b:2b:cb:40:c3:7e:9e:2a:19:f7:98:57:10:0c:5d:e0:3c:
f6:08:b8:1d:34:45:e1:cd:58:be:e3:0e:05:ac:93:b1:a7:02:
d0:03:4a:df:4e:97:11:53:49:45:96:ab:75:5a:07:4f:4c:24:
10:33:a7:ef:fa:3a:23:b0:00:0b:05:59:c3:31:9c:50:e1:73:
85:6b:19:e4:a2:54:1c:9b:21:a2:9c:91:9d:ac:5a:62:35:17:
4b:cf:40:49:f8:34:9c:c8:96:c8:e0:90:3a:23:de:d6:48:76:
62:13:aa:19:47:8e:4a:26:ab:15:45:f2:95:72:ad:97:dc:1b:
93:0f:f9:41:5a:d6:03:36:9e:27:4b:53:a3:fc:2f:66:6b:39:
3d:cd:ca:0a:69:cd:e2:78:3c:81:ba:26:7d:a7:31:89:12:b1:
c9:c2:e4:44:fa:04:00:7c:8a:7e:70:2a:6e:e7:f0:bb:10:a7:
6f:f6:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:30:20 2026 by rpki-client