Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: 6lxwxZsonH968ajsdLl2iStS1BCvLaM5jLM18JlCCi4=
Subject key identifier: 26:22:49:B0:33:3F:26:3B:53:89:1A:34:4B:C6:52:C5:75:1E:D6:A6
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019E2F972BEC6BF196F1607314389DB10041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0595
Signing time: Sat 16 May 2026 07:01:36 +0000
Manifest this update: Sat 16 May 2026 07:01:36 +0000
Manifest next update: Sun 17 May 2026 07:01:36 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: Fs5asow1qUJ/V/ohFZmcnlXM+Akef3RKq8TUl042ugw=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:2b:ec:6b:f1:96:f1:60:73:14:38:9d:b1:00:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: May 16 07:01:36 2026 GMT
Not After : May 17 07:01:36 2026 GMT
Subject: CN=262249b0333f263b53891a344bc652c5751ed6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:cd:46:ff:15:3d:38:d6:56:3f:d7:c8:31:
95:dd:56:80:19:91:10:c9:5b:c3:6b:41:ee:72:cd:
ad:3a:6f:31:a6:9c:93:ea:e3:a5:bf:67:64:21:c5:
59:9f:2b:10:a3:a4:a5:cf:61:ae:50:46:14:ac:23:
1a:0a:ad:b0:e3:d1:2c:ba:6b:88:43:b2:48:c6:e6:
54:23:b9:70:ad:d4:4b:3e:e4:38:08:83:fa:4a:82:
02:72:6e:1e:06:d0:04:cb:ae:7d:39:c8:74:48:48:
c3:61:10:2e:2d:86:8a:e9:24:12:3b:21:1f:0b:ef:
27:2f:4d:1a:ab:6b:e2:3a:5c:bf:92:ee:68:a7:61:
46:10:fe:84:58:46:bb:0b:5c:1b:6e:dd:94:0d:19:
b4:38:a8:3e:93:77:6f:d6:d0:cf:20:3b:db:20:7d:
09:90:d2:00:b8:a0:34:5a:f0:a0:a6:c7:ad:d8:4b:
75:96:1c:e3:7a:3e:40:e2:cc:04:f4:49:99:aa:79:
a7:d2:82:08:c7:57:68:41:09:fe:2c:e2:14:ac:1b:
9c:3c:f7:7c:22:54:1a:c6:21:3e:7e:e7:7e:9c:e0:
5e:c4:96:24:f1:3b:0a:dd:3d:ea:3e:a5:9c:42:f0:
4d:bf:30:01:9a:64:a6:3e:d4:5d:ed:07:d3:f7:ad:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:49:B0:33:3F:26:3B:53:89:1A:34:4B:C6:52:C5:75:1E:D6:A6
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:62:c6:29:34:11:0d:3a:ad:af:95:4d:10:40:a2:38:bb:0b:
99:aa:0e:c5:f3:95:90:ac:8a:1a:82:42:73:13:8d:42:b1:9c:
a9:7e:98:41:7a:5b:2b:6a:bb:24:8f:81:36:d0:18:86:43:42:
9b:97:57:2f:ce:f0:28:32:e8:00:fa:1c:44:11:7d:c3:e6:42:
ed:16:1b:9a:a1:76:b7:dd:b4:91:95:a7:42:48:36:3b:8e:27:
24:73:75:75:76:1f:e8:ff:01:ac:96:0a:bb:d6:f1:44:ce:6d:
11:19:53:7e:4e:b8:88:41:9b:0c:fd:6a:39:58:f7:a0:67:b3:
1a:7a:be:f9:c8:b9:f4:32:f5:6a:65:4c:f2:f8:b3:30:af:c3:
db:e0:9f:20:75:2c:e1:80:36:19:b1:4a:53:ec:ef:82:3a:50:
84:8b:d3:ed:96:3f:25:39:9f:a4:fe:78:5b:3d:ed:70:c8:86:
d3:c4:d6:0f:4c:78:01:a4:36:55:7e:56:d4:f1:db:0e:ed:e8:
93:84:5c:b4:1a:44:69:85:39:cf:7a:c9:52:c0:db:2b:60:12:
c8:e5:f1:68:1b:6e:58:8b:9c:03:11:03:16:6e:3c:78:57:cf:
aa:0c:14:36:9c:7e:bb:f7:9e:39:3b:5f:8b:d9:7d:d4:e1:a3:
0b:78:64:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:37 2026 by rpki-client