Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: E5fAslloBff2gkeAm1wgryssV7ypQweWRPXMkkMwjZw=
Subject key identifier: AF:3B:F1:10:B5:DB:6A:61:F2:51:10:C1:D3:33:10:E0:F0:98:9C:E1
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 019E1BD8B7EFCCAEE7ABF6AD7FA6DFECE76E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 17D8
Signing time: Tue 12 May 2026 11:00:48 +0000
Manifest this update: Tue 12 May 2026 11:00:48 +0000
Manifest next update: Wed 13 May 2026 11:00:48 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: kQzsJLD1QQIFCPtCqcbgNnb41WPCx+mP2aNW8dWUY80=)
2: fzAeGKhcQK73_8kUi9aPu-hO7GM.roa (hash: nriJ4MQ+9xZdYNUaYHTilz4XR7McFd/ntd369VK1PM0=)
3: lXz_0HyPSbL-uOjVg4Ot7TStlxw.roa (hash: UyzNEXVwdOfFnPKU5Gd+xkJiBk60PdbsHvretQnQOPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:b7:ef:cc:ae:e7:ab:f6:ad:7f:a6:df:ec:e7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: May 12 11:00:48 2026 GMT
Not After : May 13 11:00:48 2026 GMT
Subject: CN=af3bf110b5db6a61f25110c1d33310e0f0989ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:d6:f3:56:09:a1:92:8d:a9:35:30:66:bb:
a9:6d:00:44:28:e1:52:79:2c:cb:31:04:e1:29:58:
3e:59:50:a1:1a:e4:aa:81:ee:09:59:0a:3b:0f:a8:
94:69:7f:85:64:c6:06:7c:61:54:f6:74:44:46:22:
b8:66:b1:82:35:c9:f1:22:10:4f:2e:ff:ec:7c:16:
9e:98:5a:b5:82:60:9f:0d:2c:86:37:5a:7d:d7:17:
b0:dd:59:78:63:79:12:c7:ca:1f:aa:d3:44:d2:84:
cb:52:de:07:4b:00:27:75:84:02:4e:55:fa:ec:17:
6a:12:5b:5a:1f:bd:42:dc:c6:2f:7e:e7:1d:72:0b:
26:d0:d9:61:1f:b3:47:a3:ea:6e:c8:94:59:2c:5b:
7f:5d:ba:1f:2c:ab:55:b1:6a:04:84:80:3d:06:5e:
94:5d:07:93:79:a5:ba:04:3b:c2:95:5d:31:90:6a:
68:ef:06:71:d1:19:ad:74:6f:aa:bf:77:ab:1c:6b:
6e:0f:81:59:e5:0a:2a:f1:c1:3f:af:d1:4f:c6:7c:
3f:34:87:d2:10:d8:9a:af:73:d3:97:ee:94:05:be:
7a:98:72:70:52:d7:12:3c:78:ae:79:8f:60:02:ed:
1c:80:45:d7:00:f0:a2:a0:b5:1d:eb:c8:fe:2f:67:
cc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:F1:10:B5:DB:6A:61:F2:51:10:C1:D3:33:10:E0:F0:98:9C:E1
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1d:9a:d3:ca:3a:ce:6c:61:74:d6:9a:36:80:d6:c8:4c:7a:
dd:31:1e:6b:86:15:98:b0:5f:7e:33:d8:e8:6e:c2:1d:04:40:
85:ad:f7:5a:e6:10:39:da:cc:a7:5e:5b:05:84:9d:3f:ca:b4:
8b:39:99:e7:9f:fa:9d:19:88:9a:1a:bf:2e:e4:fa:f3:ef:a3:
37:1e:56:59:7b:ae:6b:33:b8:fe:66:98:17:ee:17:ad:59:2c:
e4:72:24:93:29:f1:df:11:e1:c8:a7:3d:87:37:54:74:8d:1b:
b3:ba:20:48:bf:0b:71:24:bc:37:74:17:51:f2:07:ce:7c:f2:
80:0b:4f:9b:e9:df:f9:4d:de:f7:e6:c5:18:3b:8c:b0:5d:7e:
a2:77:78:6f:cb:47:93:16:c7:9d:b6:43:59:b7:aa:bc:91:e5:
e9:fd:e7:c1:3f:2e:81:ae:b9:47:0c:7d:fb:5c:8a:77:39:cf:
19:c4:66:c6:15:65:45:02:ea:f6:f9:51:0c:8b:47:02:1e:a7:
14:e1:a6:95:14:32:19:6b:fa:74:be:c9:d6:14:54:6e:e2:e0:
6e:e8:12:7e:01:f1:ba:ba:dc:a6:90:68:cb:42:9a:a6:10:d4:
23:53:97:23:80:de:53:b7:b8:8a:e3:7e:bf:4a:1d:a4:99:a7:
58:ee:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:16 2026 by rpki-client