Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: R0BP7Mp5HDbnBV1+DGlCNGeHvTRkX1Rp0D8bSw10Tgg=
Subject key identifier: 9F:52:B9:64:1F:5A:78:BC:44:69:B8:6C:EE:B2:B7:05:47:24:C7:F6
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 019E1C0FCCA753B73E64C1F55F672DB5ACF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 1892
Signing time: Tue 12 May 2026 12:00:57 +0000
Manifest this update: Tue 12 May 2026 12:00:57 +0000
Manifest next update: Wed 13 May 2026 12:00:57 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: HIx84PWfAl4TNM/K/a5UHEqJW4A205jDMvBQ4cbJUdE=)
2: iDMRka__bTiV5xrVoUOEpgx8MLc.roa (hash: NSjhiVi7Zw8dUQYUc4aNh0C9JclGyQ0OuMzHtV0fFdU=)
3: znqHTKf5hikGTTRKQK2RyfL6LM4.roa (hash: Wto4vlIcm8g0DdMSPQIRXQ7Ap5BLyjHEXHh3w55Efk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:cc:a7:53:b7:3e:64:c1:f5:5f:67:2d:b5:ac:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: May 12 12:00:57 2026 GMT
Not After : May 13 12:00:57 2026 GMT
Subject: CN=9f52b9641f5a78bc4469b86ceeb2b7054724c7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:13:77:41:10:f6:78:8d:3c:d0:db:46:2e:
45:2a:ed:5c:57:5a:29:3e:35:cf:b4:38:23:f8:2a:
fb:c8:d1:81:fc:8c:cb:b7:7c:61:5f:19:50:ca:88:
e7:23:41:9d:76:b2:07:81:da:3a:b7:2c:ca:39:f6:
76:25:c9:1a:3f:d7:e6:dd:49:ac:86:fd:9d:9e:f7:
48:15:6d:f2:02:83:7d:41:36:a9:43:cc:02:50:7b:
63:c0:03:78:c5:f4:3c:9a:ba:34:f3:5f:28:b1:43:
4e:a3:cb:07:5f:31:49:e2:97:d1:2b:db:5d:5d:dd:
d3:5f:dc:28:40:a8:88:39:1d:e4:73:a6:ed:83:39:
e9:b9:5f:44:f8:04:f6:75:51:a4:39:b9:bb:42:8a:
16:17:93:f4:36:67:63:81:c5:fb:5c:99:d1:4c:30:
92:1a:a7:f9:c1:83:15:d4:59:48:f8:96:fc:c5:de:
e3:36:12:77:e2:2c:82:bc:02:17:84:59:3e:d1:5e:
e3:56:6e:09:95:12:bf:89:56:75:c4:32:d4:6f:55:
73:d0:68:cc:76:e1:b9:70:7b:95:85:d2:53:db:95:
40:bb:de:62:74:48:a9:da:a6:f5:83:4c:44:81:b4:
b1:e5:eb:3f:34:02:83:02:50:e6:2c:bd:e7:11:3b:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:52:B9:64:1F:5A:78:BC:44:69:B8:6C:EE:B2:B7:05:47:24:C7:F6
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:95:fe:84:46:a0:75:70:c4:48:74:8f:bc:a6:59:c4:7d:
26:4d:d3:93:9b:42:f6:1f:7f:1e:84:98:01:e8:10:63:92:45:
a8:a0:17:be:63:20:80:72:fa:df:be:5b:b2:76:e9:5a:f0:f0:
a9:a3:d4:85:20:1e:8e:57:32:1c:4b:82:cc:b9:b2:d4:89:58:
33:5e:26:78:f3:0e:96:4e:1c:00:92:fc:c5:dd:da:15:13:cc:
ff:92:97:ab:c7:66:7f:1f:15:4b:39:8c:2e:9c:c0:61:46:e8:
64:e8:df:a5:fd:c2:db:43:d9:fc:d9:e5:01:03:86:aa:2f:78:
b4:ad:42:a2:6d:41:15:08:de:df:72:34:47:84:f7:30:69:7e:
b8:ec:af:e6:ff:aa:38:a3:47:7f:51:6e:3c:d4:97:ae:3c:fe:
6b:1f:4b:c1:d9:21:19:43:1f:81:37:6f:b7:00:6d:a5:aa:12:
74:42:8b:ab:32:a5:67:91:94:11:53:1e:5a:c8:71:39:fa:b1:
6c:a8:bb:e9:b9:ef:18:d2:64:91:e2:9b:1f:48:f0:92:b5:99:
7c:48:0e:76:1b:11:3c:fc:05:eb:64:30:7b:ff:79:e9:c9:86:
1c:bc:1e:5e:56:eb:27:f7:a7:fb:9d:6b:5b:81:c0:e9:e3:45:
86:78:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:40 2026 by rpki-client