
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: 3c79du+X/gM9x2QuD/n2nksUER8MXHhS7khqLc/i0nM=
Subject key identifier: 39:E5:8A:92:CD:A2:DD:25:20:54:CF:46:3B:B8:CC:DF:51:5B:52:79
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 019E1D59C6983AF5C9321D7F3ACC03BFC17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 08BC
Signing time: Tue 12 May 2026 18:01:23 +0000
Manifest this update: Tue 12 May 2026 18:01:23 +0000
Manifest next update: Wed 13 May 2026 18:01:23 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: at3URruq9/zl44pPaWX/ddEH76gsqzApwDqDPODpSho=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c6:98:3a:f5:c9:32:1d:7f:3a:cc:03:bf:c1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: May 12 18:01:23 2026 GMT
Not After : May 13 18:01:23 2026 GMT
Subject: CN=39e58a92cda2dd252054cf463bb8ccdf515b5279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:75:bd:7d:d6:b1:13:d5:bc:79:47:8f:92:
13:71:10:f9:ef:ed:2b:5e:d2:5f:72:1d:7d:a2:42:
82:fa:43:8d:17:f7:56:a1:61:a7:7a:60:6b:0f:72:
4c:5c:1b:11:1a:12:40:3b:d2:99:00:ca:93:55:8d:
67:f7:f1:28:3d:e8:6c:18:18:ec:d7:c6:59:be:73:
9a:05:a9:52:d6:9d:2d:47:e3:15:91:8d:83:a7:a3:
31:54:2a:85:c7:1e:bd:a3:ba:68:0b:a8:9a:a0:fb:
0b:76:53:31:05:da:81:90:73:d4:0c:6a:f6:51:c6:
a4:a5:ce:d4:9e:1f:f6:ed:1e:50:55:44:b5:a1:01:
4d:0a:b4:dd:b0:51:78:27:4d:9a:ea:8b:87:20:a5:
6b:ee:d3:d3:98:59:aa:09:d0:25:b8:32:f0:4e:fa:
a6:f8:0b:3a:0c:26:49:6f:c6:4b:d9:a7:fc:b1:cd:
64:55:82:4a:27:a3:a1:fd:53:3f:4c:85:75:22:39:
2b:f4:be:c6:4e:1f:e0:1b:e2:fe:88:8b:88:3e:3e:
45:9f:29:f2:60:5b:c4:80:1d:79:62:bd:8b:15:59:
89:54:d7:96:c7:7e:f1:74:07:0b:29:41:d9:0f:9f:
4c:14:62:33:ea:6e:cd:34:19:8b:2d:43:86:96:52:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E5:8A:92:CD:A2:DD:25:20:54:CF:46:3B:B8:CC:DF:51:5B:52:79
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:64:18:7b:df:9e:d0:34:a4:ec:4b:17:8a:55:9d:3f:67:7a:
fd:7d:b2:72:12:e0:97:c3:96:fc:a7:9d:f3:d9:13:38:36:7d:
4d:9a:7c:1a:01:9c:aa:81:b5:5d:d1:ba:02:97:17:be:81:56:
d0:37:2a:24:5c:38:18:08:bd:f4:4a:b9:e9:3d:1a:c6:66:b1:
59:ce:d8:52:c1:52:2f:2b:1e:4b:21:18:fc:40:6f:cf:4f:39:
43:04:61:66:95:2c:d6:7a:9d:14:fe:5d:37:1c:97:80:29:ca:
81:18:64:90:10:e2:43:f2:5d:f1:4a:41:af:71:67:04:e9:8a:
a6:6f:af:7c:3b:79:a0:3e:ac:a4:46:af:a9:7c:28:14:4f:23:
20:a5:b5:35:41:eb:23:8e:5d:94:1b:a7:04:44:45:ab:11:03:
d5:70:27:b7:a1:b0:b8:e8:97:b5:de:66:26:7d:d4:da:18:9f:
5b:01:03:f0:2c:62:ff:68:59:8d:da:d6:ea:3a:e2:af:91:ae:
72:8a:68:c3:12:8f:1f:f4:e3:59:22:4f:92:83:10:45:a9:78:
ca:29:75:8a:78:23:88:b7:8e:74:3a:d6:79:40:22:9d:d3:e4:
6b:a4:8a:bc:fc:a1:8a:34:1a:33:3f:69:a6:fc:4d:38:bb:34:
63:3a:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:06 2026 by rpki-client