Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
File: 1IW26difsBA2mXHtiIVyBZhdSRg.mft (raw, json)
Hash identifier: CXnI+GJqghaetqYUY4cIPSIbqRgNxKYXDO9bkvQrUKU=
Subject key identifier: 22:CA:3B:3E:E3:2A:98:27:71:02:92:88:2D:6A:48:CC:A9:C8:0D:97
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 019E1EA3578517194FFC926C9DAE23D0FE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 00:01:21 +0000
Manifest this update: Wed 13 May 2026 00:01:21 +0000
Manifest next update: Thu 14 May 2026 00:01:21 +0000
Files and hashes: 1: 1IW26difsBA2mXHtiIVyBZhdSRg.crl (hash: 5YHttyXN0XFQKPqe3gMQQNCpzsTsaHMbemRYoHeP4tU=)
2: tcauu97gqx_3OsWJEyJLtylmmP8.roa (hash: g4WoFZgT3MzcoVX/LXrLBBnWdsRJpBrZA+GD6BcfKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:57:85:17:19:4f:fc:92:6c:9d:ae:23:d0:fe:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: May 13 00:01:21 2026 GMT
Not After : May 14 00:01:21 2026 GMT
Subject: CN=22ca3b3ee32a9827710292882d6a48cca9c80d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:55:bd:e8:3c:3e:4d:3d:b0:41:5b:e9:48:
a7:7a:5a:d6:d9:45:23:ec:37:9c:31:c8:a6:3e:b0:
b3:c7:de:8c:9f:17:bf:86:97:35:7b:28:05:d4:e2:
34:ae:ce:62:01:e7:47:6b:c8:81:d7:9f:aa:b3:c1:
ac:4a:f6:a8:d6:3a:6f:ba:23:6a:01:6a:3b:40:86:
c2:b8:1e:6d:b8:66:87:41:45:ce:14:4a:d6:71:97:
cf:f8:74:2c:07:33:1b:3f:56:90:e0:61:c0:c6:d0:
79:57:ac:06:fe:9e:2f:b1:ac:74:89:d0:0f:5a:0f:
a2:96:59:08:5d:2e:c4:6e:d7:b1:dc:0a:e0:d7:f8:
7b:75:3b:c8:67:38:a7:da:8f:ea:c2:cd:ae:75:f1:
d9:dc:e8:5e:fc:84:80:86:cc:80:0f:c9:bb:59:1a:
2b:8d:7d:5f:78:4a:d5:c9:6f:51:54:95:ed:e5:e8:
af:47:69:42:d6:17:81:44:9a:49:8a:10:ec:f3:9f:
46:a5:03:34:8d:09:06:ab:9c:a3:57:dd:5b:4e:f4:
4a:22:fe:2f:1a:49:13:34:6f:b2:28:3f:a2:f7:d6:
00:5d:fd:c0:90:de:90:ce:41:14:6d:31:e6:9e:70:
56:93:6a:8e:8b:3a:87:21:c0:e3:35:f2:14:c7:d5:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CA:3B:3E:E3:2A:98:27:71:02:92:88:2D:6A:48:CC:A9:C8:0D:97
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:73:32:49:a2:46:4f:a9:46:da:19:2f:62:37:e4:17:e0:d4:
c4:3f:70:9c:f9:04:d3:72:67:56:67:c6:cd:77:c6:84:d7:7f:
5d:f9:cb:e6:fc:e8:86:2b:c2:87:d0:1c:08:5a:ca:18:69:02:
3c:16:97:c6:27:8a:e1:ce:94:22:1b:5d:b2:1c:19:00:05:47:
1f:70:16:41:9f:76:10:1a:85:88:ee:7d:e7:d7:a7:5f:60:28:
6e:8c:c1:ab:0b:10:39:52:aa:5f:08:23:ff:f8:6c:3c:ee:39:
47:13:e9:38:17:68:6f:27:34:58:c1:26:1e:0c:86:b7:88:ce:
cd:2b:3b:0a:2e:f0:5a:ee:16:98:c0:8a:95:a0:6d:12:6b:fd:
ce:e9:16:cc:4b:76:86:24:2a:bd:39:2d:cc:80:cf:28:87:26:
a1:bf:c4:51:42:9f:02:cc:74:20:23:af:70:87:83:85:c1:50:
91:a4:dd:69:14:50:51:df:e9:da:ed:bd:53:47:4f:a3:76:15:
5d:81:43:9e:a9:d1:fd:02:93:be:4d:39:68:5c:d0:2f:a7:08:
50:96:c7:b0:9e:36:fc:e0:3a:f7:3a:10:9b:55:59:25:fa:c7:
f4:1e:98:c3:0f:1c:18:52:73:ee:34:31:5e:e5:3b:9d:3b:da:
53:d2:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:12 2026 by rpki-client