Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: jovlM+iETvllECiY0+3TgJlZlf7vaUqxCUtuXgYYGSk=
Subject key identifier: 78:BB:14:B1:23:67:85:9E:8C:12:A3:A5:05:A1:25:41:C1:F5:FA:33
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 019E1BD8C35878C61DF45EA157ED373F0A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 01D6
Signing time: Tue 12 May 2026 11:00:51 +0000
Manifest this update: Tue 12 May 2026 11:00:51 +0000
Manifest next update: Wed 13 May 2026 11:00:51 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: G/0o/TGtIx1faS/vHg4Jm0bP6tMcuxce8XAzADnw24Y=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: mwCzzvweJkXnsuKQFU_XqrjgkuY.roa (hash: oIsIZ9PAHY73DINk0iQBEaX5PRlBNYPUighzgQGS/2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c3:58:78:c6:1d:f4:5e:a1:57:ed:37:3f:0a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: May 12 11:00:51 2026 GMT
Not After : May 13 11:00:51 2026 GMT
Subject: CN=78bb14b12367859e8c12a3a505a12541c1f5fa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ff:63:36:25:f2:af:75:92:7a:b1:67:9c:7b:
e9:cd:c4:56:5d:64:59:08:18:1e:49:56:c4:c2:d8:
8e:db:7c:6a:cd:7f:66:99:5c:9a:c7:1b:2b:c2:e2:
1b:5f:3e:ad:a8:ff:84:bd:d6:c0:3f:b4:cd:c1:6f:
9e:ea:49:48:9f:cd:5f:01:7a:f1:9b:e8:5f:f3:ac:
21:ec:f7:3d:5a:ec:61:f2:51:a0:c7:57:77:0e:7a:
ba:72:8c:8a:af:65:28:15:62:88:a6:b0:86:7c:68:
66:d7:cb:c2:b4:00:c0:3d:de:ab:de:1b:68:a2:09:
c9:af:a1:c5:dc:3e:c6:0f:60:02:f0:64:5e:d1:25:
aa:6c:ce:4e:4d:6f:9e:27:56:10:7f:75:6f:5d:d7:
22:7f:7b:0b:cf:7f:81:fe:01:82:5f:44:64:d5:20:
21:f9:e8:ef:5b:33:b1:e7:88:20:d8:e5:17:e3:fb:
88:b6:15:03:3d:f6:4d:d4:7b:86:36:1d:e9:4a:74:
38:f7:b7:d7:1b:c4:3f:b3:06:f0:12:bf:c4:52:4d:
f5:68:d3:a5:b9:40:8c:e7:38:b2:7a:51:aa:7c:0a:
4c:c2:41:ae:67:57:76:81:75:37:44:cc:f8:03:3a:
61:37:b5:7c:d0:bc:f0:c6:6e:8b:19:d3:de:d6:d8:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BB:14:B1:23:67:85:9E:8C:12:A3:A5:05:A1:25:41:C1:F5:FA:33
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5f:1c:5d:b7:cb:93:cd:27:89:d1:99:37:d3:29:46:75:88:
3d:1d:e0:dd:ad:84:2d:9c:5e:47:18:e3:11:15:a0:8c:09:16:
61:b9:52:d9:9a:70:6a:69:43:ed:9b:51:95:b1:7a:28:67:3e:
ce:35:dc:fd:bf:a2:9b:62:aa:9c:11:54:c2:6a:71:9e:12:37:
59:30:9e:fa:d4:ad:46:87:63:75:f0:b1:c7:33:da:18:fd:f7:
df:f7:33:b8:11:99:4b:21:c5:30:eb:44:0d:9e:2c:98:79:ff:
a6:8e:75:a2:c3:1e:eb:a1:89:57:6f:7c:d2:a3:d9:64:92:f3:
29:07:d7:1c:bd:8e:fe:66:19:a0:97:61:a4:18:49:33:87:0c:
fa:0f:9e:00:e0:5f:08:38:ff:dc:e7:82:10:0c:92:ea:bb:eb:
60:14:47:91:a7:40:86:31:db:22:57:cf:51:5f:7f:70:6c:f8:
2c:b2:bb:a0:e3:94:35:81:37:82:5c:47:e0:18:d1:d7:01:e0:
25:a4:d0:6c:b8:bb:71:73:4a:74:06:33:49:44:15:32:34:e8:
36:b1:ec:88:f6:b2:8f:fb:d2:63:19:b4:b3:f9:b0:c4:1e:b0:
8e:65:c9:af:5f:f7:63:84:13:6d:c7:2b:35:b2:7d:1b:07:5d:
fa:d5:f8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:59 2026 by rpki-client