Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: M1hPoDSbNaPhI/NL3PTic/+o7qKMQMqducio0ep+LoI=
Subject key identifier: C2:8F:E7:D3:5C:45:CC:CF:D5:76:FA:34:74:B3:7B:BF:AA:DB:92:27
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 019E1C7D8BB4788902D39474A1B1DC7959D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 059F
Signing time: Tue 12 May 2026 14:00:50 +0000
Manifest this update: Tue 12 May 2026 14:00:50 +0000
Manifest next update: Wed 13 May 2026 14:00:50 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: bSmZjZiDMfhzGjzzpXB6IuMg1gprp0BOLvcwxOdLOtY=)
2: V9UTYDPHijogtjvHdsrVvOTXN9I.roa (hash: nwNrU9JSn6Zt8gU88wPSRfyZfnAa1IxKUuy1vSNoP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:8b:b4:78:89:02:d3:94:74:a1:b1:dc:79:59:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: May 12 14:00:50 2026 GMT
Not After : May 13 14:00:50 2026 GMT
Subject: CN=c28fe7d35c45cccfd576fa3474b37bbfaadb9227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:eb:18:ab:66:e0:db:85:b8:f8:8a:80:bc:
96:08:e6:48:35:31:69:73:5a:2c:e0:75:25:a6:92:
29:69:01:17:c6:62:55:5f:ea:06:c1:0c:a0:91:6c:
ca:74:30:87:34:71:d0:59:ad:16:c5:28:f3:52:9d:
02:7e:52:33:5f:56:aa:bd:09:52:d3:9b:b1:97:ad:
67:c0:26:15:89:b5:bd:aa:4d:d6:2d:38:01:5b:a0:
5f:e9:d0:c0:36:7c:1f:a3:97:c2:21:64:7b:93:84:
01:d7:61:76:1d:6a:0d:f5:ed:7e:3f:9f:0d:00:d6:
c6:c6:6b:ec:d6:42:fa:22:bd:de:5c:c3:50:95:ea:
c4:12:e1:54:f2:08:54:43:5a:fd:98:57:72:15:12:
a1:49:4a:ca:ae:e1:a0:b4:e1:a1:37:3e:16:d7:99:
71:9a:43:36:a2:28:44:52:e2:cd:f0:0e:d2:c5:00:
36:cb:09:5e:0f:6f:cd:84:7e:ed:90:92:69:af:fb:
17:9b:cd:79:7f:a3:68:41:5e:89:33:39:55:98:b8:
bb:7f:a6:24:dc:2b:d8:3f:5d:35:34:0d:9e:2b:63:
ba:26:7f:3a:90:15:54:1e:c3:bb:15:b8:43:c0:41:
11:b1:e1:9f:51:c7:20:f4:6b:8c:3a:12:a0:11:61:
03:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8F:E7:D3:5C:45:CC:CF:D5:76:FA:34:74:B3:7B:BF:AA:DB:92:27
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:13:9c:11:0e:47:c3:a2:d2:03:4b:3e:51:ec:e6:d9:ad:
14:08:6b:58:0d:ec:9b:94:cd:f7:5f:98:bf:cf:7e:cc:13:74:
6e:02:3f:d7:88:e6:59:91:71:da:ad:d8:2f:d4:50:da:87:8a:
d0:f3:5c:9b:0f:57:4f:40:da:0e:50:e6:78:99:f7:8e:8a:c0:
ba:40:d4:d2:1e:41:7f:df:24:28:a8:29:86:32:f5:28:07:18:
11:7d:42:84:33:5c:4a:b7:09:cb:43:33:76:23:29:69:b8:19:
91:a8:d7:3d:25:3f:72:0a:50:0a:e8:b2:02:f0:a7:d3:46:f5:
4d:7c:d9:a2:c0:12:55:28:90:e0:04:44:a0:30:69:ba:8f:f0:
6e:18:40:1e:f4:26:9a:4a:34:58:b9:9f:16:14:8c:c6:00:0c:
24:3b:43:cf:65:9c:70:88:99:f6:03:52:b9:f9:07:3c:4d:56:
bd:e7:0a:83:26:d8:49:71:35:57:55:95:c8:cc:7a:ae:50:fa:
41:dd:9b:a8:d1:54:27:aa:ea:8a:4b:33:36:8c:4c:87:c3:1d:
33:72:f1:6c:5a:75:f2:23:fb:b6:d4:c7:0e:1c:e3:9b:ed:6e:
20:f9:9c:ad:6c:1a:9d:be:c0:57:55:16:6d:3b:30:a0:dc:60:
77:57:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:34 2026 by rpki-client