Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
File: 1gTknpKDBavLjzLe8_78A-u83kQ.mft (raw, json)
Hash identifier: 1LT+Qifd9jHB91ze+WiuhvO3y7tWIRUUGKAZN0mJ3yo=
Subject key identifier: AA:65:27:31:A0:AF:85:A5:75:81:70:9A:74:C1:D2:0D:9E:67:F6:1B
Authority key identifier: D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
Certificate issuer: /CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Certificate serial: 019DFF183C7666B88D9CB16CC154623CB720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
Manifest number: 1889
Signing time: Wed 06 May 2026 21:01:11 +0000
Manifest this update: Wed 06 May 2026 21:01:11 +0000
Manifest next update: Thu 07 May 2026 21:01:11 +0000
Files and hashes: 1: 1gTknpKDBavLjzLe8_78A-u83kQ.crl (hash: yH+hZzc1QjbsS0tGrlAbFAPP8fUQx20egzS6LcRuA6c=)
2: O3NHX1xusGOC_jwAncPD2CBztNE.roa (hash: tIvb5cVDrsiT8uq8kfesqrbk5rRYub73yqvQwpeTOXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:18:3c:76:66:b8:8d:9c:b1:6c:c1:54:62:3c:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d604e49e928305abcb8f32def3fefc03ebbcde44
Validity
Not Before: May 6 21:01:11 2026 GMT
Not After : May 7 21:01:11 2026 GMT
Subject: CN=aa652731a0af85a57581709a74c1d20d9e67f61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:76:b8:8b:26:12:61:3b:fc:10:26:52:f8:7b:
70:2d:7b:8d:17:e9:aa:1e:27:c1:72:cd:0b:70:44:
74:2d:32:c9:40:6f:18:83:3e:66:57:42:80:3d:af:
f8:9f:d2:37:2d:7e:c7:be:48:55:08:a2:66:a7:f7:
65:3e:8e:6d:f0:74:28:55:18:ba:57:30:35:24:62:
ef:7c:e3:0b:e6:2b:0b:0c:66:9f:c3:1b:60:b2:a4:
8e:89:88:29:97:04:c8:85:30:fe:da:07:af:cf:80:
ba:44:3d:e9:a0:9a:09:6c:75:1e:4c:d8:2c:9e:76:
f1:83:d4:c1:94:07:10:0e:58:9a:5e:7f:cb:b9:1a:
c5:d5:e5:d0:c5:3b:f3:55:d8:c4:28:2e:dc:cc:2b:
63:dc:1a:9d:55:08:d6:f3:a0:85:40:6c:d7:52:0c:
40:db:f8:a5:bf:ee:b2:a5:79:6e:36:54:66:fa:28:
1f:ee:19:93:f3:26:3d:af:eb:db:df:b9:f5:0d:ab:
9d:06:31:29:44:45:b5:75:22:70:45:3e:e4:5a:1d:
a0:1a:10:8b:f3:d7:5c:ab:fa:c7:f3:fd:af:65:bb:
45:5f:6e:a5:51:00:7c:c6:3c:d7:c3:4e:bf:ab:96:
99:0f:5e:ba:4d:42:3a:1e:12:1a:e5:8b:b6:d9:70:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:65:27:31:A0:AF:85:A5:75:81:70:9A:74:C1:D2:0D:9E:67:F6:1B
X509v3 Authority Key Identifier:
keyid:D6:04:E4:9E:92:83:05:AB:CB:8F:32:DE:F3:FE:FC:03:EB:BC:DE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gTknpKDBavLjzLe8_78A-u83kQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a830a2-0271-4de9-bc38-03c82157421a/1/1gTknpKDBavLjzLe8_78A-u83kQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2e:b2:50:07:35:3c:a3:26:de:05:56:d9:38:5b:89:4b:6a:
6e:f5:84:c1:3c:42:7c:23:36:15:26:bd:a3:57:35:d0:4f:d0:
22:8e:3f:89:a6:c7:e9:7a:4f:1e:d0:cd:c6:e0:60:67:a2:36:
06:7a:66:26:f2:e0:d2:01:6d:fc:ce:e4:75:53:b4:7c:32:ba:
86:07:fd:39:66:2c:66:93:0e:5b:60:63:6e:cc:fa:ce:02:0a:
c2:fe:34:f1:28:42:0f:30:a9:0d:a7:2a:53:93:c6:03:ed:e0:
ed:00:da:8e:da:c0:87:d1:01:b6:90:21:c6:9f:c8:8f:f1:28:
de:c9:95:93:6e:c2:79:02:60:b9:7d:9e:d5:c3:15:ac:1b:04:
a1:31:aa:83:35:5d:44:57:86:65:af:a9:04:fd:f0:c3:57:8b:
fd:ce:fb:36:97:cb:50:b9:2e:2a:23:ca:77:5d:3c:95:2b:4a:
20:6d:04:b1:8c:84:7b:6f:2d:ed:fa:1f:ba:c4:98:85:6e:84:
52:67:68:20:30:a8:0f:15:73:46:9b:ad:2c:5f:6c:b3:35:c0:
5b:d2:bf:99:4d:4a:b6:80:32:22:19:46:81:43:11:27:a8:ce:
15:2c:1d:39:62:33:f7:e8:0c:68:3f:c4:09:a1:c6:78:23:38:
b1:75:7a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3/GDx2ZriNnLFswVRiPLcgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDRlNDllOTI4MzA1YWJjYjhmMzJkZWYzZmVmYzAzZWJi
Y2RlNDQwHhcNMjYwNTA2MjEwMTExWhcNMjYwNTA3MjEwMTExWjAzMTEwLwYDVQQD
EyhhYTY1MjczMWEwYWY4NWE1NzU4MTcwOWE3NGMxZDIwZDllNjdmNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3a4iyYSYTv8ECZS+HtwLXuNF+mq
HifBcs0LcER0LTLJQG8Ygz5mV0KAPa/4n9I3LX7HvkhVCKJmp/dlPo5t8HQoVRi6
VzA1JGLvfOML5isLDGafwxtgsqSOiYgplwTIhTD+2gevz4C6RD3poJoJbHUeTNgs
nnbxg9TBlAcQDliaXn/LuRrF1eXQxTvzVdjEKC7czCtj3BqdVQjW86CFQGzXUgxA
2/ilv+6ypXluNlRm+igf7hmT8yY9r+vb37n1DaudBjEpREW1dSJwRT7kWh2gGhCL
89dcq/rH8/2vZbtFX26lUQB8xjzXw06/q5aZD166TUI6HhIa5Yu22XAqVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKplJzGgr4WldYFwmnTB0g2eZ/YbMB8GA1UdIwQY
MBaAFNYE5J6SgwWry48y3vP+/APrvN5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hODMwYTItMDI3MS00ZGU5LWJjMzgt
MDNjODIxNTc0MjFhLzEvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hODMwYTItMDI3MS00ZGU5LWJjMzgtMDNjODIxNTc0MjFh
LzEvMWdUa25wS0RCYXZManpMZThfNzhBLXU4M2tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAci6yUAc1
PKMm3gVW2ThbiUtqbvWEwTxCfCM2FSa9o1c10E/QIo4/iabH6XpPHtDNxuBgZ6I2
BnpmJvLg0gFt/M7kdVO0fDK6hgf9OWYsZpMOW2Bjbsz6zgIKwv408ShCDzCpDacq
U5PGA+3g7QDajtrAh9EBtpAhxp/Ij/Eo3smVk27CeQJguX2e1cMVrBsEoTGqgzVd
RFeGZa+pBP3ww1eL/c77NpfLULkuKiPKd108lStKIG0EsYyEe28t7fofusSYhW6E
UmdoIDCoDxVzRputLF9sszXAW9K/mU1KtoAyIhlGgUMRJ6jOFSwdOWIz9+gMaD/E
CaHGeCM4sXV6OQ==
-----END CERTIFICATE-----
Generated at Thu May 7 06:31:46 2026 by rpki-client