Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: eGl5hBZDE59aHEjdn7EJtqMzAXQW3i3Gdekqu7ip5CY=
Subject key identifier: D1:31:1A:5E:C3:0A:9F:27:F5:B2:7B:42:74:C4:38:C6:78:C1:B4:30
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019E1CB4AD25D428024A25E1429259CCC8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 1901
Signing time: Tue 12 May 2026 15:01:03 +0000
Manifest this update: Tue 12 May 2026 15:01:03 +0000
Manifest next update: Wed 13 May 2026 15:01:03 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: PIouMAAIZLYjFN2MOKfSdELhZaltBfqNZGzn/AyWFXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:ad:25:d4:28:02:4a:25:e1:42:92:59:cc:c8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: May 12 15:01:03 2026 GMT
Not After : May 13 15:01:03 2026 GMT
Subject: CN=d1311a5ec30a9f27f5b27b4274c438c678c1b430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fc:f8:6e:3c:9b:c6:12:42:8a:4f:83:f0:8b:
1a:ce:d6:68:7b:7a:0a:eb:61:15:b6:18:dd:b7:27:
44:76:4d:61:8d:c6:89:e2:ff:e2:87:e9:ff:0d:1c:
2d:b7:28:00:00:43:b6:1b:8d:0d:de:c3:2d:31:a6:
83:3a:ca:81:83:e7:fb:80:a5:8f:c3:fe:e1:5e:ec:
b7:a3:06:69:7c:1a:ef:e3:12:91:ce:22:10:f8:ca:
da:08:33:34:06:81:b4:f0:d9:ff:e4:78:c3:8e:ed:
a2:00:f2:0e:62:d8:0a:39:0a:ea:64:8b:e0:b6:83:
65:be:4e:db:05:11:c3:32:37:4d:28:b9:3f:6b:19:
ef:24:3b:23:c3:c7:ac:73:24:46:e9:b7:f8:3b:22:
15:12:3d:bb:02:4b:16:4b:8e:71:5d:7a:84:76:51:
b6:95:f1:68:27:40:27:cf:1d:11:1d:23:85:06:78:
94:0b:68:85:0c:b4:6d:a2:68:44:08:b9:90:fb:80:
5f:26:71:f8:bf:9e:76:9f:7f:c8:29:51:be:83:49:
3f:a6:ba:3d:4b:08:88:62:96:1b:73:fa:0f:0a:6e:
b7:bf:13:08:fa:3a:56:29:d0:cf:0a:9d:50:3a:d7:
73:fb:89:39:6c:d4:eb:90:41:b5:eb:63:bf:c9:3d:
00:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:1A:5E:C3:0A:9F:27:F5:B2:7B:42:74:C4:38:C6:78:C1:B4:30
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:f0:db:bc:8f:02:62:8d:db:11:77:16:0c:03:e7:28:d8:eb:
8b:eb:3b:c6:d4:a7:7d:2f:0a:80:ae:56:4c:06:03:ff:93:eb:
df:17:58:20:b6:62:cc:2e:ec:b7:88:e2:ea:ad:b1:65:90:3b:
84:a4:84:27:23:6d:2b:8a:43:a2:5d:2d:ee:9c:8e:f2:96:0d:
6b:e0:f8:b2:0b:f3:b2:7d:d9:72:1a:fb:fa:c0:18:6f:29:29:
b4:b0:12:30:f0:03:22:e9:3d:98:38:1d:83:5d:0f:16:67:73:
5a:ab:aa:19:25:7a:43:e4:76:04:1e:6d:cc:33:ee:be:20:6c:
f2:86:ad:d1:55:bb:45:ac:30:12:14:6a:11:9d:eb:d0:da:39:
95:ab:d1:9a:84:95:d8:26:f1:26:7b:a2:8b:05:d0:df:15:f0:
30:bf:8c:60:a0:28:e1:d6:77:6b:a0:77:72:ce:41:85:82:c9:
f0:72:e5:68:ec:a0:c3:59:3b:29:50:24:3a:c9:c9:f0:64:ce:
dd:cc:de:33:88:a5:4a:29:bf:b7:c6:d2:33:e4:e6:f2:a7:de:
0a:31:02:e2:59:d3:bc:9f:c6:e6:40:72:ca:f4:02:86:60:3d:
66:5d:31:cb:15:4d:44:d4:a3:4b:54:73:67:36:f1:6b:58:d9:
6b:3c:73:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:09 2026 by rpki-client