Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: d/EyQ/7lC4lJMzMglzs8vosyozBo7/0PoXhL+4raLlM=
Subject key identifier: B8:63:0D:B4:B9:45:E6:01:5C:48:12:2F:B0:1B:C3:A0:A8:FF:F3:9E
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019E2F5F887359B030D24C42C12DC2E96EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 132F
Signing time: Sat 16 May 2026 06:00:50 +0000
Manifest this update: Sat 16 May 2026 06:00:50 +0000
Manifest next update: Sun 17 May 2026 06:00:50 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: L7bpZFHQxaShdIbrxbBw9SSBNjUIq/wHDWERCy/9Sh8=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:88:73:59:b0:30:d2:4c:42:c1:2d:c2:e9:6e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: May 16 06:00:50 2026 GMT
Not After : May 17 06:00:50 2026 GMT
Subject: CN=b8630db4b945e6015c48122fb01bc3a0a8fff39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:0b:29:bc:95:72:5d:6b:02:66:f4:e7:10:
c3:f4:7f:32:d0:d3:a0:2f:39:87:0d:ea:d8:a5:cf:
60:99:75:4f:e1:6f:75:1f:13:97:ca:b5:e0:38:4b:
09:7e:fd:8e:79:a3:2f:e8:c4:4f:82:06:3a:ed:52:
3a:c6:8d:1d:33:bf:31:84:2c:9e:20:7f:82:cf:70:
e8:0c:8c:da:cb:ba:c6:fa:bd:83:f2:71:03:fc:05:
d1:05:b3:70:6c:bf:55:a3:aa:3f:d6:c7:e7:4f:78:
77:65:1e:ef:ee:4c:fb:0c:95:28:8c:5d:e4:64:0b:
8a:91:c1:cf:b1:8a:90:8d:80:a2:8b:05:4d:79:c6:
51:ba:1c:13:f4:d7:9c:0b:5f:8c:ef:a6:30:32:55:
92:5b:04:55:47:8b:e7:ee:91:1c:2b:f7:56:af:78:
3a:7a:77:a2:61:18:47:31:50:ef:03:11:ff:e2:f0:
ac:98:4f:53:5f:17:ad:5c:80:16:9c:71:0e:74:6c:
2d:60:1e:25:6e:c1:9d:2b:75:30:11:61:e4:ca:9b:
b5:2f:da:50:54:9c:3a:e2:b1:81:28:ed:17:10:77:
5b:d1:30:46:6b:c7:2c:e7:40:06:76:7f:6d:24:3e:
89:5e:10:08:7f:35:25:97:81:06:43:66:9d:ca:9a:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:63:0D:B4:B9:45:E6:01:5C:48:12:2F:B0:1B:C3:A0:A8:FF:F3:9E
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ef:b0:fb:40:b2:23:f2:51:7d:a0:c3:fe:05:c8:e8:90:ed:
9b:fe:45:20:a2:66:75:14:3b:59:63:10:db:8a:9a:d3:d5:51:
8a:9b:9e:a0:3c:30:01:1c:87:c4:93:d9:6f:b1:b1:ba:c6:ef:
83:ed:a5:92:aa:97:e0:d2:2e:73:73:95:46:f3:9c:0a:19:ad:
b9:de:b4:9b:78:9c:e7:48:92:b9:8c:58:57:cf:00:1c:df:e9:
a8:ec:42:45:be:33:fc:cc:7c:23:b8:2a:ff:cf:2b:85:a2:4b:
e9:42:74:fd:02:05:25:3a:01:e8:46:59:a1:c9:9c:ba:f5:ad:
43:00:0d:95:dc:7a:1e:79:ef:80:94:d2:10:5b:95:5f:9a:ce:
4d:d9:a8:7c:0e:05:9a:cc:a8:24:93:06:7d:78:88:4d:cf:a0:
b0:e6:1b:9a:3d:11:89:54:bb:b9:b4:7b:5a:96:51:f2:e4:c9:
ef:e7:31:85:41:6c:aa:0f:ef:8c:f1:d1:bb:e4:f8:bb:7c:10:
0e:0c:de:33:34:0a:47:76:24:5b:d1:a6:30:f9:7d:ed:b6:cb:
74:52:d4:b5:5d:85:a9:77:4b:55:c4:76:ae:c6:a3:ee:57:0e:
99:f2:f6:07:ed:6b:c3:44:76:36:e2:87:6b:ad:8b:9e:59:e0:
2a:64:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:22 2026 by rpki-client