Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: E8mViSdHGq1Ed0TRWiR+7WJrjgBeUo5De/kV9rXy8Sc=
Subject key identifier: 52:45:03:60:4E:A9:67:62:CB:C8:CE:68:44:D7:F6:B9:A9:86:7B:BF
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019E1C7E08FADC2C91BA40C265B9F829DEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 139D
Signing time: Tue 12 May 2026 14:01:22 +0000
Manifest this update: Tue 12 May 2026 14:01:22 +0000
Manifest next update: Wed 13 May 2026 14:01:22 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: 8zJhsx40yMgNbyP59aqYdQxb2QMVtp6JwKd6r/QAljM=)
2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:08:fa:dc:2c:91:ba:40:c2:65:b9:f8:29:de:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: May 12 14:01:22 2026 GMT
Not After : May 13 14:01:22 2026 GMT
Subject: CN=524503604ea96762cbc8ce6844d7f6b9a9867bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cb:2c:13:2b:43:4f:fb:19:68:f8:88:c7:5f:
d4:fd:7c:2c:a1:51:c1:1d:84:1a:cd:60:89:61:6a:
fa:e8:4e:ef:e1:ca:8f:75:1b:60:9a:e4:56:dc:13:
dd:53:6e:a9:46:80:29:18:1b:8f:93:cc:a1:fc:ff:
64:31:f8:08:91:7a:10:81:ff:68:00:89:fd:90:7e:
7b:3b:dd:6b:a7:c7:c1:de:24:fc:f1:eb:72:d9:6c:
46:5b:63:da:28:f7:c6:b1:6e:ee:37:eb:e7:f5:80:
6d:2e:c7:42:65:0a:cd:1b:c3:7f:98:ac:22:cc:c4:
42:e9:5d:cc:c1:27:91:2c:b1:d2:ce:e5:9c:20:49:
5a:50:dc:81:45:48:83:4f:28:28:8b:48:e2:89:08:
4e:1f:7b:28:b9:08:9a:10:8f:94:dc:fd:8e:c4:4c:
f7:bd:92:63:ca:dd:fb:e0:13:a4:86:21:bf:7e:a9:
b2:3b:34:cc:24:8e:fb:44:59:68:be:77:24:b4:7f:
26:3c:0c:1c:ea:dc:5c:47:47:7c:01:93:cf:43:e0:
77:64:b1:86:23:fc:ad:49:25:f1:2b:a7:b6:e8:07:
f1:f8:33:a8:1b:6d:24:b8:f2:a3:79:ef:29:bd:eb:
e2:0c:6d:4e:bb:19:ba:da:33:a2:2b:1d:c8:94:02:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:45:03:60:4E:A9:67:62:CB:C8:CE:68:44:D7:F6:B9:A9:86:7B:BF
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:74:a8:c6:24:9a:d7:93:8d:dd:a0:f0:a3:f6:82:68:62:97:
9c:50:37:ad:c9:16:b3:db:58:54:72:b5:0a:ba:74:f5:e6:a6:
71:71:f6:d4:8e:68:a1:c1:2f:d4:37:c4:a4:ce:00:d3:1d:f9:
4e:3c:be:c4:62:a7:cc:c5:5a:39:ca:af:c2:f8:5c:57:b1:a2:
b0:f0:c7:5b:bd:db:ac:f4:6b:29:4e:f7:e7:c2:40:03:28:b1:
9d:65:ad:eb:24:1a:49:fd:ad:ca:d2:ac:37:f0:75:0c:29:2f:
7f:44:15:37:db:73:89:f4:b1:61:5e:2f:f8:b8:a8:dc:8d:cb:
80:13:6f:cc:06:97:6c:24:f2:43:4a:34:36:ad:0c:ec:e5:e5:
1c:d4:ac:2b:dd:41:26:42:89:81:ab:78:91:e3:07:28:6e:af:
2a:35:aa:38:f5:10:73:11:1b:e4:94:3d:16:aa:c9:39:78:67:
cc:dd:61:2c:0a:a5:c0:f4:d7:57:0c:f6:fc:32:bf:4d:56:62:
f8:f8:48:cc:32:3c:0e:1d:49:7c:2c:f7:a9:54:32:dc:4d:cf:
48:a6:ce:2b:4f:45:52:62:3a:5a:a7:1f:3a:d1:32:63:51:c9:
38:b3:01:34:d8:e0:77:c7:fc:b0:8b:f5:b7:3b:21:fd:0d:d4:
ed:1a:73:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:28 2026 by rpki-client