Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: +Pp4jC+D1HGgjAyQLr9aoP0S7nVCuIx96xIu9tzcE88=
Subject key identifier: 02:86:56:64:F6:FC:08:A9:B8:51:E3:D7:3B:37:F6:64:28:4D:8C:9F
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 019E30A9701D012D68F5BCAA30A33F6074D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 12:01:11 +0000
Manifest this update: Sat 16 May 2026 12:01:11 +0000
Manifest next update: Sun 17 May 2026 12:01:11 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: bqwQ1I4K3s3x2/ghXOYPwP3smg0MeJgzV7JHf4ZRfw0=)
2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:70:1d:01:2d:68:f5:bc:aa:30:a3:3f:60:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: May 16 12:01:11 2026 GMT
Not After : May 17 12:01:11 2026 GMT
Subject: CN=02865664f6fc08a9b851e3d73b37f664284d8c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:f9:62:86:0b:ac:69:ed:11:fd:0c:14:b9:
35:17:f4:fc:f7:6b:ae:9e:79:fd:e6:e3:8b:3f:4d:
fd:f9:b2:ba:5e:e6:5c:eb:33:96:d4:01:e9:00:e6:
cf:25:69:53:22:12:d4:e7:4c:97:6f:5f:ee:00:68:
70:1a:f1:3a:60:e9:e9:9f:9d:54:1e:f7:2c:a3:81:
6b:14:4c:7f:f3:4d:2d:03:b9:9d:4c:c7:60:d6:be:
07:60:05:db:87:ab:ce:fc:59:94:b0:b5:28:7d:23:
11:3a:c2:45:28:2e:22:4a:72:93:5b:16:f6:38:50:
d8:3b:9b:e2:ea:29:ab:7f:20:72:c0:a7:a0:e4:18:
c4:4a:06:cd:28:ac:ad:9d:67:62:ce:db:5f:01:c3:
aa:1b:7e:b4:1d:c2:a9:ad:88:cc:39:13:e1:05:9c:
26:93:f7:97:b6:3b:30:bd:31:45:c3:5e:59:db:f3:
3c:cd:d9:8e:13:33:3e:dc:4d:98:9e:9a:57:5d:d1:
b9:a1:bf:68:5f:49:02:23:48:48:38:3e:04:37:b3:
cf:5a:38:ca:29:fe:04:de:05:13:ad:da:ff:27:bc:
64:5f:5d:ea:0b:9b:ed:4c:6a:da:dc:49:70:38:8a:
f8:bc:dc:06:21:77:2b:ae:1e:ed:c6:65:93:f3:5f:
d0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:56:64:F6:FC:08:A9:B8:51:E3:D7:3B:37:F6:64:28:4D:8C:9F
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ec:9b:ec:19:d1:0a:bd:5d:8d:0b:d5:86:ff:20:2f:ef:68:
4e:95:0f:23:c8:7c:2f:da:25:fe:cd:93:4f:0e:81:7d:80:4d:
8c:be:94:e2:5a:e6:ec:7e:86:8b:c4:e2:55:d7:21:29:84:f4:
1d:82:ea:31:8c:f8:6d:1b:fd:bd:c6:b8:84:97:b2:df:63:96:
f6:37:11:eb:01:86:c7:7b:01:c3:30:e8:09:c6:d7:16:b3:22:
e4:08:f5:5c:d7:fe:8d:d5:06:6f:3e:29:be:d9:d2:87:11:de:
57:d5:10:fd:1d:cb:8d:9d:1c:8f:b9:4a:9f:23:d7:25:8c:22:
9b:12:12:41:5d:c4:f0:81:5c:ac:f9:e4:88:47:77:4e:d5:d0:
b9:da:1a:1c:96:26:03:69:8e:ed:ff:c1:94:f6:6d:44:51:ba:
c6:a7:b5:19:49:0a:d7:9e:b7:78:a4:c2:9c:43:fa:75:d3:09:
87:a8:1e:65:89:47:27:26:bc:d4:dc:cf:70:06:8e:77:32:9d:
a1:25:8e:09:29:9a:53:a2:98:00:c2:46:35:86:b4:ed:ff:0d:
b7:89:66:fc:0b:5f:c4:93:a0:d3:f6:e7:94:4d:52:21:2e:12:
95:cf:62:2e:ca:16:f8:59:05:2b:4d:1a:21:79:5e:81:7a:37:
03:de:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:20 2026 by rpki-client