Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: ZQioCwENC6MdbZPblEtzl/ZJq6n41onnnbSEYLXllJg=
Subject key identifier: 27:1D:03:3C:3A:D7:01:21:79:C5:E5:7B:07:CA:B5:DC:A4:28:3E:3B
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 019E1E35ADA50D68D8CE0032E9A21CF074C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 1903
Signing time: Tue 12 May 2026 22:01:34 +0000
Manifest this update: Tue 12 May 2026 22:01:34 +0000
Manifest next update: Wed 13 May 2026 22:01:34 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: HkoK3D6zFzeXWF1pznkEDyUwRYWdtugKHdumeBjHqUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ad:a5:0d:68:d8:ce:00:32:e9:a2:1c:f0:74:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: May 12 22:01:34 2026 GMT
Not After : May 13 22:01:34 2026 GMT
Subject: CN=271d033c3ad7012179c5e57b07cab5dca4283e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:82:31:c3:5a:46:fe:45:b1:d4:f9:a7:fc:
68:f4:52:c8:7f:46:98:d9:4b:fa:18:37:a1:43:55:
aa:b8:04:b7:2c:64:17:e6:3f:a2:58:40:39:52:34:
c9:af:f7:06:11:d9:e5:23:53:d9:4a:83:fc:02:ed:
c4:16:76:c0:40:63:d4:a9:8a:86:51:31:73:06:31:
5e:e8:0f:57:f1:2f:87:c8:24:25:99:0e:44:60:eb:
2b:ab:7a:12:f1:fc:b4:25:03:98:43:74:b1:84:55:
58:e4:f7:7b:e0:37:1a:82:06:be:a4:57:d3:18:13:
5e:bf:f8:c4:37:ef:04:73:6a:3e:5c:87:58:6c:2f:
a3:2e:f7:67:32:b9:21:4a:31:9e:aa:28:ac:cc:61:
1b:71:0e:81:49:5b:45:68:53:f1:7f:35:3d:29:ff:
ab:84:30:a1:ca:98:ac:cf:91:ae:90:07:40:f4:51:
ab:ef:e0:ba:04:e7:be:e7:30:ff:ed:12:45:d8:ec:
66:a6:1b:7d:ef:ad:1d:ff:c8:bd:49:3e:e9:ac:ff:
46:8c:6a:92:4b:a9:b3:8c:fe:f8:3b:61:e4:12:41:
d6:e9:39:26:2e:16:be:70:bb:a7:2f:d8:08:9a:d6:
99:97:fe:3b:7d:c0:32:75:3a:b5:3f:6d:4e:f1:3c:
f2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:03:3C:3A:D7:01:21:79:C5:E5:7B:07:CA:B5:DC:A4:28:3E:3B
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:32:98:f2:b2:ec:73:dd:f2:58:2c:fd:74:cd:0c:da:a6:e3:
fd:3e:96:d6:03:56:3b:f3:f3:4c:e4:02:2e:8c:27:20:46:85:
3b:88:1a:4c:60:cc:b0:89:61:29:96:f9:61:4c:48:25:70:91:
f6:34:85:9a:e9:6e:9a:c3:7e:85:4f:11:1b:a1:2d:52:24:3d:
46:3f:82:1b:df:c4:de:4d:57:8b:7a:14:89:38:5c:92:bc:62:
8d:e7:26:9d:48:94:63:26:e5:c3:58:7c:08:b3:5b:ff:e1:db:
76:c0:30:fc:ec:22:65:21:45:b0:5c:d8:8c:95:a0:aa:cd:d3:
bb:a7:50:25:bd:9a:cd:0b:96:aa:41:b1:26:fa:84:1d:48:a0:
3f:16:22:d2:1e:4c:6c:eb:ca:bd:e7:94:65:46:bf:ce:ba:1e:
82:d7:aa:e9:d3:0e:ad:70:4b:a4:26:2a:e3:40:78:99:20:fe:
4c:8e:89:80:b4:a3:e0:3b:f7:ec:f2:2d:47:86:c6:c7:c8:76:
ae:6f:41:09:5f:9a:39:2c:c2:ad:f1:de:12:2c:3a:5d:c7:10:
78:b7:8a:c2:11:53:01:69:ef:d9:a5:60:49:36:f2:20:af:c1:
06:f2:2b:09:76:de:80:7a:f8:0f:e0:fc:40:3b:72:ef:a0:02:
05:80:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:42 2026 by rpki-client