Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: pMYWXvrknNWGt0czkuOut2o1coN2kdyItr/AhLzzvAY=
Subject key identifier: CC:19:5D:FB:B7:08:58:27:B9:94:F5:27:99:4C:69:15:04:98:6F:EE
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019E1CB520E6B92AF8BC64649B92E3EE3C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 10E7
Signing time: Tue 12 May 2026 15:01:32 +0000
Manifest this update: Tue 12 May 2026 15:01:32 +0000
Manifest next update: Wed 13 May 2026 15:01:32 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: mTjAlj+O6fF5MzZNOoIwg8KakYWZ2bqQu6W054IribE=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:20:e6:b9:2a:f8:bc:64:64:9b:92:e3:ee:3c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: May 12 15:01:32 2026 GMT
Not After : May 13 15:01:32 2026 GMT
Subject: CN=cc195dfbb7085827b994f527994c691504986fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:c4:0e:0b:3b:72:d2:22:99:4a:f2:1a:ba:
88:d0:31:a0:7d:3b:fe:20:3c:a0:19:cc:7e:ac:74:
14:d6:72:5a:b8:ab:4f:54:b5:07:87:0e:f2:96:d1:
3d:f5:be:1f:9b:51:96:f6:85:90:52:c4:26:a0:5d:
7d:43:5f:3d:73:91:4e:a7:2f:ea:ef:1f:4b:a5:b9:
da:68:82:c7:fe:48:e6:c2:c8:61:ae:1a:c8:f8:30:
a4:61:cd:7b:cc:de:0a:1b:9a:d2:34:75:7c:79:62:
52:43:53:1d:2f:3c:02:4f:02:7a:44:0e:0f:64:48:
76:31:50:fa:fd:4e:7d:94:ee:94:a8:15:34:5a:29:
f4:b1:45:0e:bd:af:f3:7f:02:ba:d7:35:78:5e:33:
b6:8b:37:2b:c1:0e:02:9f:bd:f4:6f:78:aa:d1:62:
f7:35:8e:6a:d2:90:e2:6b:d8:8f:92:37:0b:44:cf:
b8:fb:87:1e:a6:9d:5b:84:ed:3e:e5:86:c3:b5:68:
c2:6d:e9:ef:1d:e9:fc:f7:1f:66:b0:f2:10:b6:44:
80:a1:79:c7:eb:f5:97:14:29:c5:8e:73:49:eb:ce:
b1:9e:e2:62:f9:18:78:b0:7a:8a:ea:ce:14:bb:e7:
87:bb:4a:c9:6a:58:93:a5:be:60:60:74:a2:ab:d5:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:5D:FB:B7:08:58:27:B9:94:F5:27:99:4C:69:15:04:98:6F:EE
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:53:39:17:67:dd:f9:12:67:52:b7:a1:7d:e6:43:b5:68:02:
93:91:34:5b:a2:d3:07:ce:ac:cb:cd:e3:90:dd:ce:a9:f4:ec:
53:81:d9:35:cf:bb:24:51:df:cd:38:cf:ce:32:db:48:17:ab:
35:f5:fb:eb:90:ff:f3:dc:75:e4:2d:74:e6:7e:fb:ec:11:6c:
05:a7:c3:39:ac:1d:d1:81:01:d1:59:b7:ac:da:02:20:a9:6c:
5d:a6:0b:95:be:6c:8b:16:1e:b1:10:3b:de:2d:8d:5b:24:e9:
eb:ea:42:f1:8c:23:29:1a:c3:02:ad:96:48:05:cc:bc:24:54:
74:83:c2:e7:cb:99:a5:e4:c9:4f:e1:60:aa:2d:16:5c:df:46:
25:5b:19:e9:7c:b9:2b:85:53:c1:b5:d1:bf:de:13:97:6b:33:
07:62:1d:e7:d9:c6:15:bf:f6:bb:81:bf:26:53:6d:96:c7:0e:
12:60:a9:c7:d3:cd:e0:ff:c4:ec:82:bc:75:da:f1:30:37:6f:
30:a8:7c:81:ff:54:f4:99:e9:a4:f5:c5:2e:aa:15:c5:94:a5:
66:76:74:14:18:d4:bb:9d:94:c8:a7:3a:05:85:7b:29:77:fa:
16:9c:63:d9:a6:97:56:52:29:bf:8d:8e:1e:84:c6:8f:92:a6:
46:7b:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:27 2026 by rpki-client