Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
File: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft (raw, json)
Hash identifier: pM2/qwR5WLAOjwuDAB7LE4CDXfKTDGgvUJD2uD5dBQc=
Subject key identifier: AD:12:B4:73:BF:F5:4F:1A:D8:3E:51:76:8B:3C:9C:67:2D:3A:12:12
Authority key identifier: F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
Certificate issuer: /CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Certificate serial: 019E1F117EDBF41A5D082D49C23B621A9BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
Manifest number: 1904
Signing time: Wed 13 May 2026 02:01:40 +0000
Manifest this update: Wed 13 May 2026 02:01:40 +0000
Manifest next update: Thu 14 May 2026 02:01:40 +0000
Files and hashes: 1: 1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl (hash: j4extVQMUxrAmE2yNRDiBhGV1zgKxDx1Yo3w3DGvM24=)
2: jkf9uYsYVRJJo7-7ziQQDEzWpm8.roa (hash: KJPWOCNh5BY9Xr2oC9jvPyLkj0+8kyflAtM1BYsxhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:7e:db:f4:1a:5d:08:2d:49:c2:3b:62:1a:9b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9aa8a3ea991333393f3ef2a1822451123d3eec7
Validity
Not Before: May 13 02:01:40 2026 GMT
Not After : May 14 02:01:40 2026 GMT
Subject: CN=ad12b473bff54f1ad83e51768b3c9c672d3a1212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:9b:5f:a6:06:f3:d6:91:87:db:b6:20:58:
b6:4f:28:62:69:08:15:87:23:e6:c6:b9:30:d7:65:
65:01:f8:09:14:40:74:56:25:e7:52:17:d7:ac:95:
69:4d:bc:22:81:8d:57:44:4a:3f:d3:9c:d3:21:a8:
d6:be:15:dc:aa:fc:dd:9a:9b:8b:09:dd:4c:a3:9f:
87:fa:ee:68:ea:b0:b9:27:4b:a7:75:f7:12:ab:e2:
13:9f:e7:53:36:e7:c4:36:48:d6:e6:ce:c3:ac:40:
3c:75:19:4c:d3:8d:a7:5d:ea:ef:a9:b7:69:82:b4:
be:38:a1:86:2b:44:0e:6b:70:68:08:43:7f:a9:23:
8f:64:a2:af:d1:27:8f:3d:d1:48:c6:f6:53:ac:f7:
13:39:8d:40:d7:ea:ae:06:af:c0:fe:be:bb:83:0c:
f4:ec:9a:ed:b4:19:59:b7:56:0a:85:ee:d6:7d:09:
32:ba:3a:90:50:b0:49:e0:05:6f:72:e3:a7:78:a2:
b2:0a:34:1a:39:4d:0c:ca:74:c9:64:17:f6:fd:c5:
50:2d:9f:85:c9:0b:2b:53:42:be:53:8b:76:85:05:
da:10:1e:df:c6:f8:3f:02:cf:ed:ee:ab:0b:1f:c8:
ad:d9:57:dd:fb:a1:95:cc:9d:96:b0:1f:54:5d:35:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:B4:73:BF:F5:4F:1A:D8:3E:51:76:8B:3C:9C:67:2D:3A:12:12
X509v3 Authority Key Identifier:
keyid:F9:AA:8A:3E:A9:91:33:33:93:F3:EF:2A:18:22:45:11:23:D3:EE:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aqKPqmRMzOT8-8qGCJFESPT7sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d1e324-54f3-4df8-8ec6-038d53c23c39/1/1-aqKPqmRMzOT8-8qGCJFESPT7sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:2b:b7:e2:29:80:ad:88:3d:00:32:65:97:0e:eb:80:23:3f:
ca:3f:e4:12:6a:7f:59:49:f5:1c:2d:f2:0d:84:00:48:ab:6a:
98:8d:68:b5:48:e8:0f:b7:89:8b:5a:6d:d8:f0:71:5f:2a:81:
f3:a1:f2:4a:63:eb:78:10:46:7b:63:bf:69:47:05:a8:12:78:
84:73:b8:03:9d:59:3b:8c:bb:05:86:01:e3:e9:54:a5:2c:7c:
87:0a:2b:27:b5:b7:cd:be:6e:f9:d0:66:58:4b:3b:a6:bf:37:
95:16:44:0f:a7:a2:8a:8c:f1:14:d8:cd:22:d5:a9:ce:87:a3:
46:92:17:cc:12:52:21:35:9d:b8:68:40:dc:74:58:23:0b:b2:
67:23:dd:c3:07:f7:5c:96:af:86:7b:15:fd:0f:24:6b:80:cf:
77:25:fd:92:bf:7c:7c:7f:79:29:24:cf:f6:7d:28:cc:40:fc:
f5:86:36:dd:06:f9:b4:dc:91:72:4c:4f:c0:a1:34:23:b3:72:
3a:89:72:5f:b7:43:67:11:19:87:6a:29:55:79:35:ec:31:c6:
07:8d:82:f2:cc:59:dd:7f:b3:87:eb:45:17:01:e0:85:98:55:
3d:03:e1:6a:ed:f0:c6:0e:87:d0:6b:5e:34:4b:f9:81:c2:05:
3e:dc:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:32 2026 by rpki-client