Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json)
Hash identifier: cHWLduU/d64JpJbzPF/eZfeB1t9BFZnFtOIBET5F04s=
Subject key identifier: C3:D1:7E:11:3F:29:75:5D:40:A7:C3:91:36:6D:4F:97:14:8D:53:42
Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Certificate serial: 019E1DC71AA2B177AF75A0B9B492C7CCEFDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
Manifest number: 0363
Signing time: Tue 12 May 2026 20:00:48 +0000
Manifest this update: Tue 12 May 2026 20:00:48 +0000
Manifest next update: Wed 13 May 2026 20:00:48 +0000
Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: ZYR6jAcn73BBsEYqEVDOMyh/SRH/wmxV/qYjr3a5UZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:1a:a2:b1:77:af:75:a0:b9:b4:92:c7:cc:ef:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Validity
Not Before: May 12 20:00:48 2026 GMT
Not After : May 13 20:00:48 2026 GMT
Subject: CN=c3d17e113f29755d40a7c391366d4f97148d5342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:a9:d6:4e:8d:12:f5:d6:ae:99:e7:2f:3a:
e5:a6:63:40:65:a0:3d:d4:e2:7b:65:a3:b3:8c:75:
f9:2c:04:b1:20:6c:ad:f7:11:6a:0a:63:9f:b1:df:
77:36:d1:cf:41:43:fd:de:64:68:b7:1f:03:2e:7d:
9b:d5:d7:35:6b:a9:a0:e1:58:32:be:36:66:d6:69:
bd:5b:84:2d:7d:52:c9:c2:c0:d3:b5:95:0c:7b:94:
92:da:4e:64:7a:2d:63:18:27:5c:3c:f9:7a:13:62:
fc:4c:5a:88:a2:54:6c:9f:29:9f:c5:2d:b9:a0:08:
75:c7:88:b6:13:26:98:b1:43:5c:0e:11:8d:0b:41:
9e:41:21:7e:1d:b4:d3:77:26:49:74:36:4b:9b:75:
32:7f:0a:87:82:0e:1a:35:5a:f5:81:1c:80:28:25:
75:9f:df:7f:2b:e6:50:e0:73:0d:e0:66:99:66:ea:
0f:37:63:8f:68:13:83:45:4d:ba:c4:fb:54:55:47:
62:d1:38:b0:5d:2a:6c:a4:37:bf:0f:1d:59:30:c4:
db:58:a2:06:da:4e:90:a0:d1:55:39:bc:01:d5:f7:
67:48:71:40:f7:e7:29:d9:95:21:01:bf:b8:9d:4d:
c0:95:f0:d9:04:47:c5:05:26:0c:5f:a5:22:8f:a6:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:7E:11:3F:29:75:5D:40:A7:C3:91:36:6D:4F:97:14:8D:53:42
X509v3 Authority Key Identifier:
keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9a:13:09:e6:2a:47:9e:54:77:de:33:8b:ac:b1:b0:72:a9:
98:cc:ef:8a:a1:78:53:b6:b2:33:57:1a:19:7d:e3:b5:8d:9a:
a0:c8:34:ed:b3:78:2e:56:5c:50:27:39:91:98:8c:81:0a:a6:
c4:5c:32:ef:0f:b8:4a:21:99:32:95:69:89:08:8f:86:38:fa:
ce:fc:19:fb:2b:61:9c:e7:f8:3a:27:03:bb:40:28:fc:2b:5a:
fc:0c:bb:ea:ee:73:72:6a:7b:6a:ae:5b:6a:49:00:34:f4:6f:
4d:ad:ed:0e:88:e9:04:4e:ac:84:79:bf:8b:bc:79:f0:df:b9:
30:96:f7:81:99:a6:81:d1:15:50:c1:cf:13:02:e0:5e:15:9c:
88:09:7c:67:e0:66:eb:3b:15:31:2f:fb:66:45:59:8e:d9:87:
34:52:78:7f:1c:bc:51:24:89:37:00:96:70:16:25:a1:71:c6:
0c:cb:8f:a4:85:c0:92:ca:53:bc:98:a8:6c:e6:12:94:82:e8:
50:99:57:ee:cf:57:fc:5d:ea:40:e8:33:53:76:d6:2c:02:e9:
2e:92:c2:e7:a8:d7:5c:e7:70:9f:30:42:58:5c:55:94:17:1b:
ed:e4:92:ef:43:cc:41:28:22:eb:a7:e8:bb:58:17:bf:f6:19:
36:8e:0f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:55 2026 by rpki-client