Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
File: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft (raw, json)
Hash identifier: UKVcd6+5quVMvna4b4cP5CN5r16jZ9aysQehOVbYBT8=
Subject key identifier: D2:CA:34:E5:1B:C3:F0:23:96:3C:35:95:30:CA:D5:BF:47:73:09:5B
Authority key identifier: FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
Certificate issuer: /CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Certificate serial: 019E2FCDC950E1D1C24F56324591709A0E60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
Manifest number: 15B1
Signing time: Sat 16 May 2026 08:01:15 +0000
Manifest this update: Sat 16 May 2026 08:01:15 +0000
Manifest next update: Sun 17 May 2026 08:01:15 +0000
Files and hashes: 1: 1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl (hash: SVrTfbWOZdY1QKge6O+9jZLgZwV6T9lLcIUZSnTuo80=)
2: 293BcvVjzkXiUZsqwiLACL0z-hE.roa (hash: lBHeVwqbKpyKukeM+uJaAwqMulYLmIJGLcoZE6FBlwQ=)
3: Y6t_kCbEk6ais70K_hKBXp4Quro.roa (hash: l5cSwhwlEaGXCsl3EbJ8zLczFkFkA8pweq2SNrMzPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:c9:50:e1:d1:c2:4f:56:32:45:91:70:9a:0e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa64a1f7ca40b58116e6bc838e062f9c712228a4
Validity
Not Before: May 16 08:01:15 2026 GMT
Not After : May 17 08:01:15 2026 GMT
Subject: CN=d2ca34e51bc3f023963c359530cad5bf4773095b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:c1:25:8e:85:8f:eb:87:4d:6b:56:bd:b3:
2a:bf:91:47:e0:86:0a:57:ee:47:b0:8a:b3:24:43:
d3:de:d8:3e:f2:a9:0d:00:ea:54:86:35:3e:7d:d9:
e2:f4:86:27:60:4f:77:9d:27:d2:b3:52:c7:cc:d4:
f2:b2:b1:fd:41:4c:f1:80:d7:88:b9:18:9f:4a:87:
ce:75:39:71:59:ec:45:b6:f9:71:6b:fb:7e:23:d4:
64:d9:83:24:bb:8c:34:7b:3f:31:f5:67:f9:5c:65:
2d:fb:39:76:e9:e1:23:4d:63:6e:09:b0:4a:cf:ec:
aa:eb:3e:d7:69:6e:c9:97:9b:3c:5f:33:a0:ac:c3:
58:87:82:73:a0:d4:1e:e7:c7:2c:01:75:fc:9f:3b:
e6:d3:73:dd:33:be:4d:b6:71:13:53:7b:0d:ea:eb:
93:e7:7d:37:be:25:b3:9c:8e:c8:ea:04:20:10:33:
79:a8:9e:1e:6c:fb:56:35:8e:ae:e3:3e:2d:61:83:
49:de:eb:6c:94:93:9c:58:96:ae:e4:66:63:96:0a:
f1:b9:50:c5:1c:3a:8b:3e:ce:60:29:a2:55:4b:d2:
94:22:aa:39:6e:ab:d7:48:24:73:80:10:8b:93:1b:
86:0b:a9:c3:66:b9:88:e9:68:50:cc:b3:23:d3:fa:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:34:E5:1B:C3:F0:23:96:3C:35:95:30:CA:D5:BF:47:73:09:5B
X509v3 Authority Key Identifier:
keyid:FA:64:A1:F7:CA:40:B5:81:16:E6:BC:83:8E:06:2F:9C:71:22:28:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/1-mSh98pAtYEW5ryDjgYvnHEiKKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:79:01:f3:a5:a4:12:bb:43:3f:53:32:4b:b8:56:23:9f:a4:
77:3d:ec:39:e5:f3:a7:a8:55:85:79:f4:2c:76:0e:eb:5f:4d:
a7:92:9b:c4:78:55:9a:5b:b9:84:6c:4c:79:dc:75:c8:d9:d7:
10:8b:4c:11:34:8c:48:31:3e:5c:1d:83:7a:96:de:9c:98:00:
bf:13:6a:59:d0:c6:46:b0:2b:85:7b:25:12:f7:d8:84:05:4c:
2a:06:0d:84:1b:0b:46:38:2c:a8:cf:fb:d3:32:e7:91:b8:dd:
5d:b4:d6:82:34:05:85:7c:26:4b:0e:1d:c6:1d:37:74:4c:93:
ea:82:c9:5b:83:39:3d:d4:1a:ec:49:6b:d0:43:42:9c:c2:7e:
64:9c:20:1d:80:15:f6:c5:8f:b9:d2:32:04:3c:da:91:fe:f6:
19:f9:90:1e:9d:23:67:04:d0:96:ef:d6:11:cd:e5:40:98:81:
ab:f6:ee:88:68:cc:c1:30:25:86:6e:9d:d5:36:ef:3c:cc:f3:
25:fe:f8:07:17:07:4d:2a:91:4c:1b:60:92:60:77:f4:19:4c:
06:17:b9:25:4b:f1:b0:8d:6a:1c:ca:b6:7c:2e:2c:1f:76:07:
af:f5:9a:95:ae:c8:9b:c4:26:09:43:13:ab:6c:0c:95:15:0f:
ab:ce:e5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:55:58 2026 by rpki-client