Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
File: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft (raw, json)
Hash identifier: hcAOLayslx/37TUE1ipJgOZXpCeHzF8cv5B0pN1Zel8=
Subject key identifier: 4B:E1:1F:A5:91:6A:5E:E0:61:32:D3:65:2C:53:2D:BD:CE:7E:20:6F
Authority key identifier: FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
Certificate issuer: /CN=fac020f12091a4eba81e4c0466de771db7561650
Certificate serial: 019E1C46E7C7E15739EB1EC0A55ECDEB2238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
Manifest number: A6
Signing time: Tue 12 May 2026 13:01:09 +0000
Manifest this update: Tue 12 May 2026 13:01:09 +0000
Manifest next update: Wed 13 May 2026 13:01:09 +0000
Files and hashes: 1: 1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl (hash: bWVmoZg4U87V4IzoLMtAv4UtOe8Mn4+1UmBZ345rhdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:e7:c7:e1:57:39:eb:1e:c0:a5:5e:cd:eb:22:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac020f12091a4eba81e4c0466de771db7561650
Validity
Not Before: May 12 13:01:09 2026 GMT
Not After : May 13 13:01:09 2026 GMT
Subject: CN=4be11fa5916a5ee06132d3652c532dbdce7e206f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:af:e9:75:6e:09:e0:a0:84:97:0b:72:d0:87:
d0:53:8b:b6:64:4d:6b:04:7d:7e:8a:21:a9:67:3d:
15:22:7f:d5:2a:55:1e:e1:96:78:0a:aa:4f:72:66:
48:52:74:ed:79:6f:ee:b3:ff:81:b8:ce:b6:46:c2:
73:3e:e9:12:e1:aa:70:d4:98:84:4c:16:37:b5:87:
0b:5d:1f:b1:6b:05:e4:06:9a:10:d9:61:01:97:eb:
d1:31:f6:45:1a:0b:58:c8:e7:36:8b:c1:2d:51:8b:
d0:53:cf:b4:d0:1f:1a:0b:99:2f:6a:33:fc:77:9d:
16:1d:9a:8c:36:d8:bd:6a:b3:66:20:1a:2f:0c:7a:
a0:26:b0:4e:6e:d0:04:c7:a5:38:53:b5:53:6f:bc:
91:0e:c8:28:a1:8f:4a:e9:0b:89:f4:c3:46:98:5c:
0a:1f:a4:c7:2b:a9:72:1f:45:79:06:65:04:a3:35:
6d:9b:7c:4a:d9:d4:8c:a1:4a:10:9f:c1:2d:24:a5:
81:09:04:2f:ad:36:53:38:8d:b2:9f:b1:8b:f0:e9:
33:97:42:a4:a0:5a:ee:e0:c4:8c:b0:94:8a:74:fb:
2d:12:42:31:d9:74:31:e2:77:be:5e:b9:86:f2:ab:
22:99:aa:92:44:37:eb:14:f3:bd:53:65:9e:be:67:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E1:1F:A5:91:6A:5E:E0:61:32:D3:65:2C:53:2D:BD:CE:7E:20:6F
X509v3 Authority Key Identifier:
keyid:FA:C0:20:F1:20:91:A4:EB:A8:1E:4C:04:66:DE:77:1D:B7:56:16:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sAg8SCRpOuoHkwEZt53HbdWFlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/de11f7-eec2-4903-8ad8-215761542a77/1/1-sAg8SCRpOuoHkwEZt53HbdWFlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:06:02:88:a5:19:68:9b:1a:ac:7f:e4:2a:ee:04:ee:79:5e:
4d:e7:71:76:4f:06:23:6b:e0:92:7c:ec:b3:46:ad:45:24:dd:
f7:fb:a2:8b:89:f3:04:11:98:7f:c8:99:04:3f:40:db:29:e9:
c4:5a:db:9a:8f:10:1a:1d:8f:f9:ae:3f:21:ff:aa:3b:53:4f:
58:48:94:4c:de:58:2e:bc:02:b8:16:62:89:4e:b4:6f:ce:4b:
0e:b5:82:a4:56:d9:9e:67:40:a6:e1:a4:12:81:83:8e:75:24:
63:5f:08:8a:54:d9:75:68:b4:5a:e6:06:4e:1c:18:ca:7a:ba:
1a:d3:cc:6a:2d:91:40:e7:b2:45:d3:c3:56:91:8f:07:84:f3:
9d:8c:1d:92:c9:10:18:42:53:1f:bb:76:d5:b3:91:e3:46:eb:
9c:13:b0:8e:76:68:a3:42:4d:1c:5b:3d:ce:e4:93:34:e3:f7:
a8:62:54:78:34:57:32:28:55:f9:65:5c:cd:aa:6b:05:fa:e5:
a5:52:7e:de:90:08:ef:1c:af:c8:8f:6a:40:80:80:f6:fc:10:
30:8f:cf:2f:6b:4b:aa:a4:a8:f6:d7:c0:4e:b7:4a:72:5a:d3:
92:ce:69:97:0b:4c:bf:33:16:30:7f:4a:85:0c:7e:9d:1b:7f:
86:80:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:28 2026 by rpki-client