Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier: z3zqfkPnBLe86Mjs1Hc/peMjRipt2aWUESdb6eAO/+Q=
Subject key identifier: 13:5B:72:F6:0E:A5:FB:18:4C:C6:7F:D2:AC:73:E6:A6:D3:B4:5F:A4
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer: /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial: 019E1EA2DBFDD97C5C712579E774D7C55E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number: 0500
Signing time: Wed 13 May 2026 00:00:50 +0000
Manifest this update: Wed 13 May 2026 00:00:50 +0000
Manifest next update: Thu 14 May 2026 00:00:50 +0000
Files and hashes: 1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: UZhocz8CsMyZzue2F0GU/rkMRxGlBhX89t4nnjG66zI=)
2: xzZmjyBgUA5PVhf5CC_hJNwcVzY.roa (hash: NZxy7sLP8vd+st6fA6TY6gFnYnOKj2RudHOzgNs7jsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:db:fd:d9:7c:5c:71:25:79:e7:74:d7:c5:5e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Validity
Not Before: May 13 00:00:50 2026 GMT
Not After : May 14 00:00:50 2026 GMT
Subject: CN=135b72f60ea5fb184cc67fd2ac73e6a6d3b45fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:f2:9c:59:fd:56:25:e8:85:54:35:0f:06:
d5:84:b2:ca:7c:e0:82:f1:51:42:f6:b6:39:be:19:
d4:98:db:01:7f:1a:2e:e3:47:6a:93:ec:a6:0c:ee:
44:aa:db:2b:2f:ed:e8:24:6f:f5:77:e1:a2:b3:3c:
df:26:4d:a0:d2:fd:ef:fe:f8:8e:9a:66:a9:88:c0:
6c:ce:eb:1c:9f:7b:54:b9:69:b1:5e:d5:2b:96:be:
d3:c1:a9:3a:23:47:f9:5b:55:82:9d:41:93:95:3f:
5b:3b:86:e3:4d:11:c4:cb:f7:df:51:c5:83:6c:d1:
2f:76:49:7a:15:69:74:85:7c:04:6f:91:7d:9b:6a:
ad:25:6d:b2:bc:57:06:3e:ec:9c:25:24:c6:71:45:
a8:d7:a5:ef:3e:d3:a2:cd:2b:86:0d:d5:47:53:66:
34:35:75:76:e0:80:56:ba:12:ce:d9:74:24:0f:d0:
61:ef:1e:6e:06:42:36:78:86:2e:4f:c5:0e:f1:8d:
cf:53:ae:a5:71:4a:ae:11:8d:19:3a:3d:11:e8:fe:
e9:b9:38:21:43:37:97:c4:ed:99:65:a1:04:b8:83:
d6:c4:c8:f3:1d:d9:4f:8d:20:36:01:da:a8:48:27:
41:17:04:42:4a:17:95:a7:dd:84:3f:1e:43:22:f6:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5B:72:F6:0E:A5:FB:18:4C:C6:7F:D2:AC:73:E6:A6:D3:B4:5F:A4
X509v3 Authority Key Identifier:
keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7c:5c:81:fa:32:c8:f5:11:f1:cf:f8:f4:cc:01:82:07:d6:
48:97:0d:dd:c4:95:ae:6d:ae:e7:57:43:e8:c5:df:6d:04:94:
2e:81:1c:dd:82:bd:8e:bf:3c:6f:76:4c:49:14:f7:fa:c9:00:
eb:3d:00:56:3a:9f:86:1b:79:b2:c3:25:d4:8c:68:14:cd:f9:
de:2d:b8:b2:09:e9:03:0d:2c:d2:17:d4:de:86:b2:6a:4c:25:
42:05:ba:91:6a:c1:ed:17:ac:bc:72:16:21:2d:7c:2a:78:96:
b8:e3:83:42:d0:fc:76:64:96:7a:5b:2b:d5:ea:f8:25:41:87:
3b:82:02:a6:c4:17:dd:e9:1b:c3:63:31:dc:5a:9b:b9:27:4c:
d5:31:76:b3:38:ad:f2:dd:a7:21:7a:05:8c:7e:97:b7:57:39:
b8:56:f1:74:8f:18:01:b4:bb:31:55:c4:11:71:c3:6b:67:97:
73:ac:85:a2:a0:be:c5:59:8a:1b:64:50:a1:47:c9:04:5d:0a:
dd:dc:79:65:3f:c1:e0:8d:09:d7:02:2d:fd:b7:d9:bd:61:3e:
19:c6:95:e7:62:23:15:1e:3b:ee:c5:92:6d:f0:58:b5:82:34:
df:d2:d0:98:b9:5b:2a:cd:aa:41:ff:39:1d:6e:46:8f:db:dc:
e3:32:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:49:14 2026 by rpki-client