Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: Qqsg0HDmE31x7cxwBml3m4YRF2gKgB+2zY++DyesCCg=
Subject key identifier: CB:14:39:C2:AE:54:8F:86:BA:D9:35:F3:29:3B:C9:92:6E:2D:F9:BB
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 019E1EA398EEC8D0104910CC73E8AFB4C777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 0737
Signing time: Wed 13 May 2026 00:01:38 +0000
Manifest this update: Wed 13 May 2026 00:01:38 +0000
Manifest next update: Thu 14 May 2026 00:01:38 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: s1iXMAkGin1EIcm7eYxXWtFHKz2yWM7CmuBP8AeloUU=)
2: Lljg_xH1KTEyF8YtQpFDhU2fq9M.roa (hash: G0j8nubF5nQiwgPwwabVEZQZZTMIJxsI563KIITxMI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:98:ee:c8:d0:10:49:10:cc:73:e8:af:b4:c7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: May 13 00:01:38 2026 GMT
Not After : May 14 00:01:38 2026 GMT
Subject: CN=cb1439c2ae548f86bad935f3293bc9926e2df9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:80:b7:67:6c:f4:be:9c:45:01:55:e4:48:49:
81:30:4d:f6:6f:2c:08:23:85:8b:d6:19:32:9a:e2:
6d:21:a9:cc:d2:36:ea:e4:af:8a:81:b2:ac:8e:21:
0f:dd:4e:95:28:4b:1c:e1:37:c4:a9:71:b1:c9:02:
ff:e4:47:08:ec:5b:1e:82:06:d1:62:b9:c6:4f:44:
0d:83:07:82:b9:70:63:3d:0d:7c:c3:fa:08:76:a4:
39:1d:f0:31:46:d7:06:02:3f:7d:f9:c2:0d:04:df:
4a:04:9a:ec:7e:3b:cb:7e:0c:42:95:3f:37:34:1a:
11:b8:d1:df:5a:f4:82:93:d6:72:ea:5c:26:59:d8:
a6:67:31:aa:85:62:c8:92:3a:44:fb:e5:f5:cd:f2:
70:d0:f3:fb:c6:e0:5d:8c:36:84:e7:6f:e7:f2:e6:
3f:fc:dd:00:84:66:bd:34:eb:b7:96:13:a2:6f:e5:
b6:fe:b1:62:ba:c8:91:bf:dd:8c:55:d3:82:74:93:
ae:c9:ed:5d:9d:1d:cb:87:7c:c2:d2:e5:2a:d8:87:
c0:ab:ae:a3:7c:2d:89:d9:0f:ff:51:72:2c:49:8e:
74:43:7e:50:b7:c1:ab:41:ee:e5:7c:c6:60:4c:dc:
1b:1f:85:a0:8f:1d:1b:21:9e:4b:d8:16:f2:c8:5b:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:14:39:C2:AE:54:8F:86:BA:D9:35:F3:29:3B:C9:92:6E:2D:F9:BB
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:44:00:2b:23:26:8c:45:e4:59:aa:49:57:49:64:ff:73:98:
1c:11:16:c5:3f:f9:b1:52:7e:b4:ee:5d:6a:3d:4f:0e:5c:44:
53:3d:72:db:fb:47:9d:c6:d5:ff:e3:28:2d:5c:8a:e3:45:24:
5e:83:b7:67:0c:8a:74:8e:4c:c0:d6:12:fd:2a:6c:84:c2:b8:
f4:ac:e3:dd:73:a2:dc:fc:bf:7f:a7:80:38:e0:84:68:d0:43:
b9:a5:f8:ea:0c:ee:12:76:27:43:45:ac:b6:42:f1:15:9a:6d:
32:ff:df:70:15:ea:21:04:f3:44:f2:3d:71:4e:0d:24:f7:31:
f4:2f:24:66:16:d8:e2:5b:33:f2:d0:5e:39:4e:c7:dc:a2:5a:
80:a0:01:0a:bb:59:82:5a:9b:2f:34:55:63:85:fc:ac:f1:46:
b6:3b:81:59:2a:23:8d:33:41:cf:ed:f9:27:13:25:ec:c2:28:
f3:d1:87:87:da:7a:c5:1f:25:82:8d:bd:19:8a:50:d9:ee:8d:
2c:2d:1b:09:8d:10:92:9c:39:cd:a9:38:cb:fd:27:51:bf:54:
3f:a5:1a:eb:59:53:ba:ad:b6:c7:a7:68:48:3f:3a:cc:16:57:
16:f3:9f:c2:93:ae:93:5d:58:3f:22:b4:d9:d5:0a:3b:c9:97:
ba:ee:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:33 2026 by rpki-client