Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: EWN/pVMeHc9aqwKBrGCFvFCWQHoGCV3eC2XR6xRta9A=
Subject key identifier: 9A:96:09:D5:3F:57:BD:FF:BF:57:52:69:F8:3C:3C:63:5C:AD:BE:DA
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019E1E3526B3BE1EDCC3E4C42B40A6ED2E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 1484
Signing time: Tue 12 May 2026 22:01:00 +0000
Manifest this update: Tue 12 May 2026 22:01:00 +0000
Manifest next update: Wed 13 May 2026 22:01:00 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: u8GRif3H3MXH7XkhX9pLFy29sz/ErSbiu150tU1uohg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:26:b3:be:1e:dc:c3:e4:c4:2b:40:a6:ed:2e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: May 12 22:01:00 2026 GMT
Not After : May 13 22:01:00 2026 GMT
Subject: CN=9a9609d53f57bdffbf575269f83c3c635cadbeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:e0:7b:4d:6d:84:7d:eb:9d:46:a7:6f:fa:
0b:1d:31:5b:9d:97:26:ca:ad:f7:5b:9c:24:68:00:
5f:80:f1:f0:1f:45:80:5e:37:0e:13:c9:e0:ad:30:
e5:8b:5b:34:61:be:d2:bf:7e:58:85:53:b2:23:3f:
44:3b:e7:f6:ed:91:7e:b1:35:4a:33:16:13:81:47:
54:4b:9c:b2:ef:22:a5:79:a5:df:b2:91:b5:d7:3b:
e8:ba:8e:4e:83:7e:50:0c:a2:62:59:63:f4:83:bb:
5a:bd:c6:c4:e7:4d:fe:d0:10:d3:a3:60:b7:22:ee:
3a:8a:a1:c8:90:77:49:52:d6:e0:c7:e2:28:67:e5:
52:54:a9:90:b1:25:b8:13:eb:92:f9:c5:e1:c4:69:
58:19:4a:f5:09:04:9e:e9:35:df:72:ad:01:cb:f1:
84:2a:7b:8d:e6:be:80:94:42:5b:94:11:95:d0:9f:
9c:fb:a0:39:f1:04:5e:73:69:6a:3e:59:28:54:c9:
23:05:73:6f:c7:31:6a:3d:5e:e7:a6:d2:9b:54:95:
1a:a1:ec:7a:49:f3:2c:9f:1d:ae:26:52:b6:93:05:
3e:00:24:d6:8f:a7:b6:23:d4:51:cc:89:91:6f:8d:
1f:c9:be:ef:44:1b:55:8f:b4:b5:c7:c0:95:80:39:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:09:D5:3F:57:BD:FF:BF:57:52:69:F8:3C:3C:63:5C:AD:BE:DA
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ce:db:ee:ca:b5:1b:c7:ac:14:00:0d:fd:df:74:a2:3a:e1:
e2:b2:b0:67:e2:0c:8a:b0:8c:f8:5a:e4:96:de:28:35:f9:3b:
7c:45:02:0a:67:55:d0:e7:8e:62:fd:6c:3a:4d:9a:f7:a0:dd:
82:55:17:2d:43:3c:52:ef:f9:02:f5:61:d1:f6:90:a9:af:34:
7c:80:68:5e:da:bd:76:04:ac:49:2a:14:65:c2:34:73:83:e6:
93:e8:70:db:2a:70:c4:4e:c3:6f:64:9b:0a:35:e2:72:5b:22:
0e:8c:d8:54:08:38:8d:bd:6b:11:5d:a6:d2:74:7d:e9:35:c4:
b5:48:94:d0:38:18:d2:d9:4e:18:4b:47:6b:e5:d7:c6:be:e2:
ef:a5:ce:1e:36:96:03:72:b8:55:fe:8d:7b:3b:c8:be:eb:e8:
81:48:ed:d7:2e:42:28:3a:f9:28:eb:60:c1:22:27:cc:41:17:
a6:f0:ef:97:72:99:d7:72:8b:32:32:93:33:9b:e7:a9:1c:59:
67:15:9f:18:c0:15:aa:1a:e7:a7:0f:60:8e:7f:45:1e:21:a3:
58:00:4a:55:e5:47:aa:f2:43:59:a3:af:c3:0d:e9:9f:e8:2c:
bc:f2:c0:dd:dc:83:9e:ef:48:2c:70:e5:1c:d8:2a:5e:1d:21:
5a:e6:a1:7d
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4eNSazvh7cw+TEK0Cm7S4gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTA5NGRkNTg2ZWM5YzgyZDFjMTY5MzBjYWY2YmJmZWYy
MWI1YjUwHhcNMjYwNTEyMjIwMTAwWhcNMjYwNTEzMjIwMTAwWjAzMTEwLwYDVQQD
Eyg5YTk2MDlkNTNmNTdiZGZmYmY1NzUyNjlmODNjM2M2MzVjYWRiZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCbge01thH3rnUanb/oLHTFbnZcm
yq33W5wkaABfgPHwH0WAXjcOE8ngrTDli1s0Yb7Sv35YhVOyIz9EO+f27ZF+sTVK
MxYTgUdUS5yy7yKleaXfspG11zvouo5Og35QDKJiWWP0g7tavcbE503+0BDTo2C3
Iu46iqHIkHdJUtbgx+IoZ+VSVKmQsSW4E+uS+cXhxGlYGUr1CQSe6TXfcq0By/GE
KnuN5r6AlEJblBGV0J+c+6A58QRec2lqPlkoVMkjBXNvxzFqPV7nptKbVJUaoex6
SfMsnx2uJlK2kwU+ACTWj6e2I9RRzImRb40fyb7vRBtVj7S1x8CVgDk+jQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJqWCdU/V73/v1dSafg8PGNcrb7aMB8GA1UdIwQY
MBaAFPkQlN1YbsnILRwWkwyva7/vIbW1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SQ1UzVmh1eWNndEhCYVRESzlydi04aHRiVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvY2IyNjg3LWJhODktNGI3ZS04YjQ3
LWQ3YTE4YTE4M2Y3YS8xLzEtUkNVM1ZodXljZ3RIQmFUREs5cnYtOGh0YlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4L2NiMjY4Ny1iYTg5LTRiN2UtOGI0Ny1kN2ExOGExODNm
N2EvMS8xLVJDVTNWaHV5Y2d0SEJhVERLOXJ2LThodGJVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjM7b
7sq1G8esFAAN/d90ojrh4rKwZ+IMirCM+Frklt4oNfk7fEUCCmdV0OeOYv1sOk2a
96DdglUXLUM8Uu/5AvVh0faQqa80fIBoXtq9dgSsSSoUZcI0c4Pmk+hw2ypwxE7D
b2SbCjXiclsiDozYVAg4jb1rEV2m0nR96TXEtUiU0DgY0tlOGEtHa+XXxr7i76XO
HjaWA3K4Vf6NezvIvuvogUjt1y5CKDr5KOtgwSInzEEXpvDvl3KZ13KLMjKTM5vn
qRxZZxWfGMAVqhrnpw9gjn9FHiGjWABKVeVHqvJDWaOvww3pn+gsvPLA3dyDnu9I
LHDlHNgqXh0hWuahfQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:00:44 2026 by rpki-client