Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier: BDALYh1rv+aHQEgL64sctavdNY4o41AvIu/g0GVS7t0=
Subject key identifier: 07:51:24:F2:F8:91:30:67:60:28:17:F8:CD:B5:8D:A7:7C:0A:C1:47
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 019E1D90BD99F6E63D40FB70BF5AD7FA244E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number: 1599
Signing time: Tue 12 May 2026 19:01:25 +0000
Manifest this update: Tue 12 May 2026 19:01:25 +0000
Manifest next update: Wed 13 May 2026 19:01:25 +0000
Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: C7fAHD9K752HJT/h42JiQY2IsKkTxJSCXwXrs5mdC70=)
2: fzdQ-DiiI7ywifu_IGVttENLXng.roa (hash: NRsukZR0ciYndHqAYYe2J/xe0I537gyb7NRFYGMJuBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:bd:99:f6:e6:3d:40:fb:70:bf:5a:d7:fa:24:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: May 12 19:01:25 2026 GMT
Not After : May 13 19:01:25 2026 GMT
Subject: CN=075124f2f8913067602817f8cdb58da77c0ac147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:34:4f:56:df:e5:6b:bf:0d:f2:7a:1f:37:
74:63:40:af:3a:2f:75:47:3a:13:ce:e3:c0:ee:69:
7b:b7:17:ac:4c:1c:fc:f3:4d:ef:12:ef:c2:f7:e6:
40:10:3b:73:93:2f:04:5c:13:88:d8:aa:21:e9:81:
dd:0d:d4:cd:f6:14:a4:8c:08:ae:11:c7:2d:7a:05:
79:58:36:81:ed:c6:24:b5:ba:8f:52:fe:90:64:f3:
95:73:3e:ea:c0:41:2e:19:1c:6b:33:b1:d1:b7:b2:
6a:9b:67:80:0f:e0:89:48:df:4b:41:b6:03:b6:af:
a8:9a:73:e8:c6:8c:1b:87:6e:e4:fe:74:5b:1c:03:
95:8d:6c:74:8d:94:75:1b:04:59:33:d6:3d:06:93:
ca:72:7c:4d:70:47:08:ca:fa:e5:c1:d3:9b:80:08:
2f:58:d3:7f:c6:41:ab:35:cc:5d:12:ab:a7:b8:fa:
4e:fa:7a:d0:41:7b:0f:c3:11:05:44:60:63:9e:1f:
72:2c:ef:1c:3d:b8:2a:4f:35:25:75:0b:ba:da:0d:
df:db:80:f9:c4:1d:b7:69:15:aa:41:93:81:96:bf:
42:7b:85:d3:f9:a0:1d:4c:80:3b:1d:16:65:b1:b9:
8a:f9:1c:9f:05:8b:cc:43:28:28:e4:43:2c:30:ae:
d0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:51:24:F2:F8:91:30:67:60:28:17:F8:CD:B5:8D:A7:7C:0A:C1:47
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:38:a4:96:85:93:3b:4a:b2:3f:ce:20:9d:77:90:02:f8:d0:
6f:66:4b:7f:bc:bd:e1:ea:eb:f4:db:64:82:70:65:8b:09:f8:
41:18:23:42:dd:b1:21:d2:e2:65:f4:97:2c:56:71:62:2b:c9:
ef:8a:c4:d2:f3:a2:ed:6e:8c:1f:ee:2f:f5:ac:76:57:3a:39:
60:eb:37:22:f8:fb:5b:90:b6:78:6a:df:eb:10:e2:bb:b0:ed:
38:74:8a:aa:8a:eb:67:7f:85:02:3d:49:04:a1:f8:bb:4a:15:
23:37:b4:18:ad:c2:4f:c2:4e:9d:30:41:ce:fa:70:77:6d:e6:
dc:67:30:af:e0:c1:d8:9f:ca:9a:e6:36:8f:c3:e1:e7:19:a4:
85:1d:97:61:57:b5:c6:31:15:15:b7:5c:fd:e8:6a:5a:2f:63:
87:9a:e1:55:4f:22:59:5e:83:d7:31:0b:e8:e8:a4:82:4c:73:
05:1a:11:26:61:b8:57:ef:01:80:21:ab:82:6e:b8:3b:a8:6a:
cf:31:3a:11:cf:99:c0:01:c8:ab:08:db:32:77:d1:d4:ae:ba:
3e:c4:4f:5f:51:92:c6:7e:31:1c:b5:b6:c1:51:3f:76:76:a2:
3d:5e:d3:35:2f:11:8d:b0:dc:e7:86:a5:b6:d2:a7:5e:03:ee:
22:db:02:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:10:12 2026 by rpki-client