Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: s2WBkchjvCFOizBILbu3H+/dBhuhdeMMEKp+2KqHvKk=
Subject key identifier: 3E:97:44:A3:E6:A7:40:BB:DD:D5:67:2E:A0:94:61:1A:63:ED:05:D7
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 019E1DFE0B5AE4CD92AE3AC5B1EB0E5A19D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 21:00:48 +0000
Manifest this update: Tue 12 May 2026 21:00:48 +0000
Manifest next update: Wed 13 May 2026 21:00:48 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: D/+5n469h9hT2NPxwb5UmyLyZ7Og84gxl/VacQW229k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:0b:5a:e4:cd:92:ae:3a:c5:b1:eb:0e:5a:19:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: May 12 21:00:48 2026 GMT
Not After : May 13 21:00:48 2026 GMT
Subject: CN=3e9744a3e6a740bbddd5672ea094611a63ed05d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:05:3b:04:de:4c:6b:e0:10:70:33:9e:25:
f3:aa:c3:f2:5e:fd:82:76:a2:36:3f:fd:b6:01:79:
6e:50:f8:eb:41:93:e1:28:91:a3:d1:57:de:a8:a0:
3f:f2:92:56:62:47:5e:df:68:fb:4a:5d:c2:87:2f:
43:1d:a1:58:c5:a7:1f:b8:57:01:09:7b:3a:70:08:
2f:49:38:18:d5:12:f1:0d:a8:13:75:3e:5e:b5:17:
de:0d:4d:de:d2:6a:70:9d:aa:ba:a7:52:83:96:bf:
09:00:72:11:70:c9:c8:a8:94:3d:d4:1f:5a:ed:db:
1a:ae:f9:ec:a5:5e:8a:5e:5e:af:2a:3e:61:01:34:
0f:b7:42:51:66:c3:fa:4f:b2:b0:6b:17:e1:6a:e3:
71:47:c6:5e:2b:8c:f7:30:58:0d:97:12:bb:90:e9:
ba:50:dd:1e:84:d0:ae:98:8e:86:bf:f8:ce:ad:b5:
a1:82:8a:99:9c:a7:1c:6b:02:68:27:4a:af:77:71:
17:e7:90:e0:86:64:43:2d:4c:71:a0:e0:cf:ab:27:
43:72:53:64:3a:41:69:9e:ee:ae:76:5a:1b:0c:29:
a4:96:84:99:ea:e2:7c:dc:24:6d:e3:ca:65:3b:f8:
a7:48:ed:55:53:58:0b:9a:a1:6c:0c:88:15:b3:b4:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:97:44:A3:E6:A7:40:BB:DD:D5:67:2E:A0:94:61:1A:63:ED:05:D7
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:58:c8:d2:7c:e6:a6:cf:21:12:a9:73:1d:f3:98:e4:92:40:
e7:de:b5:5b:aa:ce:f4:95:4c:af:5e:19:84:a6:5a:7a:b7:cb:
a1:71:2c:30:09:2c:1a:d4:56:2e:14:d3:ea:8c:62:54:fb:f3:
bd:57:90:1c:91:c3:1f:be:46:a8:c6:5e:88:f6:40:a6:85:ba:
2f:a9:c4:99:45:71:62:2b:3d:00:17:1e:a2:25:3a:95:e0:b3:
fa:1f:15:e0:6e:8f:fc:e6:2a:70:fd:b8:7b:28:47:94:b3:d6:
9e:e2:1b:36:8c:09:80:2c:4f:8c:47:9d:14:97:a7:3c:7f:8e:
fa:18:cf:15:18:55:7b:a6:ab:2d:fa:56:1d:03:c1:43:9a:32:
33:f4:f5:78:e5:5c:1b:20:67:d1:99:02:ea:1f:bf:c8:14:be:
13:d9:71:4c:c0:a2:c6:e9:36:4a:28:a0:8d:e5:6c:a9:06:07:
9a:08:4f:6d:62:f9:24:57:93:bb:01:b7:99:6a:74:a4:06:77:
a5:16:96:a9:b6:24:5b:84:70:4f:16:65:68:1e:bb:22:b3:f7:
85:d6:0c:b9:47:5e:79:20:fb:54:d9:41:cb:50:2c:b9:11:b6:
e3:98:c4:3e:10:32:cb:78:7f:db:ee:81:83:72:80:60:04:85:
71:31:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:15 2026 by rpki-client