Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: gm9xSiXcqciMR2F82CeiabjuQ/NvuMK5PXuydryQaXg=
Subject key identifier: 8A:C9:6C:4F:AE:20:1C:83:23:8B:2B:00:B3:6A:F2:5E:86:3E:50:96
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019E1C7DFDF2ACEF0424E944E9D44379DC3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 14:01:19 +0000
Manifest this update: Tue 12 May 2026 14:01:19 +0000
Manifest next update: Wed 13 May 2026 14:01:19 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: QjefP1bh55EP8PPkenUKV0M1BgaL2+D1hYvpy4qEkwk=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:fd:f2:ac:ef:04:24:e9:44:e9:d4:43:79:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: May 12 14:01:19 2026 GMT
Not After : May 13 14:01:19 2026 GMT
Subject: CN=8ac96c4fae201c83238b2b00b36af25e863e5096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:99:02:9d:c4:19:3e:22:5e:6a:1e:f3:32:
81:09:c8:22:be:d7:0e:1c:37:17:0a:f8:c4:54:d6:
b7:24:e0:d9:d5:46:30:48:60:a4:df:bc:c3:88:5f:
d7:2c:aa:74:b9:7b:83:12:a8:23:c1:52:f2:c2:ff:
22:1a:d5:3c:0a:0a:72:ea:ab:22:ed:d7:61:ec:01:
bf:ac:bd:ab:59:0a:3b:74:b3:ee:36:0f:0c:65:65:
a5:12:a0:2d:18:78:1d:50:b5:35:0e:57:62:97:06:
1e:1e:cb:36:f4:40:0a:34:38:c3:9f:b6:ff:bf:55:
f7:95:aa:84:2b:5c:50:aa:ac:f0:19:ec:38:fb:f2:
9b:7c:c2:45:b0:8a:e9:00:a5:be:0c:fb:ce:2f:e4:
3b:0f:2c:90:4f:95:26:6a:aa:72:0e:40:f6:25:41:
95:7d:1c:3b:54:89:2e:65:95:02:41:2a:70:ba:d8:
ef:87:ff:22:c9:a1:c2:ec:24:d9:5a:81:cf:25:b8:
71:f8:7b:91:4a:ff:52:69:56:28:76:ed:fe:e7:76:
23:8c:ce:9f:71:ae:3d:be:a8:ec:48:0d:4c:e9:d6:
e5:68:7d:c9:fc:77:04:9a:0f:42:76:e0:92:48:4f:
91:52:d9:48:eb:48:26:ac:60:72:23:c2:70:5d:54:
fb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C9:6C:4F:AE:20:1C:83:23:8B:2B:00:B3:6A:F2:5E:86:3E:50:96
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9e:2c:ee:fa:9c:8f:41:f7:43:f0:bc:ab:0b:17:30:13:49:
81:19:04:e4:f9:44:42:e7:de:94:f4:33:94:3e:29:81:2a:21:
d5:ca:b1:d5:57:cd:a3:18:d6:c9:c4:b2:52:6e:0a:31:86:fb:
d9:58:a0:b5:b4:6b:56:e7:e7:f5:8b:39:c1:0f:58:12:3f:ff:
da:57:fe:ab:9c:55:ca:e8:fd:88:42:c0:86:9f:67:0f:3a:9f:
b0:46:69:0d:4e:5a:f8:bd:24:10:b9:f5:d7:b9:01:ba:78:ba:
36:fd:71:7b:35:b0:0f:3c:fe:94:76:9a:35:f5:b4:de:43:7a:
31:cd:fb:dd:59:b3:f2:04:56:e7:52:b3:da:fe:c6:4e:b7:f0:
98:9c:5a:2d:24:8a:b0:c7:01:87:ce:b0:6d:00:d5:32:1d:72:
5e:8e:ca:93:e9:b2:b2:1d:24:de:4e:62:ff:7d:a4:91:40:e2:
e0:3d:12:02:35:85:26:ea:6d:63:eb:19:39:61:0a:b3:a6:1e:
ee:d7:3f:cc:ab:2f:e1:cd:e6:e6:e9:b8:54:cf:cb:9f:df:4e:
09:7f:51:01:8d:dd:ae:ba:b2:ef:44:0b:4c:51:f5:9f:fa:f4:
e0:7b:c2:17:55:75:4b:ed:74:15:4a:ac:0c:31:65:a7:c7:1e:
d2:a8:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:41 2026 by rpki-client