Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
File: 1DdYFDRN8L9tAXczrNxIjwAmMbI.mft (raw, json)
Hash identifier: A9eEF+y3GK0G40VJpZyxV3lymn3XIBMNOrK5WWJmv/A=
Subject key identifier: F4:6B:9F:7D:9A:DB:C9:A3:D7:5A:C0:53:60:07:EE:A2:63:8F:52:8D
Authority key identifier: D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
Certificate issuer: /CN=d4375814344df0bf6d017733acdc488f002631b2
Certificate serial: 019E1D595A6367B1D9999CF10166D43C3FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
Manifest number: 1923
Signing time: Tue 12 May 2026 18:00:55 +0000
Manifest this update: Tue 12 May 2026 18:00:55 +0000
Manifest next update: Wed 13 May 2026 18:00:55 +0000
Files and hashes: 1: 1DdYFDRN8L9tAXczrNxIjwAmMbI.crl (hash: NTzc2hCfMlk9GnldZ7jiqkvLokwJVCZ+avhzX7VbMG0=)
2: _fx4TtZl912PDxKt3SpPKkcaW4A.roa (hash: dK8lG/+XmK+y1Z83e8NRgEb93MJfhW6m6ThSMLB6k4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:5a:63:67:b1:d9:99:9c:f1:01:66:d4:3c:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4375814344df0bf6d017733acdc488f002631b2
Validity
Not Before: May 12 18:00:55 2026 GMT
Not After : May 13 18:00:55 2026 GMT
Subject: CN=f46b9f7d9adbc9a3d75ac0536007eea2638f528d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:47:1a:ee:7c:4c:90:06:1e:72:59:70:7b:
aa:c5:ff:cc:2b:b1:c6:6c:01:1b:3a:5f:80:5c:d3:
70:23:ca:f0:d8:e9:3d:f2:bd:21:00:39:de:ab:0b:
ec:12:c6:a9:28:b0:b9:6e:7b:31:1f:66:92:1f:4f:
cc:d0:4d:a1:6e:f8:40:5e:84:f1:c6:2e:b8:80:87:
0a:12:fe:8e:63:f8:34:43:1b:a1:37:70:3e:40:a7:
f5:8e:33:35:4d:52:ee:71:34:4a:1a:6a:80:62:ea:
d6:aa:7d:8e:4e:e1:10:22:4a:1f:72:f4:53:ee:a6:
88:72:d3:fc:af:23:46:b8:d5:da:0b:07:f2:16:6b:
de:0f:f7:9e:0e:5c:3c:67:a1:6b:7b:24:bb:d2:44:
6f:ab:ce:fb:87:86:86:b7:6c:13:27:cb:72:ac:d7:
ac:d1:9b:f1:6c:60:f1:7a:73:44:d8:a7:13:dd:d5:
28:6a:2e:3f:f6:df:cb:fc:34:83:df:01:d9:45:26:
70:54:97:13:21:17:58:a0:dd:50:7d:be:03:d9:a3:
de:cb:fe:e1:a6:c3:2e:8b:b9:c7:f2:fc:37:9e:a4:
da:b6:90:2b:e5:6b:ee:1d:ab:bd:e8:56:4d:1e:32:
7c:98:f3:00:7c:e5:70:b9:87:6f:2b:a3:7c:03:ec:
d6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6B:9F:7D:9A:DB:C9:A3:D7:5A:C0:53:60:07:EE:A2:63:8F:52:8D
X509v3 Authority Key Identifier:
keyid:D4:37:58:14:34:4D:F0:BF:6D:01:77:33:AC:DC:48:8F:00:26:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DdYFDRN8L9tAXczrNxIjwAmMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b24b2d-3523-422e-9bcf-3671d67eb9f8/1/1DdYFDRN8L9tAXczrNxIjwAmMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f9:f9:58:fc:5a:1d:bd:76:21:30:71:78:eb:7a:c7:4f:52:
a5:4e:b4:81:d7:b8:e0:19:85:50:9d:b5:29:49:b2:cb:58:a4:
31:87:f4:5d:67:21:89:47:3c:b5:e1:1b:67:8e:f7:e7:1a:67:
9e:81:02:53:44:9d:ca:56:35:3f:10:f0:d4:90:7e:54:2a:db:
dc:b7:3f:bf:32:e7:61:16:a3:fd:96:03:55:c8:b6:7e:ab:35:
9e:92:67:1e:21:83:b8:eb:73:c6:bb:b0:b3:78:02:eb:c4:de:
1a:a2:1f:d0:bf:c8:91:d0:45:a1:d0:43:ba:a8:9e:38:ff:5d:
0b:66:7a:7a:9b:4f:b4:1f:f9:c5:63:dd:45:a4:ca:37:fa:7b:
6e:b6:1c:7b:4c:90:9a:00:5b:bc:f1:9c:2d:a8:a4:37:ba:30:
a9:c1:c1:4b:b5:0b:05:cb:0a:6b:bf:82:1e:14:fd:c7:76:8a:
e1:dc:a6:c7:e7:db:78:0c:76:e2:e3:c7:e0:ea:e8:de:fe:cb:
86:f9:d0:35:7b:06:42:34:7f:ab:4d:09:72:25:78:3a:b6:51:
bd:be:a4:39:49:92:35:52:cf:c3:23:b8:92:a9:56:69:e6:e9:
ae:fc:69:2c:48:ce:8d:2f:47:b5:6a:c3:53:52:6b:87:dd:9e:
f3:48:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:14 2026 by rpki-client