Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: YSkGGGz2n2PcRQ/uik0yHSVNDt8upyzcJ3DlySdLN/M=
Subject key identifier: 5C:E2:83:3E:66:DB:4C:2B:FB:42:9D:C5:53:6D:31:D9:6B:61:45:C7
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 019E1D9020FE31BE711D302C58F9DBDEB8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: 02BF
Signing time: Tue 12 May 2026 19:00:45 +0000
Manifest this update: Tue 12 May 2026 19:00:45 +0000
Manifest next update: Wed 13 May 2026 19:00:45 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: JIpLfZBohCrL2/1M+gr7rXwPBlHlCSwezLoM4atzdb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:20:fe:31:be:71:1d:30:2c:58:f9:db:de:b8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: May 12 19:00:45 2026 GMT
Not After : May 13 19:00:45 2026 GMT
Subject: CN=5ce2833e66db4c2bfb429dc5536d31d96b6145c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:27:a9:71:6e:e5:6c:f2:fe:3f:d6:8b:22:29:
f5:85:01:a5:7e:0c:43:bf:4d:11:d0:91:f6:92:f7:
30:75:d4:14:96:06:70:5b:22:c8:0e:52:cd:ef:02:
8d:75:74:4c:f0:36:00:e3:b2:9c:13:b8:3b:f5:f5:
95:18:0a:d5:11:4f:d4:6f:9b:19:26:4c:04:80:ea:
a3:6e:ab:1f:c1:5b:ef:3d:fc:ce:3e:c0:45:71:38:
66:c2:82:f6:83:56:15:bd:6f:78:6e:f4:43:8d:84:
76:30:e8:b7:1f:2d:8d:5a:fd:4c:06:dd:55:33:a5:
e3:12:9e:13:14:39:68:a4:d4:a4:76:b4:3a:ec:ed:
03:10:b8:87:e3:40:d6:e6:c1:39:ab:72:5e:2b:b6:
2a:b5:90:e3:46:e5:d3:18:44:b4:36:16:e4:6d:6b:
66:42:a7:95:74:bf:86:81:8b:de:f0:a6:fe:df:92:
32:51:d3:55:a1:d7:e2:fe:d8:6f:d5:7c:1b:ab:6a:
33:b7:48:39:5a:47:57:36:d1:55:ae:42:ee:d8:92:
43:32:b2:ab:61:5b:e7:1f:8f:b0:cf:9c:9c:f1:40:
4e:a7:86:a6:2d:9a:9c:7b:6d:19:f1:7c:70:5c:fa:
57:4e:02:c1:b4:d7:3e:df:2d:9a:25:6e:93:28:7d:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E2:83:3E:66:DB:4C:2B:FB:42:9D:C5:53:6D:31:D9:6B:61:45:C7
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0f:4d:7a:3d:31:ea:f1:92:92:22:e2:45:8c:57:36:d8:82:
d2:4f:a7:91:37:bb:dd:51:8a:80:12:5a:8f:e1:f1:73:cf:2f:
06:c7:10:52:39:be:cc:27:f9:bc:ba:fe:1b:bd:45:e4:72:79:
e3:fb:1f:c9:a0:fd:c2:5d:4f:59:c0:91:e8:8d:a3:e8:36:ba:
a5:ff:e8:55:df:e7:03:35:e7:8f:c6:5d:d1:9f:37:f4:74:92:
6d:40:9e:c4:0f:3c:6a:93:b8:94:36:6a:b6:03:fc:ec:5e:a6:
bc:c9:db:86:da:ea:82:02:14:f3:8e:72:6c:7f:f6:d5:8f:ef:
01:61:dd:0b:60:11:86:44:78:c5:a8:f7:44:84:9c:ed:09:fe:
0d:fb:dc:1f:43:5f:b4:e2:11:40:40:db:01:41:be:40:98:83:
ae:f3:32:8a:37:70:16:75:11:fb:18:a5:a2:23:d0:7c:b2:c1:
2d:3f:12:31:c5:06:91:27:12:b3:b4:a6:d8:f2:13:06:a9:c6:
09:41:a3:c8:d6:55:6b:7c:17:85:4f:53:2d:22:37:3e:db:c8:
a9:47:dc:a5:10:ad:f3:2b:7d:bb:0e:03:4c:ff:a4:2b:db:95:
1b:bd:46:87:99:37:98:b9:d6:ed:a5:51:ae:6e:3c:ab:9e:30:
27:fc:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:30 2026 by rpki-client