Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: oufOftYtVa2RK0yu6kjvyu5WS6QmbXDwsgE6nBdqy8w=
Subject key identifier: 8C:E0:68:69:05:59:7C:47:DD:01:4D:61:BB:01:F9:1F:36:17:CA:5F
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 019E1DFDE73E2B21013A26FD3114943F35BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 21:00:39 +0000
Manifest this update: Tue 12 May 2026 21:00:39 +0000
Manifest next update: Wed 13 May 2026 21:00:39 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: uXyE6ZW7IzzA6lGOJhuWsZc5pbLuXJ6Rw6kzhjF99y0=)
2: 4HorvSl6zEJ4HC5ifkfK5xnNmsE.roa (hash: l+G/CcJNCFJU4d+SNUaOc2KOUJVWckb0n4DNmMjMMz4=)
3: yJ2MXHIuwnlLBfSQT_c_ui7bxZ8.roa (hash: bKb0mrONqrCtemohnhY7UQM4/Wb2IQBdRvBQnmw2e9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e7:3e:2b:21:01:3a:26:fd:31:14:94:3f:35:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: May 12 21:00:39 2026 GMT
Not After : May 13 21:00:39 2026 GMT
Subject: CN=8ce0686905597c47dd014d61bb01f91f3617ca5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5e:75:bf:59:5a:47:1f:6d:bb:e2:c0:07:44:
45:24:41:0e:bb:08:81:ef:fe:c8:fc:a5:f8:c5:ff:
c1:4a:34:d9:fb:74:2f:bb:6b:d8:a8:b2:f5:e7:bc:
77:28:65:f5:0f:d6:19:93:ca:d6:f6:64:e3:6b:da:
9e:6f:24:89:3c:9d:3f:d7:21:e2:d8:d0:ef:ad:da:
60:de:0d:4c:90:d6:6a:de:70:29:c8:4b:b3:9f:93:
da:5b:93:70:03:70:27:83:d4:6b:06:32:39:68:7b:
80:cf:87:4d:91:23:f4:78:e5:12:a1:46:58:80:06:
9d:5e:01:10:d0:6c:fd:b9:65:91:09:ce:22:47:64:
e1:3f:5d:31:15:cb:10:44:a9:9a:cb:7d:83:cf:f7:
a6:47:55:ce:30:c5:34:ca:17:63:ed:a9:5e:ee:42:
25:47:9a:61:bd:de:78:1c:70:85:8b:57:73:89:73:
65:bd:ad:79:ab:7b:ed:48:7b:48:c0:d0:29:4d:63:
10:11:6f:65:3b:3f:de:e4:63:b7:23:0f:f5:40:59:
37:5e:6d:0e:9f:cd:36:04:bc:51:59:8a:dc:37:ef:
c4:cf:4e:29:a5:23:e7:ba:1f:0c:c0:2b:ea:a0:32:
ad:4c:f2:21:31:e9:88:28:9b:91:46:6f:e7:2f:5b:
37:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E0:68:69:05:59:7C:47:DD:01:4D:61:BB:01:F9:1F:36:17:CA:5F
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9e:70:25:b1:bb:dc:51:49:4b:08:54:69:b2:1a:46:70:c7:
3b:29:dc:da:4e:6d:7e:92:8c:17:ee:a4:4a:85:66:90:02:bd:
b3:ef:14:df:6b:be:fe:c3:1b:3b:c2:50:da:23:89:4c:89:af:
11:53:53:60:64:a9:04:ca:64:e7:26:79:53:bf:fb:72:76:7c:
8d:f7:0a:6e:d7:a4:d0:58:53:c3:42:ef:97:9e:59:b5:27:3d:
42:4c:0e:b7:a3:2a:4b:1e:4f:9f:42:b8:48:16:73:74:e1:ce:
c2:c3:ff:87:49:5a:57:07:03:7f:b5:af:f5:51:ea:ab:17:d6:
2e:34:52:f9:9d:84:bc:82:f7:f1:8e:03:1d:18:fc:1f:64:b1:
8f:98:cf:e3:1e:ac:73:46:58:c7:5e:5d:e9:43:83:a3:00:49:
3f:e1:9b:02:1f:9d:7f:a1:34:d9:00:3b:e5:2e:2c:bb:17:86:
e0:90:ac:22:72:fa:04:4a:cf:5f:c4:78:a0:39:b9:9e:84:81:
fe:c2:b0:da:2f:d4:3e:53:04:c9:76:10:db:95:2d:7c:53:0d:
35:8f:5a:36:3f:c3:97:3c:ec:1a:83:7e:51:d6:f7:a9:57:42:
33:43:11:71:c9:36:b3:fc:6c:32:f2:ac:1e:98:3f:e7:e2:aa:
15:8d:00:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:39 2026 by rpki-client