Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json)
Hash identifier: Io0CXkyrcc1rwCH60K/4E+916aJk7TALLUQW36ElhVs=
Subject key identifier: 43:48:9F:29:35:0A:74:5F:55:97:2E:2A:78:F5:CF:F2:C4:4A:4B:3C
Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Certificate serial: 019E1EA2F946555BA92F12C1190B005E07E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
Manifest number: 1775
Signing time: Wed 13 May 2026 00:00:57 +0000
Manifest this update: Wed 13 May 2026 00:00:57 +0000
Manifest next update: Thu 14 May 2026 00:00:57 +0000
Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: 8sYQ6SMvSRSn6ODuGiYU/bLXMn+f8hkSTJKhcZaRU+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f9:46:55:5b:a9:2f:12:c1:19:0b:00:5e:07:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8
Validity
Not Before: May 13 00:00:57 2026 GMT
Not After : May 14 00:00:57 2026 GMT
Subject: CN=43489f29350a745f55972e2a78f5cff2c44a4b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:cb:c3:fd:dc:b8:02:cc:f6:e7:1e:17:90:
22:f5:bf:cc:90:63:af:c8:6f:49:c6:58:99:43:9f:
83:59:fc:5d:bd:85:85:d6:f7:34:e3:42:78:7b:5a:
91:8c:27:08:5e:de:e7:34:5b:cb:e5:1b:c2:7a:55:
9b:2d:52:fc:66:45:58:b4:3b:60:28:dd:fe:2b:6a:
0b:2e:37:51:31:83:e9:5a:b4:40:7e:0b:6e:ec:e4:
d2:6c:d2:fa:26:c8:84:5c:c4:fc:c6:3f:b0:d5:80:
fd:fe:77:88:c2:8a:dd:38:26:2a:c3:99:75:98:92:
47:c0:e5:ca:70:69:b7:7d:9c:c0:fe:bf:80:9a:e2:
bd:f7:ef:63:36:df:bc:52:9f:15:95:30:d9:6f:09:
50:25:9f:ca:41:fd:f9:ef:02:75:59:0c:a4:0f:08:
08:fd:2f:65:06:14:9b:36:89:8e:2e:28:ac:5a:88:
5a:72:5d:3b:2b:f3:d1:8b:4e:03:aa:34:c6:66:c9:
92:56:4c:53:79:71:77:9b:99:34:5a:cc:0a:f3:f9:
9b:8f:1a:49:71:24:e6:ff:cc:9c:17:2e:ae:11:c0:
01:b3:44:bd:79:6f:40:29:8b:c9:51:02:fd:71:6c:
ed:bb:99:40:34:70:dc:3a:ec:83:35:53:38:6d:f1:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:9F:29:35:0A:74:5F:55:97:2E:2A:78:F5:CF:F2:C4:4A:4B:3C
X509v3 Authority Key Identifier:
keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b7:c3:ae:4d:26:3d:c0:4a:6d:f8:97:de:31:b3:d9:30:64:
75:bc:99:83:0e:dc:7e:a7:d7:aa:d2:72:83:e5:0e:69:2b:0d:
2f:e6:6a:ff:50:ad:15:56:ba:3e:19:6d:55:bf:5e:40:b1:e4:
b3:42:64:00:ca:fa:6b:e9:1f:0d:e4:0f:f2:c9:fb:6a:e3:74:
9e:72:c3:1a:48:63:de:3c:1b:ff:71:55:05:7b:34:2c:75:04:
ae:b4:d6:6d:fe:27:2e:58:99:fa:65:1c:7d:07:5a:4b:bb:db:
b8:87:7c:04:a1:88:7c:df:2e:bb:9b:0e:88:ec:0b:7e:56:2c:
a3:99:d8:f4:1a:4e:0e:8a:fb:c2:e6:a0:cc:d0:6a:a6:3e:64:
49:fd:68:0d:e6:8c:31:0b:f9:11:c4:64:b0:00:2a:79:1e:f5:
a6:05:6b:81:5f:58:65:ef:55:0c:b6:75:de:c6:3b:20:29:eb:
2d:a4:8a:94:1d:23:7e:08:12:78:6c:7c:c5:65:54:94:31:04:
ff:2c:55:4c:b0:97:54:90:07:2c:97:26:57:8c:5f:0d:93:22:
24:ec:72:05:b8:43:92:11:01:22:8f:f8:ed:48:58:c5:78:3b:
38:b1:6d:c4:29:db:26:f2:de:06:2c:8c:33:1c:d3:e6:d4:e0:
1a:14:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:40 2026 by rpki-client