Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
File: 1N33M6X21zWr8n6JKuDlANVyffM.mft (raw, json)
Hash identifier: O5D/Lx2Sz/d90nxxgmKTLUFf4+qFnq1m04rLrC+tPmI=
Subject key identifier: 5C:46:05:8B:9E:C7:2E:AA:34:6F:33:93:E2:99:96:3B:0A:32:B7:F6
Authority key identifier: D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
Certificate issuer: /CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Certificate serial: 019E1BD8C603F4E259A691C390557602C284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
Manifest number: 011D
Signing time: Tue 12 May 2026 11:00:51 +0000
Manifest this update: Tue 12 May 2026 11:00:51 +0000
Manifest next update: Wed 13 May 2026 11:00:51 +0000
Files and hashes: 1: 1N33M6X21zWr8n6JKuDlANVyffM.crl (hash: QBMUyn9YF4O+3zkl0iWTcwwmArtC6JIQUxM4cEO7Rlg=)
2: iKbr2LK5J82gYuXSxnRiW9ytVSU.roa (hash: SB/v/t0GxNGoad1gEDHjAA4/1IulHpKzS+RYj669lVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c6:03:f4:e2:59:a6:91:c3:90:55:76:02:c2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ddf733a5f6d735abf27e892ae0e500d5727df3
Validity
Not Before: May 12 11:00:51 2026 GMT
Not After : May 13 11:00:51 2026 GMT
Subject: CN=5c46058b9ec72eaa346f3393e299963b0a32b7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:e3:18:67:5d:35:84:5c:b6:48:48:20:43:
fe:08:aa:d0:59:55:42:ea:de:81:e4:e8:88:fa:1b:
41:b4:13:6e:dc:f4:39:70:68:cc:d5:a4:c9:00:31:
0c:82:ff:26:bd:64:b8:4b:f2:ff:66:a5:c4:24:c4:
f6:a7:d6:f5:b8:3e:f0:9b:67:04:d8:b2:81:f2:4b:
df:4c:fc:de:91:f8:a0:8c:06:e6:c7:47:9d:49:7c:
87:3e:74:a5:f9:ab:6d:56:93:65:f9:16:53:1f:2c:
ba:0a:b5:39:d1:01:1a:69:48:39:56:47:88:58:f3:
db:ef:a6:54:bd:4c:76:ce:48:3f:49:ca:f7:64:86:
ce:d0:bd:39:1c:64:a8:3d:10:06:86:cb:90:0c:c3:
61:28:c5:ce:3e:c8:ee:ea:93:04:95:74:12:cd:fc:
12:58:3b:14:2c:d2:a0:46:5e:02:52:71:5e:32:6c:
6c:8a:4c:5d:f5:d9:f9:7f:df:38:c4:0c:da:bb:cd:
7d:04:98:14:84:03:2a:eb:95:c7:4c:1f:cd:48:40:
f5:09:b6:0e:65:93:8e:b9:e4:34:c3:4f:0f:2c:18:
21:45:54:41:8e:b1:58:74:59:d0:4f:96:91:38:98:
86:67:3c:f3:ca:34:c1:02:e2:b9:36:c1:3d:70:1f:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:46:05:8B:9E:C7:2E:AA:34:6F:33:93:E2:99:96:3B:0A:32:B7:F6
X509v3 Authority Key Identifier:
keyid:D4:DD:F7:33:A5:F6:D7:35:AB:F2:7E:89:2A:E0:E5:00:D5:72:7D:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1N33M6X21zWr8n6JKuDlANVyffM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/d8466e-24be-4a6d-b55f-efe599bf5d87/1/1N33M6X21zWr8n6JKuDlANVyffM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ae:86:0d:28:73:24:03:6d:d6:2c:d5:52:a4:5f:ec:1e:c6:
9a:f1:e8:16:cf:cd:88:ed:00:66:f9:40:25:01:ea:cd:10:d5:
2b:4c:b9:bf:79:96:f2:12:da:41:26:5e:d0:a8:0f:89:90:ab:
47:56:fd:c2:bf:77:0f:c2:d8:9e:68:f0:f5:40:98:b5:01:98:
4b:dc:17:ad:9a:9c:a9:5a:e2:3a:5c:cc:62:f1:f3:16:51:06:
f2:6e:c5:f5:96:49:4e:ad:97:8e:cd:fb:b5:45:7f:b4:d2:d4:
14:1b:a1:78:9f:23:06:d7:2e:80:4a:8b:f3:7b:9f:10:35:74:
14:1a:6d:ab:d6:2c:c8:ff:8e:9d:13:05:e9:79:97:21:83:f8:
fc:2b:b0:64:76:4b:97:01:8e:a7:5a:5a:1e:4f:28:d3:53:24:
cf:ef:5a:82:89:c1:db:e4:ca:2c:f9:5b:7b:5b:70:ea:c1:8e:
f0:dd:14:4f:bb:79:73:80:44:63:b2:10:7d:a7:94:8a:5c:a5:
0d:88:29:9f:d7:55:63:d9:01:f1:cb:5b:91:06:3c:c6:19:69:
d0:6c:aa:c6:dc:c3:2a:89:17:1e:2e:5e:6a:7a:73:e5:c0:ab:
d2:c4:c8:78:a4:70:c5:86:f8:fd:ed:33:e8:ff:dc:86:34:02:
6b:5b:cd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:59 2026 by rpki-client