Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: DY89MtXZCjae6Ml9VLdUzVdrEOMU9xzfnXmRVL5dmrQ=
Subject key identifier: EA:2C:AE:4D:B0:A6:8A:12:34:26:37:19:C4:29:FD:CE:2B:D2:14:65
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 019E1E35AB18B1C8280EB7D89AA08C91D89E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 12B2
Signing time: Tue 12 May 2026 22:01:34 +0000
Manifest this update: Tue 12 May 2026 22:01:34 +0000
Manifest next update: Wed 13 May 2026 22:01:34 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: 7b+2IDgl91YqNGp8OZzpU47BIOgSrqnO/Fil6ggXM/A=)
2: DhpDBX_7AhUzL9AP6J2bnK3aQ1o.roa (hash: CBUZxcykEIqcfYCfDpxjg7qtOjik95UqEoINbP51Nd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:ab:18:b1:c8:28:0e:b7:d8:9a:a0:8c:91:d8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: May 12 22:01:34 2026 GMT
Not After : May 13 22:01:34 2026 GMT
Subject: CN=ea2cae4db0a68a1234263719c429fdce2bd21465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:b0:d9:4d:51:68:a9:82:be:c1:06:c7:d0:
24:42:bc:d5:d3:4b:6c:04:5a:f9:de:c0:79:81:12:
43:14:6a:f7:b8:9b:16:e8:b4:8c:16:1d:6e:50:68:
17:53:2b:45:78:be:b8:d0:a0:a3:5e:07:ca:9e:29:
c4:04:32:08:ef:7e:a2:b2:b4:f0:dc:67:31:96:fb:
98:4b:ed:d3:d3:4a:92:3e:42:d2:1d:51:48:ba:6f:
13:f4:2c:b4:4f:85:f7:28:52:88:c6:3d:d7:bb:10:
b4:5a:b0:e1:e6:76:46:68:87:a4:a4:ca:41:d5:aa:
17:98:fa:7a:ca:8e:53:f3:b6:ce:d6:81:da:a0:9c:
3e:b8:f7:8a:61:3b:00:72:f1:ce:95:8e:13:ac:80:
08:73:32:8f:40:a8:5f:b8:b9:87:72:8f:c8:ed:47:
c7:75:ae:21:26:51:ce:ef:bb:8f:48:7b:b6:28:e0:
e9:12:a2:35:fe:83:f6:6d:92:33:8e:fc:42:68:36:
c3:0d:20:b9:41:69:2f:c9:83:ca:7c:84:a9:cb:d8:
3d:69:7e:7b:c5:7c:49:bd:21:02:b6:cc:c5:a0:8a:
12:df:25:a7:ec:7b:a6:4d:43:b1:5e:7e:4a:a2:20:
ba:1e:9f:4d:33:63:df:86:0b:1e:17:f9:2c:1a:5f:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:AE:4D:B0:A6:8A:12:34:26:37:19:C4:29:FD:CE:2B:D2:14:65
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:44:88:a9:f2:47:23:a0:45:cf:2d:1f:a5:d1:e0:d0:ba:1d:
f9:89:d4:92:21:ac:ea:4c:37:a4:1c:60:10:65:cb:b6:eb:bc:
11:71:c6:55:39:db:c7:bb:35:60:2b:b7:f4:cf:5d:f1:c0:67:
9f:38:5d:f3:0a:b8:1f:f1:60:93:67:16:8b:91:d2:0b:dd:75:
50:d3:31:18:06:30:e1:f9:83:cf:bd:30:7d:e0:79:aa:b2:bf:
9f:79:b1:f2:a3:f4:d3:27:f5:0d:8e:08:52:c3:38:17:34:c2:
82:62:ae:57:fc:a9:56:ef:10:2e:b5:6b:05:ef:67:01:55:1f:
65:21:1d:a9:44:7b:de:ff:5c:bd:45:d6:56:77:41:d1:a5:6f:
c1:dc:ca:a2:18:32:14:b7:16:6c:6f:cd:ad:5e:ba:3d:06:41:
38:4b:f3:2a:f3:b7:72:13:90:7c:a5:1a:e9:65:6d:c9:e5:01:
d7:60:a7:bc:06:32:c2:cd:96:85:de:21:83:0c:1e:88:19:25:
22:60:4c:53:6b:a1:fc:2b:f3:6e:d8:86:49:dc:28:37:8c:eb:
ec:97:f5:d3:0b:f9:f0:e1:ad:a0:2d:b8:47:aa:1c:00:b6:0c:
d9:fa:79:8f:e6:20:91:9c:88:da:fb:53:71:a1:70:73:78:fa:
0a:38:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:40 2026 by rpki-client