Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: cParS+sJ9GubwTrm/hJRy+hb6EryL9wRWRbOj2fjgHg=
Subject key identifier: 50:5E:FB:B4:DD:B3:C3:D5:15:79:30:A6:6F:AF:D9:87:11:18:7D:5B
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019E2FCDA277BFF5A3E346F5CD9FBE59D2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 08:01:06 +0000
Manifest this update: Sat 16 May 2026 08:01:06 +0000
Manifest next update: Sun 17 May 2026 08:01:06 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: teF+JMoO1U3x8XcfAwBIbyNt4hQ1IgFau5Sdf3WWTps=)
2: OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa (hash: C+NBqa/FoqkfVKSMS3H5Y1wqDnMMVE+Y4Fw4A7IWZm8=)
3: oRqwFe3VNX-nfuj7iUR3S7koSy0.roa (hash: qiTN878gqiER6fqTmD5j2cm3Ln1rDVHVTApMOMHVgtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:a2:77:bf:f5:a3:e3:46:f5:cd:9f:be:59:d2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: May 16 08:01:06 2026 GMT
Not After : May 17 08:01:06 2026 GMT
Subject: CN=505efbb4ddb3c3d5157930a66fafd98711187d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:bd:04:1b:ab:5b:ef:c0:ee:32:26:27:2d:
3b:81:e5:df:18:ae:bf:81:f3:78:d0:96:06:d3:36:
2d:45:19:5b:4e:15:2c:fc:f1:ac:51:55:ea:6e:4a:
2a:17:3b:ef:a2:39:b0:12:57:31:16:b0:72:d2:e9:
3b:b7:55:3a:2a:5b:55:9e:22:8c:e0:45:a3:69:24:
8f:04:86:aa:a8:2c:4d:e1:cf:cd:87:6b:98:8d:70:
65:a9:77:ce:b1:d5:ef:7e:15:8f:60:9a:1f:51:63:
b3:36:10:8f:45:57:f5:93:6d:e6:fa:10:21:1f:08:
85:20:54:31:29:95:7f:26:54:31:8c:2a:04:67:3f:
32:54:5b:6f:b3:8f:9b:8c:65:93:27:19:d6:fa:bc:
91:24:f3:34:57:de:46:45:64:68:2d:fa:55:33:c1:
22:6e:36:81:4f:55:c0:e0:52:46:7a:ed:b0:b4:36:
4a:75:fa:ad:e3:f8:31:1f:36:96:5e:62:4a:c3:a6:
4c:f6:e8:e7:0b:3b:00:f3:4e:88:0d:19:a6:5c:13:
b6:ce:48:48:c1:14:d7:c0:63:9d:a5:83:aa:dc:44:
df:5e:ba:c8:27:cd:56:45:77:e3:2d:d9:c9:11:72:
f5:fd:05:b7:4c:37:ab:69:ac:7e:c6:b6:0d:51:ed:
78:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:FB:B4:DD:B3:C3:D5:15:79:30:A6:6F:AF:D9:87:11:18:7D:5B
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b4:29:73:4c:fa:a8:b7:ef:5d:ac:6d:ba:3b:bf:ca:74:ee:
7a:c3:77:de:f2:80:71:dd:ab:52:c1:a8:b3:7a:86:b1:89:67:
37:8b:79:37:4b:35:db:61:13:43:af:bf:46:63:f1:08:2a:ef:
b6:c9:dd:2c:0f:7e:67:81:e5:14:21:f1:68:e8:ff:35:31:8c:
87:f4:56:b2:37:91:37:d4:4e:2b:8a:53:8d:99:78:bd:2d:d8:
aa:46:47:fb:a2:37:e7:ea:94:d3:cc:67:6b:8b:bd:43:a7:d8:
da:7b:5a:fc:02:34:9d:3c:c1:83:92:ac:2d:43:f9:97:c1:89:
77:cc:e9:ef:bc:fb:07:e0:58:e0:7d:1b:91:79:9c:64:1f:4b:
c7:13:75:a4:ac:1f:45:12:78:05:3e:90:ae:7c:dc:12:12:62:
5e:9a:bc:e4:6c:66:6a:a9:f0:aa:62:01:17:17:02:35:1f:0e:
3c:cc:c6:c1:84:4e:a6:a6:8b:83:b8:09:f7:06:99:b2:79:89:
f7:06:14:11:15:87:c1:50:83:82:af:86:60:2a:e8:32:8f:d5:
e8:0a:63:cf:36:7e:ed:14:06:7c:7e:ae:ee:26:28:a1:73:4a:
48:c3:9c:c9:01:6b:bc:91:c4:2b:bc:2e:11:5d:1f:0d:6c:96:
a7:d4:26:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:54 2026 by rpki-client