Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: IQNJ/xTxBQ05orkGSIl5Lu1ou0HFoygllvPNFpzxhMs=
Subject key identifier: 03:86:DA:C2:0C:51:59:F4:BD:7C:5D:1B:EE:2F:9B:32:B8:20:31:E3
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019E1D231310D1EE1E06DA710EDC4E3D9738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 1643
Signing time: Tue 12 May 2026 17:01:38 +0000
Manifest this update: Tue 12 May 2026 17:01:38 +0000
Manifest next update: Wed 13 May 2026 17:01:38 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: 5611HsyHt0JHAmaeZYLtK7tN01LwF86Ojh3lKfEwrqA=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:13:10:d1:ee:1e:06:da:71:0e:dc:4e:3d:97:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: May 12 17:01:38 2026 GMT
Not After : May 13 17:01:38 2026 GMT
Subject: CN=0386dac20c5159f4bd7c5d1bee2f9b32b82031e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ac:0a:34:8a:19:11:71:01:a2:b5:21:61:0c:
74:f8:04:27:66:b5:0a:8a:dd:6d:af:14:68:67:7c:
a0:bb:b8:8f:2a:7a:41:82:ef:b6:ce:92:c4:ce:1b:
cf:d5:73:00:eb:cc:b7:95:e2:79:5f:b1:23:27:8c:
95:9c:1a:ac:7c:46:0e:68:38:ff:49:cb:6d:a3:70:
d2:29:79:84:03:27:02:27:37:a8:34:32:cb:ff:e3:
f3:9d:55:cc:1f:1c:58:a5:9e:63:2f:16:4f:0a:6b:
38:ad:f6:50:b6:6c:2e:a7:2a:37:d3:57:9c:2c:15:
2f:1b:91:8d:d5:35:6e:24:cc:93:73:cc:fe:bb:ce:
91:64:b4:92:18:fd:f2:60:f1:2f:59:c8:38:3a:74:
74:19:5a:04:c4:57:6a:de:d8:76:6b:f4:07:80:82:
37:0e:b6:a5:2b:d9:17:da:c6:51:eb:79:88:e7:95:
64:22:14:60:49:4b:e1:e8:07:16:5d:a7:3b:13:e7:
28:b4:1c:f8:d4:e8:bb:3f:fd:08:75:eb:55:4f:60:
d5:21:7c:f2:37:26:e1:88:f6:b0:c2:08:26:e8:d0:
24:69:ce:1a:33:c3:68:08:31:b3:2f:13:b2:d8:29:
17:4b:5f:ef:9c:96:f8:c1:eb:b1:cc:32:a4:b8:e0:
1d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:86:DA:C2:0C:51:59:F4:BD:7C:5D:1B:EE:2F:9B:32:B8:20:31:E3
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:eb:19:f6:4b:c4:b8:2e:e0:3d:ab:bb:77:58:8e:3f:9b:69:
a3:ef:01:94:59:d8:0c:6e:40:21:66:c4:99:d7:b2:30:75:2e:
dd:78:d3:da:37:79:e6:1d:a2:05:a5:de:47:40:b8:82:5a:d2:
60:d0:98:ef:f8:a9:ae:4a:15:e1:b6:29:06:9b:30:65:ea:b9:
c2:78:ba:cc:34:3e:b1:72:2b:76:43:38:5b:58:26:c4:d6:7d:
38:44:c1:01:17:e1:ce:fd:53:d7:f5:ca:47:85:6f:a5:c6:fe:
9e:6a:9a:a5:91:e6:2c:53:b4:0f:8b:fb:f9:0a:29:27:76:13:
94:2a:ec:e4:db:2a:bd:b2:b1:fd:57:dd:97:29:3e:6a:9b:8f:
78:46:e9:77:39:41:46:6d:c7:40:0a:e3:f9:f5:e8:e8:33:41:
c8:30:5a:7a:bc:bf:d8:e0:bc:f0:c5:6e:cb:73:0a:f6:ef:ff:
cd:46:82:f3:60:0d:ae:fa:5a:f7:7d:3c:3c:2f:06:5f:eb:9c:
c6:94:80:5d:cc:7a:8c:92:be:6f:24:a6:b5:ef:8b:1c:6d:de:
aa:84:f5:50:75:ab:ed:ba:db:50:f9:7b:78:75:fa:b5:cb:eb:
b4:82:fb:00:4f:95:d3:02:1e:e1:ff:05:73:6e:bc:0e:32:df:
7f:09:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:55 2026 by rpki-client