Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: WWtuRNKGR+lNsgIBsEPEHhfuV65zxx0DBu91swAsI24=
Subject key identifier: 85:47:E7:FF:CC:8C:89:44:FC:C5:52:BF:7D:CD:59:40:67:94:20:1D
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019E9AA9A082F58FF07DCBC895353E83E4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 12ED
Signing time: Sat 06 Jun 2026 02:01:08 +0000
Manifest this update: Sat 06 Jun 2026 02:01:08 +0000
Manifest next update: Sun 07 Jun 2026 02:01:08 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: e4Adc8XjO5XWd1YCrj0wPwP1BhXnud+WMMX8qbi1yhI=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9a:a9:a0:82:f5:8f:f0:7d:cb:c8:95:35:3e:83:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Jun 6 02:01:08 2026 GMT
Not After : Jun 7 02:01:08 2026 GMT
Subject: CN=8547e7ffcc8c8944fcc552bf7dcd59406794201d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:6c:61:28:d1:49:57:f4:90:7d:69:fd:53:
ca:ab:62:a2:15:eb:62:1c:61:14:f3:ec:d6:23:a2:
d0:b9:2e:a7:78:6d:be:85:3a:8e:46:b4:e5:26:3c:
0f:ad:c3:fb:17:63:77:00:f6:bc:a2:2b:e7:b2:d1:
68:83:5f:1f:b6:91:4c:54:33:72:95:8d:94:43:59:
66:9c:c5:e8:28:dd:f4:a1:45:30:c1:da:69:af:f4:
d7:75:94:63:30:19:fe:e5:ac:1a:b7:82:9f:47:74:
22:e1:e1:7a:92:f2:5b:39:c1:0a:fc:91:4a:70:51:
cc:8d:02:b5:bd:d0:96:bf:52:c4:d0:94:aa:f6:79:
dd:18:b3:14:80:b4:c8:72:79:1b:09:58:d7:8e:f2:
16:c8:d2:79:0a:1e:d3:1d:5d:46:b3:ee:1b:70:4f:
cf:73:87:c6:8a:f9:b4:af:f3:0f:a4:3f:16:4b:d3:
1d:09:d4:9c:49:9a:e6:e6:72:e3:00:41:fe:d6:ef:
1c:3f:48:2c:77:c0:ce:ea:f1:63:98:cd:b0:30:a5:
66:b0:22:08:ed:36:30:d7:59:bd:ab:3d:e3:17:7c:
90:28:ef:51:6b:cd:19:21:60:52:dc:20:46:b6:03:
07:67:86:dd:3f:ab:12:ba:be:3b:f7:0b:71:3c:f1:
1b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:47:E7:FF:CC:8C:89:44:FC:C5:52:BF:7D:CD:59:40:67:94:20:1D
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:c9:47:8b:d9:4d:5b:5b:a1:69:39:9a:ce:13:35:4c:fb:
e5:a8:ca:a5:94:c9:02:8c:04:82:07:3d:2b:57:e6:60:d7:23:
21:95:16:c0:6a:38:eb:c9:4f:ea:cb:89:d3:b9:55:91:72:47:
ef:6a:cb:3c:2c:4b:c5:7e:b2:2c:ff:44:56:08:03:78:3d:8a:
fc:ba:ae:34:8a:96:6e:11:63:1a:b0:b5:cd:a4:29:b2:87:fb:
22:59:53:a2:b0:e6:9d:6b:8e:a7:73:e3:91:5a:8b:be:20:9c:
0d:20:60:68:ba:cc:8a:72:30:42:46:01:c0:62:b5:99:df:61:
4d:66:67:ec:b6:19:03:79:6a:f5:ea:5f:4b:01:fe:f0:d1:96:
48:94:5a:c5:39:4a:49:25:8f:a7:28:a3:6d:1a:9d:0d:c7:7c:
61:2d:c2:b1:5f:bb:97:f0:87:16:4b:ff:1a:af:7e:13:2e:e3:
f0:a0:cf:ec:bd:45:ef:db:85:29:b0:4d:cf:c3:61:38:94:6a:
5d:47:cd:b6:62:84:52:52:e9:b8:ff:a8:6e:23:e5:64:21:ff:
31:de:68:a9:8a:0f:6a:5b:fb:80:99:5b:7e:b6:4d:43:2d:e0:
3b:7d:1e:2e:c7:78:cb:40:70:c9:29:da:22:73:42:16:f8:44:
1a:89:5b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:03:25 2026 by rpki-client