Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: zgb9rWAP7beIracdWX8RUH2ZuxOnWTVgrtVRyZ6pzG8=
Subject key identifier: 4D:3A:E1:FE:EF:EE:25:59:30:7D:4F:97:07:EA:5C:B7:39:91:38:15
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019E30A93C473D8AD7DB56EA03E2E734A949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 1915
Signing time: Sat 16 May 2026 12:00:57 +0000
Manifest this update: Sat 16 May 2026 12:00:57 +0000
Manifest next update: Sun 17 May 2026 12:00:57 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: ogvxPUfrYM/Slc1dlB9KWsXvIvpdINOd8L4zTO6Fid0=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:3c:47:3d:8a:d7:db:56:ea:03:e2:e7:34:a9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: May 16 12:00:57 2026 GMT
Not After : May 17 12:00:57 2026 GMT
Subject: CN=4d3ae1feefee2559307d4f9707ea5cb739913815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:3b:7b:51:5f:7b:e1:c4:16:45:52:0d:84:
06:57:31:a4:53:af:a0:92:77:95:78:d0:42:73:d7:
a2:79:9d:dd:e2:f8:31:1c:1a:6f:87:83:5f:4f:b1:
02:01:3f:22:46:87:b0:29:70:a3:74:90:ea:ad:88:
46:ba:ba:28:69:45:59:ca:89:13:8f:3c:9f:09:68:
a9:1c:c4:67:01:33:9b:d5:c7:cc:3c:5b:fd:d0:95:
19:43:7a:2f:78:a0:51:c9:03:1d:fe:f3:7a:50:70:
cd:75:87:ca:62:69:91:2d:ea:62:9a:e6:c0:0b:af:
a1:2d:af:b3:aa:72:1d:86:db:94:c1:b7:48:da:02:
b8:03:94:09:dc:a0:56:ad:f2:94:37:cf:c7:e6:ba:
cb:93:e9:e7:d0:58:80:53:cb:a6:50:6d:86:73:3a:
4b:1d:ad:41:d6:51:a9:6f:96:36:4d:44:e3:ae:30:
b6:41:74:db:11:e6:9c:3a:7e:a3:db:90:d5:24:59:
30:0d:cc:2b:1c:ca:17:05:1c:c0:21:14:b2:bf:9d:
b6:a8:cb:1e:00:34:8d:ca:1e:46:ce:f4:21:71:52:
d3:b0:87:4b:ad:7e:cf:94:a6:e5:bc:5f:49:d3:99:
b1:2c:cd:ba:76:a0:ee:c9:b5:f1:9d:53:d2:19:71:
55:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:E1:FE:EF:EE:25:59:30:7D:4F:97:07:EA:5C:B7:39:91:38:15
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:b3:51:40:4f:9d:b6:e9:25:b6:cf:66:85:a8:d9:f6:05:
00:79:f2:f0:01:83:e6:22:a1:74:c9:8d:8c:23:e6:ed:60:99:
b5:5a:ca:0e:77:da:5e:f9:f5:e5:2d:67:a3:92:43:a0:3e:fa:
3b:19:77:9e:6e:64:42:59:a7:86:e9:cd:56:93:c5:86:f7:c7:
9c:2e:8c:33:ee:8b:a8:c3:1e:de:3b:02:88:2c:49:37:c3:4f:
db:ee:5d:f0:64:76:20:f1:82:18:52:16:d0:58:c5:77:af:d0:
90:75:08:b1:31:7c:4b:5d:90:01:f7:20:c5:2f:e9:4c:ae:ee:
57:21:48:96:5c:5a:94:2b:7b:11:81:e9:83:9b:21:e5:cd:9f:
07:a2:6c:31:c4:20:2e:db:71:3f:ac:a4:5d:ee:c5:dc:e8:c5:
da:06:99:0e:7b:aa:ff:7b:69:1f:39:7e:13:2f:dd:7e:ba:b2:
c9:89:22:a7:26:b3:3b:ed:3b:7f:0d:a3:57:e0:22:9e:a5:58:
8c:6b:82:12:d7:a3:73:f7:73:2d:c6:8d:29:73:82:90:ed:70:
4b:94:16:ad:a3:25:cb:5c:27:c8:bc:4e:f5:68:de:25:16:04:
eb:8f:22:59:ac:45:f9:a4:bc:d6:27:31:90:ad:47:ca:ec:aa:
7b:c2:29:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:32:20 2026 by rpki-client