Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: 4xDaifp5oMb1evbfYDpP9v6slRGWmzpRpYoUFRgYIFU=
Subject key identifier: 3D:B2:00:A9:7C:05:64:E5:32:AE:A4:BB:CB:03:3C:3F:68:11:B0:F4
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 019E1CEBBF6BF76859A55FCAF372C7164C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 16:01:12 +0000
Manifest this update: Tue 12 May 2026 16:01:12 +0000
Manifest next update: Wed 13 May 2026 16:01:12 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: zcQmmetoEC9ZxjzvXaRoHNj63cDUFoyk/I9WNun4aak=)
2: Xt7SYxDoMD7f1JMsQqo2iBPwXMs.roa (hash: WGtYGe9kCICp8bvBpPPbaske1TWvTE4WqSyYb2snIwU=)
3: cAmf4fFwxBOF5X-O_EChDpWAvt8.roa (hash: S1GNYBesOR3SinnMOoqnXekNsmRmZx3vpxOqHl53nP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:bf:6b:f7:68:59:a5:5f:ca:f3:72:c7:16:4c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: May 12 16:01:12 2026 GMT
Not After : May 13 16:01:12 2026 GMT
Subject: CN=3db200a97c0564e532aea4bbcb033c3f6811b0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:cf:d0:db:58:99:12:2d:32:5f:59:5f:a9:
ca:91:4b:b6:25:bd:d7:23:db:59:cc:dc:c5:97:75:
a8:75:d7:63:c7:72:ec:a1:f9:a4:ef:23:e8:2c:c7:
ee:d5:ca:fd:60:68:63:43:aa:3b:b3:7e:16:ac:7e:
77:9b:a9:05:3e:d1:d6:b5:b0:68:7c:e0:8f:30:c3:
89:c0:4e:e1:2a:96:89:83:94:a9:2e:a8:ed:0a:0e:
bd:f7:32:d2:3d:58:12:2b:f0:ce:8d:dd:36:41:70:
f3:28:41:6a:98:83:8c:dc:21:ab:c5:3e:6c:f1:d2:
ec:8a:74:bb:4d:f7:79:0b:b3:30:31:f3:fe:19:89:
7f:8c:6d:d1:5c:b8:2d:ad:e4:b9:72:bf:73:18:55:
30:36:17:44:21:0d:c9:a0:60:29:94:8d:54:be:ad:
5b:de:32:1d:ec:78:d7:61:f8:28:34:67:7a:80:54:
e9:63:91:a9:7a:3c:a1:6f:47:f7:12:b4:ce:43:d3:
14:3f:be:12:60:a4:dd:e6:f7:b9:86:d8:9a:0f:58:
87:f2:a1:1d:ac:46:c3:bd:94:89:40:8e:42:65:51:
21:d3:6e:da:ff:87:1f:6c:94:89:53:44:2e:26:7d:
c5:3e:67:aa:78:a0:21:49:fb:b9:92:47:bb:56:c7:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:00:A9:7C:05:64:E5:32:AE:A4:BB:CB:03:3C:3F:68:11:B0:F4
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:61:1e:8f:8d:33:41:93:08:00:c0:84:a6:97:91:cf:c3:c9:
cc:b3:0b:f8:3a:a7:99:7b:c6:71:83:26:cb:9e:18:65:58:44:
57:0d:4b:6b:03:84:d2:48:d0:f4:fb:2f:a7:c3:25:87:04:87:
6b:d8:84:84:c5:0b:b1:8e:53:d6:08:25:f0:24:f9:4c:30:0c:
9d:75:28:1b:9e:ed:43:4c:26:61:89:d4:39:8b:cd:69:db:be:
cd:31:3a:47:d5:83:2a:ea:ac:28:1a:99:0e:75:13:b1:1f:71:
31:da:fc:24:6f:b8:68:9a:c3:2b:57:d4:91:ed:f6:af:eb:d9:
97:35:c9:44:cc:71:b5:8f:51:6d:03:e5:67:9b:d8:fe:2f:56:
5f:c2:8e:02:ce:d0:28:ac:48:3c:23:d9:75:03:aa:67:63:69:
66:03:7e:cb:37:e2:68:a1:79:92:4e:51:b2:73:c2:50:e2:6b:
77:7e:f4:5f:02:7f:66:59:81:c9:94:bf:be:42:75:7d:ef:01:
a7:b4:69:c0:70:ad:67:f1:bc:5d:2e:8f:1f:03:f4:96:75:1c:
47:e1:fb:73:cc:73:d4:1b:d5:d7:fe:e5:bf:fa:80:68:44:35:
b6:70:84:be:e6:ed:2f:25:04:74:57:7e:9f:8d:05:8e:b7:c6:
8d:3e:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:35 2026 by rpki-client