Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: P8ljHdGa6ypfytAu7145fM6mVd4PSWGMmNpnUTTQd+8=
Subject key identifier: 80:3C:71:49:30:92:94:84:F2:DB:11:48:10:52:12:9E:5A:7F:27:79
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019E52C76AADEA1C5DD1295C8C5D3F1D5EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 038A
Signing time: Sat 23 May 2026 03:01:00 +0000
Manifest this update: Sat 23 May 2026 03:01:00 +0000
Manifest next update: Sun 24 May 2026 03:01:00 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: wVnSEzUaoBeTrgV8LlH4rantlG6fIepOrTORGQ9+YhI=)
2: 8bmJkssiqMmgoFhVLjPuiVh-JXk.roa (hash: wsFMvOiuuz/DL1nPZTplboq3GQRPHDLxwfXC+j9gOCo=)
3: I_gjmgTGM8CnfZUno5dhPGOiuGc.roa (hash: 5ceNk4RXSeeZg8BwSNJjPp6dzFZDl3gaP/ZwPUk12h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 21:53:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:52:c7:6a:ad:ea:1c:5d:d1:29:5c:8c:5d:3f:1d:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: May 23 03:01:00 2026 GMT
Not After : May 24 03:01:00 2026 GMT
Subject: CN=803c714930929484f2db11481052129e5a7f2779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:ad:9c:fe:e9:e6:7e:3c:0a:ae:50:13:94:
0a:01:91:36:32:8e:ef:ab:f0:15:c7:d5:96:97:ff:
f3:a9:48:ca:be:14:5b:95:30:d3:82:eb:a1:b3:16:
91:1f:c7:52:04:7b:04:6a:99:ed:8e:7f:2b:33:2a:
43:53:c6:a0:31:d9:16:de:f6:84:b1:2e:8f:0c:63:
fc:d5:c7:7f:90:26:37:ef:bc:e8:d8:a6:65:fb:ee:
1a:40:8e:a8:07:3c:9b:7d:23:2f:ae:3d:f8:0e:b1:
56:23:15:cb:9b:c6:30:ec:a0:33:ba:b1:78:02:16:
ce:c3:f8:df:36:92:18:30:f4:c8:4c:c8:69:42:dd:
2d:1e:7f:70:a8:2c:62:82:71:2e:0f:18:40:d3:91:
94:72:fd:40:c8:3f:3e:c5:50:4f:6a:0b:52:b0:c8:
19:a0:9a:c5:3a:c8:6e:b1:86:3e:c2:4d:ed:65:bf:
2d:d7:c7:f1:01:45:df:52:bc:03:bf:91:80:c1:8d:
c0:b6:33:96:28:68:60:e2:3f:e0:60:cb:25:4e:41:
ad:0e:b4:99:b0:2c:7c:b7:76:85:56:9b:4c:f0:96:
13:3d:2b:b4:b4:2f:28:65:fc:a4:e9:d8:6d:6b:d1:
43:6a:c5:f9:1a:78:87:15:aa:fe:c8:13:e8:57:c5:
59:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:71:49:30:92:94:84:F2:DB:11:48:10:52:12:9E:5A:7F:27:79
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fb:8a:fd:f2:d8:1e:09:48:36:23:6c:0a:14:25:96:be:d5:
45:1b:27:1a:29:af:9c:b4:ed:4e:b7:b3:dc:b0:81:d1:ae:d0:
30:66:1f:58:15:3b:e1:8b:5d:35:ec:2a:1e:26:80:20:1c:34:
0c:da:9f:c0:cf:b0:03:73:d2:a9:d0:4d:4f:82:d3:9a:85:d7:
69:ff:90:14:7f:04:80:0a:2e:55:e6:43:01:3e:b1:40:ec:db:
16:5f:74:d1:e9:a6:69:1d:d8:40:01:1c:dd:e7:eb:8f:09:5d:
de:5e:06:f6:15:a7:6b:f1:66:37:ca:ed:71:77:7f:a9:44:c6:
0b:ca:b6:c1:af:a8:13:0b:44:e8:5f:cf:68:3b:56:6c:fc:92:
1e:c2:fd:08:18:ce:93:a7:01:ec:02:dd:9b:25:66:d4:fe:4a:
dd:bc:a2:e1:23:72:c2:32:a9:12:f7:0f:3c:38:f1:12:82:a1:
e8:8d:e8:88:16:55:2b:32:9a:af:55:98:e2:48:99:4d:a2:11:
59:c5:4e:d8:3f:dd:cd:34:d7:8f:8f:c0:2d:ac:14:06:fc:b7:
41:64:28:0b:fd:b3:60:8c:37:73:6e:60:96:2a:e1:32:30:59:
ca:da:63:00:5c:25:ca:30:ac:8d:c2:e5:3d:bb:76:41:a6:21:
b6:b8:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 07:11:51 2026 by rpki-client