Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
File: 1BcD2zAgzB7y_XEJGkaPSmScI48.mft (raw, json)
Hash identifier: DUuwJdmqZ5zQu6L2N1k9v/J3LXistae0KZILrA9cYN4=
Subject key identifier: EE:5B:3D:45:87:98:27:FE:A9:CA:B0:92:3D:17:91:5A:D6:ED:33:EF
Authority key identifier: D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
Certificate issuer: /CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Certificate serial: 019E1E358594F141E3FCE377F24B7B1561F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
Manifest number: 1920
Signing time: Tue 12 May 2026 22:01:24 +0000
Manifest this update: Tue 12 May 2026 22:01:24 +0000
Manifest next update: Wed 13 May 2026 22:01:24 +0000
Files and hashes: 1: 1BcD2zAgzB7y_XEJGkaPSmScI48.crl (hash: Q/ZOozzbJFPiJ28VznVuM5YXmn1IuekHiiGnX2qepfg=)
2: g0_grii_J8fjSLB36dejSo-dFUU.roa (hash: XQEngrLb6NuZE6JtmG7FzYD6Iozx+z9caV3IkC2js0w=)
3: mjCkDc_goLItqwLjBQWXD9IpNSI.roa (hash: FC0jN/3qdUHziMgksh5FjASN2bhckVnKX7P7UBiZNIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:85:94:f1:41:e3:fc:e3:77:f2:4b:7b:15:61:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41703db3020cc1ef2fd71091a468f4a649c238f
Validity
Not Before: May 12 22:01:24 2026 GMT
Not After : May 13 22:01:24 2026 GMT
Subject: CN=ee5b3d45879827fea9cab0923d17915ad6ed33ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:92:e7:e1:62:5f:12:95:51:b4:88:6a:db:
d8:bc:0c:8e:b1:95:0c:ee:a7:43:b2:4b:6c:03:3a:
91:ab:99:73:1c:4a:a7:c7:cf:35:d6:1d:06:4d:2b:
c5:19:0d:ae:84:f7:9f:35:c3:c0:55:0e:b1:c6:2c:
6e:aa:01:d4:44:46:c2:fc:ee:88:a8:99:3a:3f:38:
d7:de:e5:e8:66:40:69:0b:a0:91:7c:0f:ac:98:f1:
1b:65:84:d4:ff:e3:33:38:0f:70:f3:12:ea:a3:53:
59:1a:d7:90:b7:46:64:c9:d9:4b:f1:3d:90:d8:4b:
b3:30:82:dc:3b:76:24:35:bb:5a:2b:7c:ac:f2:5b:
53:e4:64:a4:e7:79:51:e5:15:dd:af:b0:d4:9d:7b:
c6:f8:ef:48:48:22:ed:82:3f:90:22:20:81:77:b1:
45:08:fd:da:80:ea:9a:21:58:02:03:c7:3c:7d:06:
be:a6:3d:5f:24:64:15:b2:79:1c:26:2a:cf:c2:92:
23:30:8e:07:b7:27:e8:c8:4a:6b:78:37:97:a1:ce:
fc:64:2f:bd:e9:54:a9:46:c3:57:8e:27:77:b1:21:
bd:ef:7b:44:b5:c6:97:eb:ae:65:82:8d:09:a2:34:
63:01:6e:cf:5f:81:fa:e7:f5:4e:0d:63:d2:50:af:
6f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5B:3D:45:87:98:27:FE:A9:CA:B0:92:3D:17:91:5A:D6:ED:33:EF
X509v3 Authority Key Identifier:
keyid:D4:17:03:DB:30:20:CC:1E:F2:FD:71:09:1A:46:8F:4A:64:9C:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BcD2zAgzB7y_XEJGkaPSmScI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/68554b-4f97-406c-90a6-48d31c75f31e/1/1BcD2zAgzB7y_XEJGkaPSmScI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cd:40:a7:12:88:69:74:8f:c0:bf:fd:59:f4:b8:42:94:e9:
07:68:ac:21:ce:29:dc:26:72:28:59:83:69:9d:eb:4d:b5:f6:
0e:3e:a5:d8:ef:97:b0:54:c0:8f:9b:99:3a:64:7f:03:81:77:
dd:13:12:44:47:82:10:85:db:41:90:d1:b3:a3:56:35:97:3a:
59:ed:cd:1f:c8:f3:f5:52:6f:04:af:90:d4:46:e7:01:88:4b:
4b:9d:ff:8b:35:25:0a:df:9b:0d:15:c2:9c:0f:36:9d:6a:74:
30:05:05:85:79:82:b1:f4:15:e7:a5:94:1c:b3:0c:17:d1:49:
83:41:4a:0f:d6:4f:c1:62:1a:ee:d2:99:a7:3a:cc:54:0a:ea:
ab:6d:30:b3:dc:28:fe:2a:2e:9f:fd:5e:0b:f5:97:0f:3f:3f:
a4:cc:4e:c4:72:ea:76:b7:32:80:15:2c:4d:c4:a4:5c:74:9b:
16:03:22:39:d0:0a:df:eb:9f:45:e0:63:39:b1:7e:8f:6a:57:
56:ab:61:bc:97:3f:e0:c6:f2:b0:74:d9:ac:05:80:02:2b:39:
89:4d:5b:20:d1:ba:9a:dd:bf:2a:49:76:60:3d:80:d9:81:00:
ab:b0:6f:33:32:4d:1b:bc:2c:22:0f:8e:c7:95:19:e0:7f:29:
de:10:e7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:01:54 2026 by rpki-client