Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier: vrc+ly20zJ2WZ+xSCv2hMA5XnwJbCsRwpSFFIdaxd6E=
Subject key identifier: D5:D3:17:9A:D1:58:90:F6:2C:0D:0E:BF:7F:56:37:F4:DF:88:E1:4D
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer: /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial: 019E1DC7A2A6782904647DE36B4AB87E9DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number: 10A2
Signing time: Tue 12 May 2026 20:01:23 +0000
Manifest this update: Tue 12 May 2026 20:01:23 +0000
Manifest next update: Wed 13 May 2026 20:01:23 +0000
Files and hashes: 1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: q9LZu1tS6x39/iYy8Q9NMICCS4eaEqD13B37xZViOEw=)
2: 2qEJf-3plphGQsWl8SQW6YyPVOo.asa (hash: 4+rKO1n6NP2bn9zS31aZfPbPe3Ulpd6fobeXDKXV5hg=)
3: 6MkxZOCAknG2K-8b272IPhdocok.roa (hash: y/CqhaiNH9OwE/p4Zf1xynOs+ihS7UO8SYoBEISJe/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:a2:a6:78:29:04:64:7d:e3:6b:4a:b8:7e:9d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Validity
Not Before: May 12 20:01:23 2026 GMT
Not After : May 13 20:01:23 2026 GMT
Subject: CN=d5d3179ad15890f62c0d0ebf7f5637f4df88e14d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:78:b4:e0:ac:74:5f:f5:7f:57:cc:6b:87:
89:83:77:f2:2e:ea:b8:67:ae:7e:57:9d:ed:72:27:
b8:96:7d:2d:9d:35:fe:8a:77:76:f0:69:f4:81:64:
64:b4:ff:ed:04:85:0e:82:85:d0:f0:fd:83:2f:17:
06:67:76:fa:9e:92:4f:e4:54:4f:b1:67:1b:b2:e7:
9f:51:fc:63:c2:2e:3d:50:55:4d:d5:10:32:f8:2c:
3c:10:31:3c:30:76:44:ba:1c:cc:ad:a3:ba:d4:f8:
8a:34:5b:54:3d:bc:55:8c:6c:80:6f:03:26:8a:2e:
64:b6:77:05:6e:74:c4:ab:47:9d:ea:44:c0:8c:81:
c5:92:99:05:27:71:bf:23:60:b0:77:34:2a:6c:19:
ad:db:a9:28:78:1a:8e:f0:75:8d:9a:1e:96:0c:57:
14:16:6d:e2:c7:43:e9:18:93:65:5f:97:a8:af:b8:
d3:cc:b5:a7:66:3f:96:d9:ed:ea:67:4e:8d:b0:c1:
76:31:0d:d8:78:ce:31:08:95:36:aa:b7:22:a8:92:
0b:12:f6:5a:d0:7d:b3:03:a6:32:d0:b4:83:a9:9c:
02:a7:b6:af:12:c2:fe:46:6b:9a:08:a4:a2:7a:04:
79:44:12:2c:9b:72:63:8b:ad:a7:fd:9f:4c:29:53:
2e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:17:9A:D1:58:90:F6:2C:0D:0E:BF:7F:56:37:F4:DF:88:E1:4D
X509v3 Authority Key Identifier:
keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:36:5d:66:13:5b:a9:7e:f1:32:aa:14:5c:93:62:d1:d0:47:
dd:8e:9f:d0:ab:92:57:d3:93:e1:e5:46:1e:d3:85:4d:33:b1:
af:1d:1e:33:64:1d:52:a4:6b:ef:0d:8e:ea:5c:ce:39:d7:93:
00:83:47:77:aa:03:c8:3d:a1:cd:a9:59:f7:5d:5f:1f:10:e6:
9b:2a:fb:5b:f1:d2:06:5a:85:3b:a0:77:6c:65:29:ba:34:cf:
74:38:14:10:52:20:0a:77:d5:71:e8:4a:c2:20:49:e7:76:b1:
a6:20:d8:85:36:dd:36:17:de:f3:3b:65:a5:be:e5:d8:42:88:
df:58:03:a4:5c:9d:dc:e0:d7:55:37:d1:75:69:b9:ab:37:af:
fb:d9:2b:4e:bc:4b:70:31:c0:31:ff:16:9f:73:44:86:be:0e:
16:b3:e2:c5:0b:81:27:85:44:61:64:31:cb:29:41:5f:fc:4e:
68:34:a6:58:2f:53:50:09:89:97:80:74:19:4d:88:4a:70:0b:
74:b1:a0:40:1a:26:b4:df:7f:70:b7:62:f1:02:11:2b:e0:7b:
f5:8e:be:a9:74:ed:12:04:2a:01:01:ec:65:14:e5:46:f6:00:
dc:1a:23:e2:68:9e:17:4c:6e:48:7d:f5:10:15:22:b1:bb:b8:
af:32:1a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:25:41 2026 by rpki-client