Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
File: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft (raw, json)
Hash identifier: DCg3hwbEiqcGWZ3dgGH4BrHSWyvYfx8o9eSeNq/7EtM=
Subject key identifier: 1A:C4:D6:CE:04:CB:D9:C1:D4:A8:A2:FC:FB:80:54:0B:F1:CD:CD:AE
Authority key identifier: D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
Certificate issuer: /CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Certificate serial: 019E1DC7AF981490DE3BDBE0C490014B6711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
Manifest number: 0A3D
Signing time: Tue 12 May 2026 20:01:26 +0000
Manifest this update: Tue 12 May 2026 20:01:26 +0000
Manifest next update: Wed 13 May 2026 20:01:26 +0000
Files and hashes: 1: 1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl (hash: NcowSVnpIiYKZ3qDE+PrX6CnMV8QOFQZA9wbrN4rGRA=)
2: GYutIkRnUUe6rU3f0KqhJg3i2C8.roa (hash: T8JwYcJCmU9VHg+cmAioCuzk66qEr5evLlhmPjOOj8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:af:98:14:90:de:3b:db:e0:c4:90:01:4b:67:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64d4b9086158bc296b200a60fc3750e951d22f8
Validity
Not Before: May 12 20:01:26 2026 GMT
Not After : May 13 20:01:26 2026 GMT
Subject: CN=1ac4d6ce04cbd9c1d4a8a2fcfb80540bf1cdcdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:e4:52:aa:99:00:4e:1e:77:9f:7d:f9:2d:
1a:8c:36:b9:96:c7:ac:0e:56:8a:df:67:6d:cd:1e:
ec:f1:e0:d2:cb:e1:87:c3:bc:27:a7:d4:d8:8a:0b:
21:7d:bb:07:cb:b5:c3:c2:88:99:92:b2:02:29:db:
20:b3:97:72:18:fc:3d:a0:e2:3d:96:2a:c6:8f:35:
2a:bd:b8:a3:6f:e3:a6:3b:43:ff:f2:db:84:c4:dc:
a3:6b:39:66:ee:14:0d:bd:57:17:a4:ff:dc:96:79:
20:97:95:41:c9:ec:8b:16:24:0f:7f:f5:dd:41:fb:
f2:dc:77:72:91:d0:1c:f8:09:2e:b7:62:bd:73:f0:
50:e4:c8:b2:5b:36:38:37:45:88:bf:9d:db:74:d9:
a0:f3:c8:39:25:f3:b3:1e:61:29:c5:e2:60:46:1c:
40:0e:57:fc:03:ff:e7:0d:6a:3a:5b:d7:a1:f5:6c:
cf:47:8c:3a:cd:fa:c2:5b:bc:c6:d7:6d:e2:e8:3a:
c1:cb:5e:5e:02:35:2c:e1:e1:e7:e0:1e:80:77:59:
58:82:70:84:04:70:43:d3:3c:77:c2:24:4b:d5:a5:
d2:1d:72:e3:60:b3:d2:68:a3:0b:85:1e:3f:f0:21:
c4:39:2c:23:a7:13:0a:67:70:69:8a:14:41:86:ae:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C4:D6:CE:04:CB:D9:C1:D4:A8:A2:FC:FB:80:54:0B:F1:CD:CD:AE
X509v3 Authority Key Identifier:
keyid:D6:4D:4B:90:86:15:8B:C2:96:B2:00:A6:0F:C3:75:0E:95:1D:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1k1LkIYVi8KWsgCmD8N1DpUdIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e91816-77d8-4069-aeb7-a5bfc544005c/1/1k1LkIYVi8KWsgCmD8N1DpUdIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:49:52:77:91:8a:0f:00:67:1f:23:1e:eb:b3:ed:06:1a:03:
8a:83:0b:eb:2f:3b:53:2d:29:31:6d:64:f4:d8:f7:c7:0d:9f:
12:1e:c5:5a:aa:cb:ff:7e:e2:47:90:78:68:e3:6f:5f:b6:c7:
cf:c4:a2:0d:fd:6b:19:18:84:67:a1:11:0b:1d:7b:45:95:5e:
22:08:47:03:ea:a8:60:df:d8:31:e7:25:96:c7:f2:b8:2d:1f:
91:a1:54:c9:d8:45:8f:48:56:09:13:d1:7a:3f:41:39:58:bb:
71:d6:c1:de:cf:08:cc:6f:e5:4f:31:08:6f:a9:f0:8a:c5:0a:
dd:ef:2c:5b:a8:aa:26:14:ae:12:60:9f:1b:48:5b:34:29:50:
59:05:34:ea:74:6d:30:ac:44:cc:76:97:87:77:6a:5a:94:4c:
9b:fb:a6:81:38:54:91:4a:d2:3b:22:f3:ae:58:4a:cd:e1:da:
dc:8d:cd:55:4f:10:20:3f:f9:c4:84:50:39:f8:6e:b5:7e:7f:
72:31:90:11:6a:26:3b:32:d0:1f:8d:cd:33:93:70:42:07:1e:
e5:af:89:23:0d:40:67:7e:b7:45:83:8a:5e:77:f8:84:1b:2f:
0b:9e:fa:3a:4e:b0:a3:22:a9:d3:f5:80:94:c0:9a:44:b3:83:
8d:d5:4f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:45 2026 by rpki-client