Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: ADxab4RjoJl1HHUV85UZWAc3hlZvok7ir6+2d56WElw=
Subject key identifier: 57:82:35:CB:F7:F2:92:51:8F:B1:57:07:0A:51:54:87:26:AC:AB:33
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 019E1D9132E83152104D4576DB3FD58CEE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 15C8
Signing time: Tue 12 May 2026 19:01:55 +0000
Manifest this update: Tue 12 May 2026 19:01:55 +0000
Manifest next update: Wed 13 May 2026 19:01:55 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: 3kPH7wqFhgKiIxV885qxbuAe+qsERO/vS6EZTg7jqm4=)
2: q2-IGhwQSLSx5V9fY6kSeD39pbA.roa (hash: DfOwmBNWH7uAhJlIMJxO08FzHN1+2RmMZDRpAI6F/eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:32:e8:31:52:10:4d:45:76:db:3f:d5:8c:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: May 12 19:01:55 2026 GMT
Not After : May 13 19:01:55 2026 GMT
Subject: CN=578235cbf7f292518fb157070a51548726acab33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:2f:6f:de:7d:4d:fb:79:63:b1:08:fe:2f:
d1:d6:ae:c9:3b:99:e5:39:30:98:5f:ae:ce:4b:6e:
c2:4c:0c:71:a1:8a:d7:c9:5f:f2:ae:2d:dc:2a:5f:
e2:3b:1b:7e:38:c3:d4:1f:92:63:6c:b2:cb:cd:aa:
03:a3:66:3e:be:1d:ef:c6:14:ba:b4:51:b2:b5:4d:
56:a5:4f:2b:d0:9e:cb:00:96:c5:02:fa:03:f7:d6:
fe:8f:3f:02:69:3f:e6:70:9e:bd:3d:e0:1a:0e:05:
ca:10:1e:ff:7c:1d:c7:1b:c1:f3:57:b3:b3:b1:4f:
a1:ec:14:1e:5c:2f:ad:68:6f:e0:c4:6b:4a:e0:8c:
2b:23:23:86:39:c1:f8:57:39:59:a1:dd:a7:4b:44:
08:4f:34:f7:54:39:55:26:41:cc:57:c7:98:65:f5:
29:47:c6:c4:4a:47:75:4d:0d:5a:85:50:ab:bb:6d:
f5:15:a4:75:84:ca:fe:28:78:11:2a:2a:3c:95:c9:
6d:b1:4b:a9:df:7c:63:8a:ca:8d:76:54:c9:f9:b0:
5f:9b:7c:f1:3e:f1:93:fc:a5:ae:1e:52:e9:81:c7:
a7:08:bb:f8:fb:db:6d:ee:7f:87:29:97:14:93:a3:
d2:81:a5:d3:d4:03:6c:4c:29:4c:87:05:f5:d2:c8:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:35:CB:F7:F2:92:51:8F:B1:57:07:0A:51:54:87:26:AC:AB:33
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:11:45:d4:6e:38:0b:2c:55:83:0e:96:ef:73:2d:76:8c:bf:
8b:64:70:a1:9e:ab:f3:35:7f:21:1a:ec:e8:83:dd:fe:22:c2:
49:ff:60:8f:35:09:19:6e:2c:ee:36:e1:0d:34:65:85:42:34:
8a:52:d9:22:54:0d:50:4b:d8:54:81:b7:83:be:f6:20:aa:5d:
bc:1b:65:4a:42:9e:f5:89:48:1a:b5:87:8c:cb:ef:36:41:ac:
86:32:09:c7:63:1f:f3:f3:37:cb:38:f0:20:6d:ca:da:a6:f8:
21:6a:34:6b:a8:ef:dd:f1:99:00:f3:d7:f1:21:76:96:1b:83:
30:bf:c2:5b:bd:55:1c:7c:be:03:ff:2e:34:ec:9b:c3:a8:67:
89:96:ea:17:63:ff:57:b0:3f:3c:3a:32:f0:82:36:fd:7b:86:
7f:5b:0f:7b:71:a6:78:45:1c:6f:6f:9b:1d:92:a6:b0:cf:1f:
d7:95:79:e8:4f:86:9c:37:2b:da:bd:0d:03:77:09:73:40:7a:
b6:4d:99:4e:2a:d1:ae:4d:85:e5:3e:28:ed:41:e0:4e:f2:ee:
40:42:a7:66:e5:2c:f4:f0:4b:69:c5:0d:bf:66:1f:8c:37:71:
a0:17:ac:3b:5f:a7:1e:37:12:98:d9:be:c8:0c:95:d0:d0:c0:
e6:ce:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:54:10 2026 by rpki-client