Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: HLexOaw7/s1/Ug4j1vITIekmQ3xYC69sty+cjrrvAgU=
Subject key identifier: 8A:E1:EC:D1:AD:E4:26:0E:9D:FC:61:F3:4A:4E:9D:91:8C:C4:2F:72
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 019E3072256692A315B513595BF9BC86680D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0F36
Signing time: Sat 16 May 2026 11:00:47 +0000
Manifest this update: Sat 16 May 2026 11:00:47 +0000
Manifest next update: Sun 17 May 2026 11:00:47 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: NP4VoDailrZ5tOCH2PqOr9qYha+YHeUlhOeZHtIqx+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:25:66:92:a3:15:b5:13:59:5b:f9:bc:86:68:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: May 16 11:00:47 2026 GMT
Not After : May 17 11:00:47 2026 GMT
Subject: CN=8ae1ecd1ade4260e9dfc61f34a4e9d918cc42f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:23:a9:0a:f0:11:99:eb:f7:44:a4:3e:42:d7:
a7:2f:cf:e2:ea:88:12:ad:4f:83:f2:0d:99:09:70:
35:63:ed:17:96:84:ba:a6:5a:50:13:a4:19:3b:74:
64:a7:11:fe:ff:05:b0:38:1b:03:a8:61:7d:5f:0b:
e1:b4:a6:ec:88:fc:b8:44:e3:f3:cd:24:07:b4:ac:
af:3b:f3:71:7c:01:0a:be:5f:83:4f:0c:8a:09:69:
6a:e0:2c:3f:3f:71:e4:b8:fb:08:4e:67:77:02:c4:
6b:e5:42:f0:0d:29:6a:a4:df:98:43:34:38:7c:2d:
ba:48:58:b3:06:3e:bc:ef:76:07:1c:c3:40:49:2d:
46:91:1c:ae:1c:3e:72:4d:27:57:60:2c:13:3f:cc:
c6:5d:db:7d:ea:81:30:65:55:17:36:ae:a1:90:79:
a6:9f:22:c1:02:86:d1:35:d4:ba:1a:f3:28:f4:d9:
6d:c6:8b:fb:fb:f0:36:6b:66:78:57:38:46:47:f7:
fd:e3:cd:e2:e3:96:05:8d:51:6d:29:c9:74:2e:aa:
bf:d8:d4:e2:b3:aa:66:6e:b5:52:69:9f:bf:c8:4d:
f6:9b:87:95:84:e9:dc:24:1e:9c:7e:6b:ee:3a:be:
08:91:03:f2:10:11:62:20:3a:fb:82:51:e3:b0:b6:
55:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E1:EC:D1:AD:E4:26:0E:9D:FC:61:F3:4A:4E:9D:91:8C:C4:2F:72
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e5:41:25:16:a1:71:15:84:0e:0c:fd:1f:5e:49:cd:9c:42:
4d:ce:00:db:d0:c7:c8:26:c7:b5:ef:14:9c:8b:89:a2:0b:40:
dc:80:fc:c5:ab:49:de:ad:3f:94:70:22:37:5c:6a:49:69:45:
cd:64:44:dc:ae:c8:3d:f4:9c:a9:f5:07:3f:cb:cc:d4:cd:be:
fe:a8:d6:61:7d:be:75:48:d0:ff:f8:3a:95:20:09:38:cb:99:
20:2f:ef:a8:15:4c:74:94:a8:ad:54:c5:51:c4:2b:4d:8f:2c:
63:f3:43:60:bc:66:83:27:db:0e:78:da:dc:44:d6:07:dc:ce:
78:5c:a1:f8:2e:af:46:bf:5f:f7:c5:67:00:b7:e6:a0:3d:5f:
c3:3c:a1:6c:3e:62:3a:ba:00:01:ff:fc:b8:b2:93:79:c1:75:
51:2b:c0:59:83:3d:f0:18:78:cb:c9:37:b3:df:86:a7:36:46:
aa:8b:b1:76:23:df:9b:4b:e3:29:3f:60:d6:0b:85:ed:c1:c4:
69:d4:68:f6:a6:ba:63:e8:4a:4a:4b:4a:7d:9e:58:ba:3a:95:
d9:b3:2c:d7:5c:ef:95:45:e4:41:6a:53:17:1c:4c:06:a6:d6:
03:b6:f4:20:11:d9:cb:47:40:51:b5:e9:3c:6d:c6:6e:13:58:
04:e0:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:03 2026 by rpki-client