Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: sGgeOmmtVSn4eeWqjDOFV8SMPdLGNjUdTeordjYMseI=
Subject key identifier: 20:37:B4:4C:3E:6E:53:2C:50:BB:BB:7D:BC:FE:B1:D7:8D:1F:1B:8B
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019E30724FE9C01962F36E648F5E3DF0FC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0D3B
Signing time: Sat 16 May 2026 11:00:58 +0000
Manifest this update: Sat 16 May 2026 11:00:58 +0000
Manifest next update: Sun 17 May 2026 11:00:58 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: w5bbYOPM71Qkj+oRjXDlUC/889/mARGctAsKWDcRPlo=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:4f:e9:c0:19:62:f3:6e:64:8f:5e:3d:f0:fc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: May 16 11:00:58 2026 GMT
Not After : May 17 11:00:58 2026 GMT
Subject: CN=2037b44c3e6e532c50bbbb7dbcfeb1d78d1f1b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:0b:51:86:f1:c8:69:09:ca:97:71:a9:74:
05:bb:6e:9b:ea:35:82:1f:fb:ad:e0:75:d7:bf:63:
aa:ab:ed:f2:4c:68:31:25:ec:0d:f7:47:d1:71:18:
9e:2c:73:ef:93:31:c5:0a:ca:06:4f:c2:95:bb:95:
6c:45:e5:c5:da:c9:79:a1:b0:59:bd:1d:8f:26:b5:
a7:e1:a5:b3:27:d7:7a:ea:5a:97:a8:28:f2:e4:06:
b4:37:32:87:17:31:d9:e6:6a:8c:6c:75:29:36:65:
52:2e:e7:b7:be:fa:48:cd:1b:0b:f8:b0:6b:63:a4:
07:f0:ad:d0:67:88:58:93:e8:3a:7e:50:16:e1:50:
61:77:e2:b5:bd:0c:0e:fe:c0:de:aa:00:c9:2b:45:
21:b9:18:a5:9e:c6:17:bf:13:d0:dd:fe:96:0f:0e:
59:a7:45:6e:71:03:f1:60:d5:02:f5:84:5c:10:79:
45:ac:c5:67:75:67:17:49:f8:6a:4e:fa:46:36:14:
6d:9c:a3:4b:c9:7a:16:07:58:dc:23:a4:a0:a3:d3:
f4:53:60:ee:a6:2d:40:57:ef:3d:86:1d:b7:0d:a3:
d8:be:95:db:86:a2:f1:82:b6:c1:51:01:7b:5f:bf:
3a:0a:c8:e0:a0:2b:ee:30:dc:2f:97:e9:a5:f6:db:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:37:B4:4C:3E:6E:53:2C:50:BB:BB:7D:BC:FE:B1:D7:8D:1F:1B:8B
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:90:ca:3d:b5:df:bd:7a:ee:f2:d4:1b:c9:b1:2e:b3:75:ba:
66:22:df:8f:9d:d1:7d:29:3b:c2:34:ce:7b:f7:77:80:43:05:
92:6d:6a:48:b0:45:44:54:bf:41:cb:24:d6:38:4c:2d:00:05:
ee:30:39:e5:e3:da:9b:93:c5:3f:ef:98:83:17:0b:1e:62:d6:
8a:f3:bc:ad:92:b5:4a:12:25:a5:f3:7e:07:92:52:87:68:04:
57:43:8c:6d:1d:5e:82:41:cb:c1:a6:de:50:30:3b:82:e6:9f:
6f:6b:aa:b9:95:6e:45:dd:e7:33:06:ee:47:60:11:f5:04:7a:
f6:de:c5:ce:bb:c9:40:1d:b2:d4:5f:b4:9d:71:05:13:02:b2:
1a:c1:c4:d7:92:ae:a5:e8:0a:4d:14:81:48:b5:f8:dd:1a:9c:
1a:0e:5f:0f:8b:02:0f:c9:52:eb:29:82:93:27:2a:51:ef:3a:
2b:ea:16:95:be:16:c1:ab:73:02:e5:68:10:41:be:96:e8:06:
2d:48:c6:0a:57:87:3c:05:30:66:d4:ab:d3:cb:fb:41:7e:fa:
e1:df:55:2e:7d:5b:be:6b:9e:61:3c:6e:55:13:8d:55:e4:dc:
12:17:96:a6:95:44:25:e0:b9:3d:13:5c:ef:2a:75:4f:cc:c9:
eb:56:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:35 2026 by rpki-client