Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: hA9eIM9Gs+XG8psZ7cUQbhYYnq7lsvYaq7zDF91MMNo=
Subject key identifier: CC:0F:57:C1:5E:F8:35:58:C7:45:2A:77:A0:44:4C:F1:3A:9C:11:DC
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019E1CB5183609ABD921D9BE0E27C702DCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 142D
Signing time: Tue 12 May 2026 15:01:30 +0000
Manifest this update: Tue 12 May 2026 15:01:30 +0000
Manifest next update: Wed 13 May 2026 15:01:30 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: uq/q2wPxK0/Sk7MHNpH7C3x4A7nRoGMt3AtlOVX82as=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:18:36:09:ab:d9:21:d9:be:0e:27:c7:02:dc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: May 12 15:01:30 2026 GMT
Not After : May 13 15:01:30 2026 GMT
Subject: CN=cc0f57c15ef83558c7452a77a0444cf13a9c11dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:37:1d:b1:33:73:dc:f5:5c:61:b0:11:1a:
cb:1d:f7:ce:83:a1:0e:5e:af:15:c3:98:dc:37:30:
00:ad:26:4d:99:c4:07:98:9f:ea:6a:c4:41:03:d8:
7e:0b:6b:36:f0:90:87:6e:cb:c0:c6:d9:9a:7d:51:
c3:5b:f9:26:fe:af:35:a5:89:65:31:9f:84:8d:46:
a8:67:ef:88:b9:29:35:d5:f7:ea:6f:4c:4d:d6:0f:
66:a0:5c:f2:cb:e0:d6:08:a9:92:bd:aa:35:2f:d0:
2a:af:45:16:a4:05:b3:40:c8:e2:4a:1b:91:8c:29:
5d:20:dc:06:b3:11:00:0f:d6:af:cc:e6:00:d4:ce:
ff:7d:78:b5:a5:ac:1d:bc:20:00:14:81:f9:b2:1b:
93:95:18:29:79:02:59:59:1d:0b:2a:32:cf:c8:c4:
fa:10:a8:8a:ce:8b:a3:0f:5d:3c:ca:64:a1:ad:d5:
11:dc:82:7f:89:c5:da:bf:99:7c:ba:aa:20:3b:6c:
5a:73:d5:ef:7c:69:50:27:20:9b:e2:a1:8d:4c:fa:
38:cf:95:fb:9c:e4:3f:f3:2b:bd:7c:f0:c0:07:47:
5a:03:1d:c8:de:5f:8f:33:b4:23:5e:f2:67:78:33:
be:f7:0b:c6:00:0d:41:87:e0:bd:07:ea:7e:4f:de:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0F:57:C1:5E:F8:35:58:C7:45:2A:77:A0:44:4C:F1:3A:9C:11:DC
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:74:11:52:a6:2a:52:63:cf:8a:b9:bf:34:4f:4f:46:69:13:
e5:3c:4f:7a:71:09:bb:7d:e5:33:6e:26:a9:79:5f:77:1c:58:
03:4c:1f:9b:62:c2:c0:93:aa:3a:37:bb:1b:cd:ab:45:0d:e8:
25:4c:d8:d3:f4:a3:b4:9e:88:6c:f6:87:b1:66:20:5d:45:62:
a0:45:d6:41:d1:56:e0:4d:87:87:a0:46:95:f4:9f:60:85:ca:
3f:9a:c7:bb:4b:f0:5d:0a:49:73:26:16:5f:e8:fd:12:a4:45:
bf:db:85:5d:d4:a4:fc:47:f5:f2:9c:b4:ce:3a:9c:91:f2:1a:
9f:47:03:b0:f4:8f:34:27:0e:ff:c1:c5:8a:74:5b:86:a0:bd:
58:67:35:22:f8:e8:07:00:64:f6:be:87:8f:40:af:11:2b:10:
e6:58:b1:96:25:6a:21:7e:ab:78:f7:0b:09:7f:1e:b7:d6:29:
f3:97:0e:ae:c3:40:02:70:c2:50:44:ae:48:df:3d:4b:d0:bd:
a2:73:e0:26:2a:bc:1e:bc:f7:53:f6:b2:23:7d:f9:0c:be:f9:
81:43:0d:a3:3d:36:5b:09:cb:46:5e:c5:5e:f9:87:eb:94:9b:
02:a2:7a:3e:63:8d:73:1d:af:ca:36:83:52:e5:a0:a1:62:04:
38:14:bb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:42 2026 by rpki-client