Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: 4Knd1pbdjNjAkmnn+yk2f434b6GxoXoP8RbAvucMfbs=
Subject key identifier: 8E:8D:62:DF:C8:DA:1B:ED:33:38:6D:FA:6D:7C:0F:51:67:64:38:11
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019E1CEB94E60DF6D96AB1675D28D3365D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 1024
Signing time: Tue 12 May 2026 16:01:01 +0000
Manifest this update: Tue 12 May 2026 16:01:01 +0000
Manifest next update: Wed 13 May 2026 16:01:01 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: BZ8evzbKkhH3+MtvIsWTyEOWFU9X0U97d2ke6M4jAV0=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:94:e6:0d:f6:d9:6a:b1:67:5d:28:d3:36:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: May 12 16:01:01 2026 GMT
Not After : May 13 16:01:01 2026 GMT
Subject: CN=8e8d62dfc8da1bed33386dfa6d7c0f5167643811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:4b:e8:e8:5f:80:f2:bd:4f:53:a1:90:14:
b5:5d:ab:68:ec:58:36:36:d8:61:43:bf:a5:c8:eb:
40:36:31:31:1e:71:e0:92:41:c8:34:c8:c2:b4:8e:
f9:12:ff:3d:dd:ef:89:e2:38:90:e8:4f:8c:26:32:
be:4f:57:5a:59:ca:01:2d:8e:07:51:a5:e7:9b:15:
32:e9:41:d9:31:69:be:ff:53:03:e7:e0:8e:48:84:
e8:c7:43:8c:b6:ad:9c:c4:9f:c1:6a:d3:04:5f:84:
b0:bd:e7:78:2b:e3:22:7f:6c:3d:b2:e9:14:ea:5b:
b0:05:f0:8b:fb:d1:39:68:3b:be:79:a8:91:b7:e9:
0e:8a:fd:15:32:87:79:02:24:12:9c:9d:b8:dc:57:
3e:0b:a6:e9:93:f0:e1:12:33:d9:8e:13:5a:c2:81:
86:95:a2:c8:b8:2d:86:aa:c0:77:11:48:3e:2f:4c:
04:9c:c8:bf:1e:86:f9:fb:88:0c:6f:57:91:dc:02:
df:1a:41:ad:9a:9f:1b:e7:9d:10:2c:59:f6:d6:1a:
ef:b3:bf:c3:2b:53:5c:16:a1:64:dc:4e:72:7d:a9:
75:a5:0c:0c:35:12:f6:20:9f:90:e6:c3:14:7a:bc:
4b:e7:13:d7:b9:8a:4b:81:fd:5d:1d:3c:59:61:09:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:62:DF:C8:DA:1B:ED:33:38:6D:FA:6D:7C:0F:51:67:64:38:11
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:61:3a:a3:e5:8f:ba:d7:ed:5e:09:52:c2:44:7e:ac:4d:41:
e3:9b:4f:fa:81:0c:0e:07:75:db:c1:6d:a0:47:36:a1:01:90:
2e:c8:1e:5c:1e:0c:e7:6f:48:db:a3:73:e2:18:de:f9:30:50:
93:c6:f8:79:55:e6:2a:a1:78:2c:18:6b:50:a5:49:2e:05:3b:
c5:7f:fe:d9:5b:13:7a:aa:5c:c0:a3:2a:c3:8b:54:51:72:26:
2b:8d:9b:e8:4b:f6:04:d9:db:de:c6:4f:bb:02:c8:97:f1:99:
4b:9d:3e:0d:b0:04:ab:68:65:a2:cf:ed:8c:ff:a7:c0:14:1d:
3d:fe:2c:fa:e8:e6:3b:8e:92:06:53:a2:dc:4f:f0:9a:e4:56:
0e:84:29:12:cd:4c:da:d6:c9:9f:37:ec:9f:0d:29:d9:04:1f:
74:63:32:44:09:72:d8:ac:70:f7:79:a5:d8:e6:ea:d1:8d:94:
96:d9:12:41:6e:af:9f:a7:bb:d0:c7:32:dd:d4:75:db:8d:47:
69:47:1c:a0:01:d0:06:75:e1:e3:54:69:4d:b2:7e:c9:ec:a7:
91:cf:51:de:7a:1c:cb:b0:7b:9f:18:d3:75:30:85:a9:1e:e6:
52:e9:54:c4:20:45:89:09:86:c7:c7:85:3d:9e:5f:69:e7:08:
1b:93:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:27 2026 by rpki-client