Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
File: dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft (raw, json)
Hash identifier: 6SSIyVOIYYzXmoGDC8Luu2wYmeHzbl7c+PdRDDJjjh4=
Subject key identifier: 1D:AE:D0:77:F1:A6:5F:C8:BF:36:C7:6B:1F:72:53:53:46:6A:BF:A4
Authority key identifier: 74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
Certificate issuer: /CN=740f65f302335baa90ed81c05384d53f2332391a
Certificate serial: 019E1E3535E9F4010498500A4B11DF6E06F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
Manifest number: 0A1D
Signing time: Tue 12 May 2026 22:01:04 +0000
Manifest this update: Tue 12 May 2026 22:01:04 +0000
Manifest next update: Wed 13 May 2026 22:01:04 +0000
Files and hashes: 1: 60AgYXI0MVWEVUOzuDwIpQcFWrE.roa (hash: 1Lj/1bPCIRRdQ0zsLEkl5mAqw0n7NxUgu4JklwVrAAs=)
2: dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl (hash: 7uZMwK0ntn0AG/VeMG8+qOLhi/F6ud8dGNJrzdvS3OI=)
3: dhhgDn01VBGU33txgYz8NBfOFn0.asa (hash: LohB167OFmIaspaV8SsKY8hSV57AJZzngteLMm6LIZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:35:e9:f4:01:04:98:50:0a:4b:11:df:6e:06:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=740f65f302335baa90ed81c05384d53f2332391a
Validity
Not Before: May 12 22:01:04 2026 GMT
Not After : May 13 22:01:04 2026 GMT
Subject: CN=1daed077f1a65fc8bf36c76b1f725353466abfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d4:f4:2b:90:30:f4:88:1f:0d:da:23:6c:48:
57:5a:3f:8d:52:33:8f:5d:2a:c9:93:ed:da:54:9a:
16:46:ca:a6:bf:af:dd:2c:c3:56:40:19:1f:2b:c5:
07:83:3a:8d:0f:fa:65:78:29:dc:59:4e:a2:ae:c1:
2c:6b:c6:fc:2a:e6:be:3e:01:cf:6d:00:f2:b1:f2:
ad:a8:92:b8:22:82:a2:8c:79:09:e1:09:70:50:f6:
c5:73:a5:0a:99:96:65:40:21:6a:75:77:2f:90:00:
24:3d:a5:1b:62:47:cc:d5:ef:8b:d1:60:e3:b9:3d:
de:29:b0:8c:10:df:ba:7f:62:4d:c9:a0:2e:f0:2c:
69:ea:31:f3:95:01:b1:1f:ef:fa:91:d3:d0:81:5c:
20:44:66:de:6a:76:89:05:de:10:92:df:1f:68:5f:
2f:0f:77:13:c4:a0:3e:e8:a9:bc:6a:f7:65:b5:b1:
29:ca:9b:25:6d:fe:3b:37:1a:74:17:37:68:7f:e7:
6b:6d:d8:07:bd:8f:f3:6d:a4:3b:0a:ad:aa:1b:24:
3f:f8:8d:4a:b6:53:0d:54:53:79:17:19:8e:9a:fc:
d0:6b:47:64:64:f7:13:d4:61:d3:ca:9c:59:e6:df:
97:b2:50:83:b0:b4:4c:be:ec:dd:a8:21:23:51:4c:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:AE:D0:77:F1:A6:5F:C8:BF:36:C7:6B:1F:72:53:53:46:6A:BF:A4
X509v3 Authority Key Identifier:
keyid:74:0F:65:F3:02:33:5B:AA:90:ED:81:C0:53:84:D5:3F:23:32:39:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dA9l8wIzW6qQ7YHAU4TVPyMyORo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1c1f-2d8c-4861-b71d-d03a2c435aec/1/dA9l8wIzW6qQ7YHAU4TVPyMyORo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7b:08:31:60:97:2a:73:e5:07:26:5f:7a:a4:d0:7e:e8:29:
89:01:f7:d7:86:2e:07:5c:ed:01:2f:3d:6a:5f:64:6f:65:13:
24:20:76:ed:80:58:77:7f:b2:e6:12:22:6f:c8:88:63:a6:b8:
a7:fd:d5:92:b3:fc:b7:f4:fa:10:d2:bf:09:57:4a:d8:19:fd:
ca:9f:89:02:55:8c:b8:fe:0d:77:f6:1f:59:70:3d:77:c5:d0:
a0:38:42:b7:3e:6e:74:9c:3a:ab:88:14:51:f3:03:b6:ea:3d:
99:f9:46:45:0c:f1:4b:ed:1c:02:8c:69:0c:a7:7b:99:98:df:
bf:d2:7e:d2:72:30:56:9d:5e:0a:aa:44:5e:1c:17:51:78:9b:
bf:3d:37:c8:01:da:50:a8:aa:8e:7d:83:26:fe:52:12:90:65:
79:24:38:a3:54:60:81:f6:be:c6:99:8a:a4:be:72:20:01:64:
ac:0a:10:ab:2d:44:a9:5b:78:57:d6:43:1d:5a:94:c0:f5:34:
6a:f3:8c:64:b4:50:06:7b:7b:22:d1:2a:d6:79:e1:17:a8:67:
cf:3c:19:7c:e2:07:9e:62:35:72:71:d9:a9:ac:8f:d5:66:86:
77:0d:30:5b:d3:c7:93:5d:0d:9e:7e:55:b7:36:ae:08:ad:e9:
76:63:dc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:02:37 2026 by rpki-client