Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier: aROCzEhiQRRS59vA7ocEi0vsrQWrGEjzng0akRAzeW8=
Subject key identifier: 45:AA:09:77:AD:FC:03:70:44:BF:B8:42:CA:A6:4B:D5:7B:BA:40:D0
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 019E30E02B9B926250EC894F162B3C702EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number: 1919
Signing time: Sat 16 May 2026 13:00:57 +0000
Manifest this update: Sat 16 May 2026 13:00:57 +0000
Manifest next update: Sun 17 May 2026 13:00:57 +0000
Files and hashes: 1: E6CY3LfvjUBm6Q8GwN_TGZ1nvYY.roa (hash: tsFDe5AJlCad9zYaLSv9SIhpivAJNZZ3f5ZSp/b5400=)
2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: ebipLlSXXsw8WfY50GTfMTc1R5hNDTyP/P5x4T/NH+I=)
3: izjd7pxJGsgVnm5wJW0mSrVCg_Y.roa (hash: hnF7Fq+5t9aF4YFqvNSO62t5HXp9Lxeq9FZy8/zmdKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:2b:9b:92:62:50:ec:89:4f:16:2b:3c:70:2e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: May 16 13:00:57 2026 GMT
Not After : May 17 13:00:57 2026 GMT
Subject: CN=45aa0977adfc037044bfb842caa64bd57bba40d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:b3:af:cf:e8:bf:d5:46:21:d7:1d:a0:f8:
1a:d7:9e:43:f2:35:61:5a:e5:1a:bf:f3:9f:3d:63:
78:a6:94:36:df:67:79:44:b7:2b:ea:a6:8c:d2:1a:
21:a9:eb:b6:c0:24:1d:f8:84:04:bc:6d:2c:ce:ac:
ab:c0:2e:ae:f6:dd:27:0c:2a:95:7a:5b:5d:d2:36:
4d:d0:b0:c1:38:40:a9:43:a8:05:36:48:36:94:21:
1b:06:81:9a:12:a5:8c:1b:16:c1:8e:b4:6f:ae:3c:
9a:8d:23:4b:a2:e5:e1:cb:06:55:ca:7e:90:95:47:
1a:49:b0:61:49:fc:64:38:72:be:c2:20:75:c1:4c:
da:36:6d:81:65:1b:b9:80:6f:07:c8:7c:22:28:50:
73:3a:49:ff:1c:87:ec:d3:c3:fb:37:a0:30:7d:00:
82:25:9b:b7:dc:18:b2:f6:5f:b2:ec:25:22:f4:da:
c6:9c:61:9d:d1:e3:6a:b0:80:9a:79:3b:5d:37:a0:
2c:8e:85:8b:7e:2b:06:a8:8e:33:e5:e2:e0:7d:42:
3c:b3:f6:a8:ef:31:4b:e9:0d:8b:7d:94:4f:7d:ba:
9b:36:42:18:97:bb:f2:44:13:3c:56:9d:21:96:a0:
11:b2:0d:c2:6c:85:a4:75:24:db:05:e3:b1:fb:b0:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:09:77:AD:FC:03:70:44:BF:B8:42:CA:A6:4B:D5:7B:BA:40:D0
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6c:69:90:28:25:94:61:3c:66:f3:6e:d5:1c:33:78:0b:c9:
3b:a8:8c:77:0d:c2:89:b6:fb:61:6e:f7:a1:ae:8d:10:f4:fd:
e5:1a:ce:cc:aa:95:0c:78:39:fb:8c:9f:64:8d:f0:c9:ca:b4:
47:ee:e2:b2:9f:c3:47:16:da:d9:a0:c3:67:22:4d:e1:1c:5e:
2b:d6:67:96:7e:9a:dd:82:3c:1c:51:87:81:b6:c2:e4:c7:74:
58:8c:25:80:0d:d4:84:8f:2c:b4:7f:dc:6b:27:39:ec:e0:19:
73:3e:bc:49:4b:ef:3b:84:13:1d:7c:8c:d0:6b:c5:61:09:e7:
51:a9:32:69:16:c6:15:bd:cd:0c:12:a2:92:01:75:52:b5:41:
51:88:03:91:ec:35:c0:f4:e9:59:f1:a9:2c:3e:cf:72:0f:ef:
cb:1d:60:4f:d1:27:6c:92:44:44:2b:84:69:f1:1b:1e:67:96:
79:4e:b0:ea:cf:86:b0:c0:29:97:db:9f:89:16:6f:0d:b4:bb:
0f:f2:d8:64:63:58:59:28:d0:4a:0e:6f:5b:54:76:3a:b8:06:
7b:dd:50:85:8e:dd:10:28:62:9b:8a:d4:a1:73:62:d3:9d:79:
e4:9a:7e:4c:74:09:6e:50:d5:44:67:3f:0c:1f:3c:9e:de:e8:
42:af:89:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:10 2026 by rpki-client