Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: zt03ahXJJpTCIJL5QGpHO+adgyn+gW2uOUzSKuajP+8=
Subject key identifier: 63:BA:19:B0:E2:2C:F9:46:C9:C6:B8:E2:04:DF:27:3D:90:A6:45:0F
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 019E1E358328EEEF57A52FE817F35FC7507F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 22:01:23 +0000
Manifest this update: Tue 12 May 2026 22:01:23 +0000
Manifest next update: Wed 13 May 2026 22:01:23 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: O6G/mEdlUtjc0x2Uk8SGUt+y8koOyz3gc7WaewNYgPQ=)
2: nmpthTHAT4WUcq8Q3IMochngGiw.roa (hash: WMNeejxSLtwCCkkRDHZIffdNUGROwkauBCQwzToW+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:83:28:ee:ef:57:a5:2f:e8:17:f3:5f:c7:50:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: May 12 22:01:23 2026 GMT
Not After : May 13 22:01:23 2026 GMT
Subject: CN=63ba19b0e22cf946c9c6b8e204df273d90a6450f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:d9:d0:df:2e:9d:41:d1:46:53:a1:e6:b6:
33:7b:76:84:ca:75:30:4a:41:ef:e1:05:aa:fd:a1:
1a:e9:be:76:37:3e:71:80:18:6e:1e:e0:c9:df:0e:
3a:ad:97:a2:42:63:da:77:76:6d:af:66:93:8b:63:
b8:49:69:50:a8:8f:44:26:aa:93:f9:e9:db:cc:d1:
10:04:d0:25:ff:df:c0:bc:85:42:89:b0:71:fa:55:
bf:23:08:d7:b3:fc:2c:ee:e9:cd:45:1a:de:e9:d4:
fc:cd:03:2f:74:ea:85:5b:c1:de:4c:45:3e:f0:e6:
a7:c2:5e:2b:c4:b5:d5:c3:2a:c9:e8:3f:28:0a:f0:
eb:87:9d:13:1d:a3:32:d1:21:c8:ef:9d:15:a2:08:
ff:1f:4b:be:ae:a3:de:9c:7d:83:b3:00:a8:ec:ab:
aa:82:e1:90:2a:a8:a5:6e:09:3e:49:ae:a3:5b:aa:
49:34:a3:f6:e1:5a:21:d3:f7:5d:86:47:52:f2:0e:
b0:17:e0:2d:91:5f:a2:2c:8b:49:ba:06:fb:0b:a7:
ed:e4:81:3b:d2:1d:29:dc:f9:73:71:5a:7b:f9:03:
32:a0:cc:08:7d:54:12:5d:85:dd:d9:55:a1:91:1e:
bd:b0:66:b2:de:0a:97:17:6a:67:70:44:42:35:69:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BA:19:B0:E2:2C:F9:46:C9:C6:B8:E2:04:DF:27:3D:90:A6:45:0F
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0d:de:2a:ce:73:1d:90:17:b8:cc:39:47:30:fb:15:68:f1:
09:51:7d:ee:5b:5e:34:b3:45:15:59:34:04:ef:83:9d:37:95:
0d:9e:54:a0:ef:86:c2:93:58:b6:b2:76:65:71:af:5c:08:63:
a9:1a:ed:93:af:ce:4e:54:c8:47:78:dd:8f:30:d5:ec:71:d9:
b7:b5:c8:45:a0:2e:7c:1b:72:53:74:26:9c:d1:56:0e:92:f3:
b4:f4:1d:73:84:85:c3:bf:cc:29:12:93:a7:89:fc:d9:6b:c5:
0f:75:61:b7:d2:34:cd:2c:02:fc:6f:62:45:ea:91:43:32:bb:
41:c3:9e:7d:e3:72:45:03:71:39:c2:83:e8:39:5b:78:e6:ff:
d9:63:81:ba:f9:90:48:08:e2:72:0c:24:eb:8a:57:e2:c8:a0:
e3:5f:de:e0:79:5d:d0:b4:01:6e:8d:d0:2d:de:c2:ad:1d:2b:
6f:9b:f5:40:86:a2:b7:00:35:a3:c9:a7:21:12:38:40:cb:c2:
79:2d:03:44:f0:f8:fd:7b:f0:79:2a:61:05:8a:57:7e:d1:86:
0d:a3:17:f0:86:03:38:7c:2e:cd:ab:8b:20:ad:ec:c6:2d:4c:
4c:40:67:a9:a1:e3:eb:1d:65:bc:c0:28:49:74:86:91:59:b3:
3a:93:97:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:04 2026 by rpki-client