Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
File: 1bAhsehBJlk8722YgDQTqnLQAeA.mft (raw, json)
Hash identifier: K7/tkYd7Zzr0DlZx0WAU4bFyO2K5GpvYmB+zCGPfP8E=
Subject key identifier: DE:4E:51:00:E2:E3:07:94:C0:04:ED:D9:A1:4B:41:84:6F:0F:14:05
Authority key identifier: D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
Certificate issuer: /CN=d5b021b1e84126593cef6d98803413aa72d001e0
Certificate serial: 019E1FB577451D59A7E18BD81A4FA19C9734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
Manifest number: 0234
Signing time: Wed 13 May 2026 05:00:46 +0000
Manifest this update: Wed 13 May 2026 05:00:46 +0000
Manifest next update: Thu 14 May 2026 05:00:46 +0000
Files and hashes: 1: 1bAhsehBJlk8722YgDQTqnLQAeA.crl (hash: 8dAsfgQRwnHdu0F1EVca2tFKcRzuQr57Ejc1d4JOIxQ=)
2: J4-0xOuc7ybl1SkKKEI_GYBUqr4.roa (hash: 2q5jjo4zIqBtwYfXVL0EEJ2OzEi2CDWkpY8YOeiu7aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:77:45:1d:59:a7:e1:8b:d8:1a:4f:a1:9c:97:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b021b1e84126593cef6d98803413aa72d001e0
Validity
Not Before: May 13 05:00:46 2026 GMT
Not After : May 14 05:00:46 2026 GMT
Subject: CN=de4e5100e2e30794c004edd9a14b41846f0f1405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b7:d8:2f:d9:0f:be:27:eb:d9:b3:c0:24:89:
ef:4e:e3:de:01:5b:4c:80:5d:22:51:6b:93:cc:78:
62:c2:ca:3f:59:8e:05:b4:22:af:e0:f1:1d:d0:2c:
d6:12:43:4e:46:6d:f4:3e:fb:c7:2d:ab:93:a1:8a:
4b:86:ff:5b:9a:76:16:0a:4e:5a:b3:b0:49:2f:cc:
a1:47:62:b5:fc:11:72:3e:53:a5:de:47:30:e4:b5:
c1:71:6c:cf:62:67:23:39:74:82:90:2a:49:63:0b:
f9:e0:a7:83:b8:40:01:d5:a7:69:d5:9a:4f:44:d1:
79:e5:e2:a4:be:65:60:12:d8:be:b3:9e:85:73:d3:
84:a6:ab:b2:4d:72:8a:d4:22:01:55:10:00:12:11:
a5:ab:bb:e9:85:04:22:e1:f8:fc:33:74:38:73:d5:
32:9c:90:7a:96:d9:3e:e9:23:36:67:fb:fa:0b:2f:
20:78:50:69:7f:81:d5:a6:54:54:4f:a1:9e:d5:9c:
e2:e1:f8:68:f5:d8:bd:30:9a:18:bf:68:45:4e:59:
4d:ea:6b:54:a8:38:bc:78:74:e6:ec:b6:39:fb:82:
17:f5:12:40:b4:e4:ee:4d:cb:62:73:64:b5:45:89:
d1:36:a9:1a:b5:b8:7b:02:c2:4b:3b:dd:da:c0:c7:
ff:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4E:51:00:E2:E3:07:94:C0:04:ED:D9:A1:4B:41:84:6F:0F:14:05
X509v3 Authority Key Identifier:
keyid:D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d3:84:1d:8b:1a:30:62:b4:83:0c:e5:50:73:6c:c8:2f:3d:
9e:cf:c9:d3:d6:28:e0:3b:31:ab:8f:87:07:bf:e3:58:f9:68:
a9:5d:a7:e2:a7:b2:1e:4c:a6:19:1b:97:e3:a0:84:29:13:55:
73:31:d4:e1:b9:54:fd:00:e6:0a:47:1b:db:bf:cb:b9:c1:40:
63:54:1f:9f:ee:39:c2:8e:16:0b:80:8d:ba:d2:df:30:39:37:
87:86:2e:17:bf:92:0b:f9:e5:68:89:c0:72:95:2f:ab:79:9f:
1f:82:e7:22:1b:0f:0d:10:a6:98:2c:ab:7f:a7:00:33:10:d7:
ee:44:79:53:26:3d:31:54:cd:36:7d:43:d5:d1:bb:d6:12:54:
2e:58:64:2b:3b:37:ed:23:e5:44:b2:bd:95:fc:8b:ec:0c:6c:
b5:a3:1a:88:0a:90:52:8a:c4:dd:ef:a1:23:e0:d0:0e:d6:40:
78:7c:13:63:4b:b1:d0:3c:52:69:2c:e6:bf:fb:7d:8c:85:88:
8c:3b:05:38:2f:5b:63:c7:db:98:1a:1e:0e:3b:86:a0:88:b2:
8c:cd:29:bf:33:c7:4a:1e:83:51:ce:c7:b7:4e:d7:ab:59:36:
b7:16:e2:cb:00:7c:cd:b8:6f:c0:d4:71:f5:99:6e:94:ba:8f:
f1:9d:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:03 2026 by rpki-client