Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
File: 1fdy0HHFE8Hozluapn9oke71C-8.mft (raw, json)
Hash identifier: aDXeY+WhjV+7cXtL9RvBfBWPlCjQpyREMIXu5joA/N0=
Subject key identifier: B7:29:E1:3D:C8:27:AF:4C:7C:7C:AA:2D:D1:0A:46:65:B8:71:3D:ED
Authority key identifier: D5:F7:72:D0:71:C5:13:C1:E8:CE:5B:9A:A6:7F:68:91:EE:F5:0B:EF
Certificate issuer: /CN=d5f772d071c513c1e8ce5b9aa67f6891eef50bef
Certificate serial: 019E1D90445F8E30E2F2463F820567FAD12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
Manifest number: 36
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: 1fdy0HHFE8Hozluapn9oke71C-8.crl (hash: FF0ajTjH0jXGpWQfBCRjd3z77VNFZUM1oH2HJ5KeiRk=)
2: KLEbsUex6kfA2TrHqsrxk6W_jrc.roa (hash: 8GJL4HHRySJ+N/l9kxJIoQ+ji927avPBg8CMqptjZQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:44:5f:8e:30:e2:f2:46:3f:82:05:67:fa:d1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f772d071c513c1e8ce5b9aa67f6891eef50bef
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=b729e13dc827af4c7c7caa2dd10a4665b8713ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ab:8b:d0:51:25:1b:ea:c4:29:1f:5f:d9:f8:
ad:ed:f8:8c:e3:53:0d:e4:53:0b:93:64:fd:3c:e8:
01:bb:31:c0:7e:cd:b6:08:b6:63:90:dd:1b:9c:d0:
18:91:24:19:d7:8b:f9:e2:11:5f:04:64:8e:12:2a:
22:f0:81:9c:5c:b9:e4:a1:88:6d:4d:22:1a:96:2a:
36:15:33:e2:a9:6b:b0:ec:fd:4a:00:65:ea:ea:e3:
82:3a:f9:52:22:a0:60:b8:d9:a7:1b:7f:20:ed:39:
39:5e:80:33:bc:7b:d5:63:f7:19:3e:a1:92:aa:00:
d0:79:72:b9:9e:ab:d2:f4:09:b5:1f:13:9e:d1:54:
3d:da:b3:25:65:a8:61:14:a4:31:cb:ec:0e:78:ba:
77:03:da:b9:3e:90:4c:04:7e:56:02:94:a6:30:c1:
f8:d7:ae:7f:70:42:ff:c2:3f:bc:ec:3a:29:a7:f8:
00:f1:86:08:ac:ec:1b:e0:47:70:f0:38:60:49:15:
97:78:19:a6:f8:fb:ee:62:d9:25:0f:fe:55:be:22:
84:4a:7c:9e:36:90:a3:c4:4e:e0:ef:37:11:8b:b6:
f0:59:b8:4c:84:5b:79:14:92:d2:ab:aa:6b:9f:94:
e9:55:08:2a:eb:2c:f3:e3:ed:54:c7:84:b6:dd:8b:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:29:E1:3D:C8:27:AF:4C:7C:7C:AA:2D:D1:0A:46:65:B8:71:3D:ED
X509v3 Authority Key Identifier:
keyid:D5:F7:72:D0:71:C5:13:C1:E8:CE:5B:9A:A6:7F:68:91:EE:F5:0B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fdy0HHFE8Hozluapn9oke71C-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/ca8ae6-0c13-4031-928a-0a5c649dd3c3/1/1fdy0HHFE8Hozluapn9oke71C-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:de:f9:6c:c8:2c:b9:ab:85:cb:5f:4e:29:d9:0b:eb:37:3b:
f1:f7:c5:c9:d9:f8:f0:ff:6c:70:9d:ee:c2:80:16:53:b4:88:
c6:da:08:62:2b:70:77:45:e8:4e:ec:7f:03:59:4d:7e:c4:78:
b8:39:05:4c:c3:2c:d9:2f:66:04:eb:16:df:d8:e5:3f:94:60:
fa:81:32:dd:8c:e2:f6:bc:99:50:c0:b6:cb:91:13:61:1b:c7:
6b:9d:9b:a0:b9:e3:0c:5a:6f:4c:fa:10:d2:7a:05:50:93:9f:
58:b6:90:c3:85:7e:4f:35:f4:92:ec:de:76:1a:81:7e:2b:96:
2d:e6:18:fb:03:db:0e:fc:32:7e:fc:7f:de:58:a7:71:93:99:
5f:72:43:3c:93:dd:30:98:57:82:f4:13:eb:dd:1d:02:39:46:
99:86:82:74:f2:42:44:05:93:d6:e8:00:b9:9f:7d:c5:40:84:
14:6b:bf:78:25:7d:85:dc:84:ca:56:7e:b1:bc:45:6e:82:1d:
7f:cd:0a:d3:c1:f6:5b:1e:d2:fd:34:cd:14:84:72:bc:a4:7f:
a0:43:ff:1c:47:0b:12:cd:23:34:5a:c0:5c:21:e5:34:74:1a:
43:de:66:d9:e6:f0:6a:59:cd:e3:a4:20:67:18:e2:cb:f2:a3:
7c:61:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:26 2026 by rpki-client