Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: qeRJdJBNH/J8FPDyRW9FQdKfoY1e6ZAjEbIuGJVMlSs=
Subject key identifier: E2:1B:05:28:ED:0A:8D:60:F3:A4:16:90:2E:CA:16:01:C3:26:51:4C
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019E303B9E7D212C24460B3E4C9EDAE164A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 188E
Signing time: Sat 16 May 2026 10:01:13 +0000
Manifest this update: Sat 16 May 2026 10:01:13 +0000
Manifest next update: Sun 17 May 2026 10:01:13 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: JYh0fBU6BWEnRt1fhN2Ei+w5+/CAbpCqLlaLTvA652I=)
2: eGbytIohe-kr726dY0U9-5W_3W0.roa (hash: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:9e:7d:21:2c:24:46:0b:3e:4c:9e:da:e1:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: May 16 10:01:13 2026 GMT
Not After : May 17 10:01:13 2026 GMT
Subject: CN=e21b0528ed0a8d60f3a416902eca1601c326514c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:7a:3e:f9:b5:ae:16:d5:45:12:0a:35:1b:
7f:b6:33:18:af:47:d3:41:01:53:27:3f:a8:3a:2d:
cc:0a:34:63:5f:d0:b3:a6:51:6c:4c:5a:6a:d8:f3:
e7:d2:26:c3:73:8a:a9:86:e9:02:af:40:91:bb:9e:
d8:d0:1c:e2:42:af:68:f2:4b:7c:ce:af:a1:45:bd:
84:15:cb:73:6b:d1:9c:c0:ae:02:c9:cd:74:c2:35:
dd:ab:12:56:a5:1e:98:78:d4:b4:f8:8b:c3:1f:af:
cb:b4:95:5a:b1:9b:4a:16:73:40:2f:ce:d3:6c:13:
45:1d:ca:06:ed:3e:a0:00:9a:44:9b:7d:2e:3a:46:
07:d3:95:60:5a:5e:d1:45:c1:04:fc:44:7c:a6:56:
89:6b:f0:49:89:e6:5d:cb:be:5e:ea:08:4c:f3:7c:
9c:a7:34:e3:d1:f8:be:e1:c9:d5:6c:96:13:00:e0:
71:14:35:f9:01:a1:9a:cf:50:a1:e3:69:89:43:5e:
ea:ea:f0:da:70:03:7c:69:a0:d0:71:d3:42:1f:42:
44:9b:8f:9f:a4:97:9b:f0:5a:38:b9:1e:96:df:93:
80:24:35:f2:89:3b:17:fc:0d:e0:17:76:6c:cd:63:
f7:7c:52:b5:78:ee:eb:78:21:e8:3a:3b:c5:54:93:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1B:05:28:ED:0A:8D:60:F3:A4:16:90:2E:CA:16:01:C3:26:51:4C
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:62:c3:bd:ae:1b:f6:65:d9:f8:95:26:0f:0b:9f:5a:68:46:
32:f3:e3:97:d6:97:eb:1d:6b:ac:38:95:2b:a4:50:fd:e6:e4:
76:2c:18:27:56:59:0b:ed:81:bb:79:a3:fe:db:ea:fc:8d:e7:
cc:8c:3e:a3:9c:15:0a:4c:94:67:0a:99:b9:76:0a:b1:06:f5:
54:86:28:3d:3a:3a:54:f4:aa:27:69:96:c9:e2:ee:0a:b8:36:
7e:9a:95:6d:b6:a2:2a:f8:d8:2f:a8:dc:63:e6:54:46:36:de:
fd:c1:dd:ff:ae:53:57:b5:3a:bb:41:ae:72:39:32:d4:76:d3:
a9:0e:0b:1c:97:46:c6:dc:5b:8d:f8:af:7a:0c:35:7e:e1:9f:
ce:81:9b:9c:4a:8d:f0:25:07:a0:4d:41:f3:8d:7f:4a:95:ef:
cd:3c:15:8b:2b:41:5d:e2:06:30:26:0c:a0:7e:f6:c7:ff:07:
e8:9c:6f:e2:dd:1d:50:cb:ba:11:d3:dd:21:ef:41:d2:7f:9c:
83:88:61:db:a7:60:bc:b0:88:37:f0:de:f7:71:42:ee:98:f6:
f1:ba:41:b0:62:f3:ae:74:3f:82:40:e6:53:59:cb:3a:d5:cb:
86:0c:da:87:f9:33:9e:77:6e:7b:b0:74:16:99:a4:43:18:0f:
a2:fa:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:37 2026 by rpki-client