Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: P6Tkfon/dM+Ph8TANRiYrHLBDSH1/k5g4vj2zD3WhfQ=
Subject key identifier: 84:11:D8:72:EF:66:D3:98:43:F7:D9:1A:A3:59:84:35:0D:CB:D3:43
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 019E1D90742CA2E4B4921946DD2F71595C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 15EA
Signing time: Tue 12 May 2026 19:01:06 +0000
Manifest this update: Tue 12 May 2026 19:01:06 +0000
Manifest next update: Wed 13 May 2026 19:01:06 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: J9WuHlMzAdEmDdMnhallMxL1R4N4nTEoOQ/0pgdPHak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:74:2c:a2:e4:b4:92:19:46:dd:2f:71:59:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: May 12 19:01:06 2026 GMT
Not After : May 13 19:01:06 2026 GMT
Subject: CN=8411d872ef66d39843f7d91aa35984350dcbd343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:08:18:6d:4d:ab:f3:30:f0:37:ce:38:9b:
c6:ba:ce:e3:bb:7a:e4:41:0e:bb:b0:cd:f4:b4:7c:
4e:83:b4:b2:67:34:4c:81:44:a2:a5:99:3a:68:60:
bc:81:2b:d7:97:98:aa:75:9a:2b:58:06:f9:b0:b1:
e5:94:04:1c:5d:ea:32:d8:75:d9:49:8a:fd:12:9d:
2f:da:c2:11:4a:bd:bf:95:fb:43:37:15:b5:f5:d8:
48:de:b7:0b:e7:61:40:47:f3:05:af:88:e4:25:37:
72:34:ee:09:ba:a3:f7:26:6d:9e:7b:85:2b:7c:c4:
33:34:f1:12:e0:80:d2:00:ef:05:8c:9d:33:25:c6:
b8:a9:d2:7e:53:c7:96:b3:4b:fd:3f:05:fc:a2:79:
b5:98:39:e4:a5:a7:47:3c:36:d6:4c:43:05:97:7a:
57:1b:e7:be:fe:20:7b:52:76:c1:7d:1c:40:20:5e:
1a:18:1a:a1:a9:72:67:65:44:d1:a9:b6:4e:32:56:
d8:14:3d:df:94:b2:ac:c4:c1:67:0c:45:26:46:8e:
d8:e6:e5:59:b7:70:10:ca:b8:c1:08:1d:32:20:41:
9d:89:6a:21:77:39:f2:3c:70:f8:9f:3d:6d:52:7d:
dd:09:32:ea:8a:b6:4d:fc:0b:90:4d:0a:96:7c:2a:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:11:D8:72:EF:66:D3:98:43:F7:D9:1A:A3:59:84:35:0D:CB:D3:43
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4f:4c:45:55:b9:6d:43:28:ff:47:1c:ab:ac:4e:70:9a:64:
72:cf:1b:05:75:e8:bd:13:a6:1c:8c:38:d3:f1:31:72:53:28:
10:13:72:1e:c3:43:d5:b0:cb:1e:18:b2:99:1d:19:8d:db:da:
cc:5a:fa:7d:6c:0d:99:c2:f3:66:96:ce:97:00:6e:15:84:3a:
bb:2c:65:bd:90:e8:00:4e:25:8b:1c:a7:c9:93:7f:df:68:16:
0e:ff:8a:8d:54:be:56:82:3e:fc:ec:c8:3d:bb:dd:b0:5c:b7:
7b:01:b8:c9:99:84:e9:d0:f9:c3:b6:6b:6c:2f:02:8d:eb:af:
d6:c9:0c:5c:4c:f5:de:55:a8:cf:a1:c0:c9:e2:0c:aa:ba:b4:
a0:5d:fc:82:4b:5c:4a:80:62:91:8f:a6:d0:d4:87:6b:27:dd:
30:9a:6b:90:40:e3:ee:f6:05:44:6e:ce:c1:4f:e2:e7:dc:e9:
c4:d7:30:84:7e:07:3e:b9:a3:18:b7:3c:27:e6:44:02:1f:88:
09:e6:fe:d5:3c:16:c3:61:e2:41:1f:18:12:04:16:62:6d:28:
7c:e1:ae:98:48:36:67:d6:09:22:25:76:25:30:85:ed:b7:d4:
ec:22:81:e3:f9:ba:58:ed:16:76:80:86:78:86:14:74:33:83:
e7:31:05:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:15:35 2026 by rpki-client