Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft (raw, json)
Hash identifier: LEva/ZYL+lf1CHywNzFWlwNYAO8Y4zBPRXgll0TTZQM=
Subject key identifier: 1B:C2:D9:9A:4F:E3:71:B1:B8:46:B2:A1:D1:29:75:CB:C4:B4:C1:24
Authority key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Certificate issuer: /CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Certificate serial: 019E1CEB3BC35F5EA2F3E6537F06B99E6E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 16:00:38 +0000
Manifest this update: Tue 12 May 2026 16:00:38 +0000
Manifest next update: Wed 13 May 2026 16:00:38 +0000
Files and hashes: 1: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl (hash: WxM2o+fm834eVTTbtrunS1DiC42KHwUXXrAJfLuxiMk=)
2: sK7iWd_IWdtBYlzIusErtM7RZEo.roa (hash: E9yaNEt+sG4ikRZ0VOMP720zInpE25towLQ25YYLJFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:3b:c3:5f:5e:a2:f3:e6:53:7f:06:b9:9e:6e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Validity
Not Before: May 12 16:00:38 2026 GMT
Not After : May 13 16:00:38 2026 GMT
Subject: CN=1bc2d99a4fe371b1b846b2a1d12975cbc4b4c124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:a9:d6:45:d5:79:bf:63:c7:e0:fe:e3:4a:
9e:df:82:18:14:33:bb:0c:eb:be:32:d7:9f:b5:5f:
e3:18:4b:82:84:05:94:bb:32:ab:ef:a2:56:4d:22:
6f:90:c5:dc:df:9f:c3:23:47:ca:1b:7b:2f:1f:8e:
21:b5:e3:18:ea:53:ea:62:48:02:f0:b7:20:d4:e2:
67:11:1b:1f:5e:e0:4a:5b:1c:08:cf:d0:6d:29:a6:
0d:41:42:a6:4b:78:1a:18:cb:5d:c3:bf:45:e4:c6:
e0:5e:e9:28:c6:b5:f5:05:14:a5:c4:fb:d4:9a:04:
53:a5:81:96:fc:18:68:e9:61:98:fb:97:df:72:cc:
b3:bf:9d:95:de:cc:1f:90:6e:26:ce:8d:06:0f:90:
2f:02:54:de:c1:54:9a:db:69:88:29:db:93:e8:d2:
4d:bd:e3:e2:af:5a:48:67:50:9a:21:90:95:9e:1b:
c1:15:b2:da:53:6a:7b:21:99:04:a6:16:62:79:9e:
63:27:0f:d1:10:2c:1c:43:88:4a:18:d9:d3:79:78:
93:84:31:22:bd:22:3f:eb:6f:a7:80:0b:a9:28:fb:
69:23:14:da:26:90:ba:03:b2:b8:62:fa:e8:4f:d5:
9a:d0:7c:e9:ea:76:c9:08:3d:5e:ad:78:e7:cd:e5:
6f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C2:D9:9A:4F:E3:71:B1:B8:46:B2:A1:D1:29:75:CB:C4:B4:C1:24
X509v3 Authority Key Identifier:
keyid:FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:68:4d:3d:51:6f:2b:37:fd:ad:58:ea:1c:d6:47:71:e2:53:
5c:fe:4e:7f:6b:15:08:0e:39:56:ac:cf:5d:77:0b:f0:50:88:
bb:81:21:58:00:db:c9:44:9f:a2:22:9b:17:a7:38:7c:c7:ab:
a5:dc:52:08:e2:5c:38:17:e0:64:54:d9:e1:52:2a:99:1b:87:
3f:37:bc:4f:4c:7c:de:57:7f:4f:13:84:80:99:b2:af:88:1c:
c5:c9:21:4a:77:50:78:0f:32:51:21:c3:d1:35:39:9d:44:de:
83:7d:f9:84:8f:e1:09:fd:2f:ef:04:6b:85:9e:4a:c4:d8:72:
f2:5f:46:1e:1b:74:53:5d:66:1f:9a:49:aa:d0:9e:42:9e:cf:
e7:09:69:df:ab:f3:76:45:a2:63:00:fe:6b:df:80:84:c9:bc:
4f:b5:19:15:12:d7:7f:88:40:89:c5:58:e6:fb:81:6d:f3:83:
93:0a:bf:39:ff:38:05:35:b6:a0:f8:5c:6d:2b:d5:6a:80:87:
fc:ec:a7:bf:13:6e:7e:89:1c:9f:c0:6e:e7:50:51:bb:5a:ba:
79:e7:6b:c2:5e:ff:8e:bb:ad:f8:37:0d:68:7a:f7:f6:cb:1f:
0b:7d:1b:2f:cb:93:f1:61:c4:a3:f0:38:84:e7:73:36:80:02:
eb:35:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:48 2026 by rpki-client