Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.mft (raw, json)
Hash identifier: VL/pQgmIOyYdtNvmBIR4dP6jLKMuG86Z1BVvChm782Y=
Subject key identifier: 52:2D:59:EB:98:D7:40:81:D4:37:18:4D:29:F7:3D:CA:4C:7A:2A:A4
Authority key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Certificate issuer: /CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Certificate serial: 019E1E35CE9402E430E2B929F1FD8865013A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
Manifest number: 0955
Signing time: Tue 12 May 2026 22:01:43 +0000
Manifest this update: Tue 12 May 2026 22:01:43 +0000
Manifest next update: Wed 13 May 2026 22:01:43 +0000
Files and hashes: 1: 1Cq3jtp78B2VtZd07TRry_lqJoQ.crl (hash: j/i9QAe+myZrVG0QKkl5iWqFP/hVFFdCQOIitSEhlh8=)
2: 2yhdKHvPD6x57cR2KCiWvDWOuNI.roa (hash: P8G4fD653ANAlH3OwS5YzFRY2dEK5yZI+P33CF+4huY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ce:94:02:e4:30:e2:b9:29:f1:fd:88:65:01:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Validity
Not Before: May 12 22:01:43 2026 GMT
Not After : May 13 22:01:43 2026 GMT
Subject: CN=522d59eb98d74081d437184d29f73dca4c7a2aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a6:fe:78:8e:0b:ca:0d:fb:35:e8:d6:86:0f:
d2:3f:d7:a6:7d:d3:76:ee:68:4f:7e:23:ec:95:76:
77:f3:80:aa:ca:59:74:9c:97:88:c2:39:be:3e:3d:
40:2e:26:72:41:7d:cc:b1:cf:dd:04:ec:e3:0e:65:
0e:f1:9b:d6:d5:c8:ac:44:77:13:99:21:de:7e:ac:
32:3a:98:ab:64:ca:cf:61:1f:d2:bc:9e:c9:6d:18:
82:de:72:ec:30:0c:5f:ae:d5:38:5f:4d:e0:1b:41:
9a:e5:10:2e:40:11:7d:d9:af:4d:3c:0f:6d:44:40:
f2:43:3f:ed:77:f6:9a:10:e4:3e:1c:8c:81:85:47:
81:23:7d:09:df:c9:7a:ca:df:76:37:7e:4f:87:18:
26:11:84:3b:ba:b9:ae:ac:6e:20:44:e4:7e:27:d3:
b8:2c:fb:b9:0a:db:01:25:5b:e6:61:ef:1e:2e:e0:
63:89:72:02:2e:c5:04:72:44:fa:93:4f:5d:c3:d1:
70:dd:ab:ce:ab:fa:2e:d2:f2:46:e0:5b:04:6d:21:
98:07:4d:3b:24:4f:65:7c:db:82:d0:8f:d3:b6:1a:
e8:b4:be:5b:e4:a4:a4:d3:01:12:97:13:97:87:63:
35:0f:3c:f8:5d:2b:4d:88:76:4c:e9:3a:1c:25:dc:
5b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2D:59:EB:98:D7:40:81:D4:37:18:4D:29:F7:3D:CA:4C:7A:2A:A4
X509v3 Authority Key Identifier:
keyid:D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:92:b5:29:06:85:54:f5:6f:c0:8d:f8:28:cf:19:97:88:66:
65:50:75:bf:11:d0:07:f3:b7:4b:c7:de:23:4d:79:b4:f9:6b:
df:10:c5:46:31:8b:e5:4d:a4:cb:d5:8c:31:42:48:0b:11:9e:
6f:81:5c:15:97:54:92:92:ff:92:91:08:7a:28:16:4d:0a:01:
7d:b0:c5:58:51:6e:18:c5:44:5c:66:b0:45:67:dc:32:21:52:
6e:31:ee:12:cb:dd:37:74:ec:3b:5e:72:3e:a5:8b:4e:fd:8b:
3f:c9:5d:25:97:a8:cd:e9:7e:0f:50:6f:10:3e:6f:a7:e1:4a:
f7:32:4f:be:8c:f1:a9:dc:98:1f:88:db:3a:c4:77:35:e7:da:
b3:16:ab:c5:dd:3c:41:5b:6c:7c:8b:7a:4f:d1:89:a5:d2:3d:
00:4a:d0:01:26:e6:ee:d6:08:fc:f6:54:a5:ec:a9:3d:62:9d:
27:ec:ea:80:26:4a:18:e6:20:a2:6a:f2:1b:6c:99:34:bc:10:
45:ec:e9:e1:a8:8f:13:ac:4a:c7:1f:ed:ec:6a:4b:a7:00:95:
04:19:b0:3a:c3:1e:00:c6:aa:59:b7:74:f7:23:0e:6d:11:96:
4e:28:7c:5c:af:e3:16:3b:6b:1d:57:e6:b7:9d:19:61:56:6e:
ba:47:71:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:40:15 2026 by rpki-client