Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: sPrLA7OSmZm4XC+XcuBltuVakWRX5L6zQvW4/LL5ZhU=
Subject key identifier: 63:4B:96:97:98:25:DC:D2:DB:61:24:D0:A2:31:92:22:32:1C:89:F1
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 019E1D22D6E9DCAEB7214E54D6297D2AF8B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0D45
Signing time: Tue 12 May 2026 17:01:22 +0000
Manifest this update: Tue 12 May 2026 17:01:22 +0000
Manifest next update: Wed 13 May 2026 17:01:22 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 90i9JxziBKjnT8LYGt8mCSMYtypmcWjh897x6PVhWNk=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:d6:e9:dc:ae:b7:21:4e:54:d6:29:7d:2a:f8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: May 12 17:01:22 2026 GMT
Not After : May 13 17:01:22 2026 GMT
Subject: CN=634b96979825dcd2db6124d0a2319222321c89f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:81:a9:2a:66:e8:a0:ad:97:74:1d:be:94:8c:
75:c6:81:97:e6:e1:d5:bf:75:76:ac:c3:bd:e6:08:
d3:4d:35:f8:93:84:99:f5:fa:1c:f6:8f:0e:96:1f:
45:e3:17:12:5b:d7:59:96:52:64:e5:66:c8:ef:1e:
71:b1:d2:44:da:62:9c:49:49:6d:ea:8e:94:fa:bf:
df:a0:83:34:a0:9d:29:42:87:c1:74:90:c6:16:10:
56:2f:c5:31:a9:16:63:88:05:d0:00:7c:7c:3f:1a:
09:68:c8:fa:60:f8:76:03:e5:b6:8e:4a:f7:41:3c:
a3:ac:42:19:9f:0c:66:e5:da:bd:48:78:8f:80:1d:
f9:f0:6d:40:c1:5f:9b:57:3b:75:f6:79:86:d2:4c:
36:83:ec:f0:4d:21:3d:2a:00:3e:d5:66:99:38:fc:
f9:fe:bc:a8:5b:02:c0:f2:6e:8b:8b:15:b2:9e:eb:
e4:e7:1f:3a:cd:ad:2d:17:13:e2:c3:04:41:51:68:
0c:9e:a5:63:20:51:85:9d:b8:78:81:4b:8d:74:c2:
77:18:16:ea:0e:d3:cb:0b:18:e5:a3:4c:07:d8:76:
1c:01:ab:0a:73:43:e2:4b:fe:ec:82:a4:d7:64:05:
c8:bf:8e:5c:2b:3a:1f:6e:f4:11:27:97:1c:09:dc:
93:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4B:96:97:98:25:DC:D2:DB:61:24:D0:A2:31:92:22:32:1C:89:F1
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9a:f7:a1:ca:52:1b:30:ba:90:57:30:84:94:75:77:f5:cb:
d4:be:10:15:aa:cb:53:13:d2:18:91:60:c2:2f:f4:32:cc:d3:
69:5c:3f:91:18:75:4f:55:c8:31:89:83:c2:e8:22:e1:b6:62:
42:26:b9:64:34:92:ad:5c:05:2b:88:77:01:61:0c:c9:5c:48:
f2:d5:5e:14:e9:29:8b:9a:5c:c4:e7:62:07:24:6d:20:6c:ea:
10:be:8e:cb:a9:4a:39:78:97:46:ae:6a:5d:83:da:65:9c:50:
5a:64:50:32:ba:d9:76:1e:4a:15:43:6b:48:16:ce:ee:13:9a:
ce:7e:ab:02:b9:33:56:b4:42:04:3a:7a:96:89:de:60:cd:88:
07:04:d0:46:b0:b2:3e:16:09:97:fc:40:c7:c7:a4:dd:98:ee:
c7:24:75:0d:e4:23:63:e5:2f:5d:d5:ae:79:2b:1a:f8:81:67:
7d:de:f9:24:00:d3:5e:8a:97:7a:3d:c5:83:83:ee:d4:89:03:
95:a6:6c:e9:bd:12:ef:bb:9c:b4:3c:6e:e9:cc:a3:84:6f:1c:
04:cb:9f:2e:0a:f5:1a:e3:11:b0:03:fa:1b:f7:45:ee:59:b0:
1c:04:78:6a:7d:a1:8f:cb:51:f6:1f:47:e4:78:de:ba:8b:43:
d9:32:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:24:05 2026 by rpki-client