Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
File: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft (raw, json)
Hash identifier: exOVXRqgKbbFIilzfjkVStSa9bc2padqXULMPuYn8ok=
Subject key identifier: 1B:14:10:0C:77:6A:94:5B:35:EB:56:F8:53:3A:FF:05:1E:C2:D6:B2
Authority key identifier: FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
Certificate issuer: /CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Certificate serial: 019E1CEC0DC9580855CD423CD31D06D44324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:01:32 +0000
Manifest this update: Tue 12 May 2026 16:01:32 +0000
Manifest next update: Wed 13 May 2026 16:01:32 +0000
Files and hashes: 1: 1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl (hash: seEfakUZ5Hpcaa+jwrV4St8bnAVHvmWtCkYhJu6MX+8=)
2: Afljxr8ZnlyJfn0MjgcAP3_UzNg.roa (hash: kphgkoE3iStHTSUsNJCX6GQ8XFaW4TlqKZ0slrAU88M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:0d:c9:58:08:55:cd:42:3c:d3:1d:06:d4:43:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac0f0da39a22a79f80c1f379b668b90f6d74708
Validity
Not Before: May 12 16:01:32 2026 GMT
Not After : May 13 16:01:32 2026 GMT
Subject: CN=1b14100c776a945b35eb56f8533aff051ec2d6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:41:9a:a3:b9:4e:85:fb:4a:2b:cc:26:1f:e9:
95:d4:3b:cc:6f:a0:d7:06:8c:2f:a2:09:b7:ec:c0:
f4:4b:43:a2:c9:5d:ee:db:46:2b:8e:47:07:21:55:
e7:cc:f6:2c:fe:ff:49:6e:6a:e0:2d:ad:57:0a:a0:
16:c6:7d:8d:13:7c:49:f3:97:95:a6:57:05:1a:53:
ea:86:8a:3b:79:9f:62:bf:1c:4f:b8:32:e1:fb:c5:
61:1a:e8:3f:b4:19:9c:aa:28:12:7c:40:f1:63:de:
ad:f5:a0:5c:2c:1c:33:60:48:8a:ed:0e:86:bd:05:
f6:b4:a3:fa:ae:33:d2:8d:7d:ff:ff:7d:0c:1f:0e:
fd:3f:cc:df:1a:e1:8c:56:fd:bc:aa:db:33:6b:39:
74:16:1b:b8:a7:9a:94:bb:49:c7:80:73:15:48:fb:
8f:9c:7d:7d:e8:b3:b6:54:07:f7:11:ea:82:da:51:
1d:c2:5f:a7:90:2c:16:1f:f8:50:37:90:0d:45:5f:
e0:33:17:2b:03:ee:72:42:0f:43:72:a5:6b:4e:7a:
32:11:60:16:f2:9b:9d:c9:4b:b6:33:5e:28:16:80:
be:99:55:80:ad:53:40:6f:90:f9:9c:60:80:b9:8f:
35:2d:3d:e6:88:67:d3:48:81:47:2d:2a:8e:f4:80:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:10:0C:77:6A:94:5B:35:EB:56:F8:53:3A:FF:05:1E:C2:D6:B2
X509v3 Authority Key Identifier:
keyid:FA:C0:F0:DA:39:A2:2A:79:F8:0C:1F:37:9B:66:8B:90:F6:D7:47:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sDw2jmiKnn4DB83m2aLkPbXRwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/86ed5b-bcc1-4d03-95da-b99d4d00f831/1/1-sDw2jmiKnn4DB83m2aLkPbXRwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8d:ad:17:ea:19:83:66:ad:ec:4f:c7:d4:0c:ec:a4:82:6d:
e1:d0:2f:26:52:8b:76:c1:0d:b5:79:08:f0:af:99:f6:f5:58:
55:66:e8:ce:61:b2:af:bc:e4:0d:38:a7:78:15:e6:20:f5:96:
e4:51:b6:4b:5b:2c:3e:bf:28:7b:b5:88:c7:6a:84:8b:17:30:
98:48:53:bf:1a:a1:d5:ba:82:c1:fd:fe:cb:b9:66:4c:f6:2b:
a2:72:72:87:67:d0:e1:6a:74:23:70:83:69:e9:a0:4d:9d:00:
c0:7b:b0:27:47:3d:3f:39:eb:e7:86:e4:a3:86:d8:9d:72:b0:
5f:08:94:ce:5d:6c:b8:bb:da:98:7d:ac:17:9a:4a:70:50:f1:
e4:86:a6:d2:b9:db:54:6b:a7:ed:80:90:34:d8:50:58:e5:58:
68:3e:15:e6:a0:37:42:3b:ef:58:f8:e6:4b:7f:ba:21:39:c6:
97:75:d8:dc:93:4b:e1:06:54:c1:4e:02:22:19:0b:f6:04:13:
67:8d:70:a7:4c:73:cc:4a:39:00:22:4a:ad:e4:9a:d9:15:e2:
ee:57:74:57:8d:1c:92:74:f0:28:02:4e:01:13:57:b3:74:e5:
81:ae:1c:28:b7:12:76:03:21:da:ba:79:5c:ce:80:70:9a:65:
99:b7:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:57 2026 by rpki-client