Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft (raw, json)
Hash identifier: /pFzL5IeQQud/4vepJDHKktVxI6a5QQP4k02cI4UxdU=
Subject key identifier: 91:25:78:DC:E5:1C:E9:CD:39:7C:7B:D9:2C:2F:1D:FA:1D:57:36:A5
Authority key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Certificate issuer: /CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Certificate serial: 019E2F5F79B09ECFE1019AECCCC8A02D2962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
Manifest number: 1038
Signing time: Sat 16 May 2026 06:00:46 +0000
Manifest this update: Sat 16 May 2026 06:00:46 +0000
Manifest next update: Sun 17 May 2026 06:00:46 +0000
Files and hashes: 1: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl (hash: 2Q+J9Y6JJVfG7YPXpD8f/StTeCG8S04SNfmJ1QgcABY=)
2: oRIsfmte-X2jgFEWjQtLvblexNM.roa (hash: MABvxM4XCQeB057f0MMoN4gprPL+JKjwKeyBUI1E5LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:79:b0:9e:cf:e1:01:9a:ec:cc:c8:a0:2d:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Validity
Not Before: May 16 06:00:46 2026 GMT
Not After : May 17 06:00:46 2026 GMT
Subject: CN=912578dce51ce9cd397c7bd92c2f1dfa1d5736a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:4f:80:93:f1:5c:ca:db:34:52:fc:ed:df:
9f:02:5a:67:4f:18:07:49:5b:7c:0a:06:29:6c:1e:
c5:e5:b2:90:f0:8b:89:d8:54:01:01:18:1f:d8:cc:
17:ae:e7:32:17:1e:20:16:dd:03:82:cd:d9:f5:4d:
81:eb:87:8b:2e:94:84:69:52:28:55:3c:c6:e3:b6:
5b:4d:a3:a1:16:d7:7c:3a:24:95:86:bb:b5:8d:a5:
89:38:b3:0b:de:ba:2e:bf:5b:a9:08:76:71:be:33:
7c:07:7e:c3:44:2a:3d:bc:a8:04:92:d6:bb:25:de:
9d:74:37:d3:74:79:c8:7b:a1:64:62:f3:2f:34:9f:
d5:87:66:62:73:93:30:3c:65:6b:7a:8b:41:90:99:
36:17:8d:2d:a5:11:38:f2:e5:8c:a7:4e:c3:3c:25:
cd:e7:65:d4:ee:c1:22:9c:10:6e:35:b1:6d:bd:a2:
c6:6b:89:af:b4:80:2b:ef:14:d2:d4:9e:57:b5:9c:
f3:56:aa:0d:c9:be:ec:26:41:2c:6f:b3:4a:5f:f9:
d6:2c:fe:66:5c:ee:ab:d0:5a:24:01:88:f3:61:f6:
66:6f:2d:74:c8:c9:02:4b:fb:9f:45:f7:47:34:df:
55:68:f8:cf:cf:6a:4a:10:2d:e7:66:ac:86:c6:11:
2b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:25:78:DC:E5:1C:E9:CD:39:7C:7B:D9:2C:2F:1D:FA:1D:57:36:A5
X509v3 Authority Key Identifier:
keyid:F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:05:e2:6d:f6:43:85:91:6f:85:d5:ce:c0:71:d2:d4:3c:32:
35:1e:f1:a8:a0:eb:9f:45:ec:07:5b:ae:42:d6:74:94:ba:21:
88:cd:25:73:bc:b2:50:0c:ee:4a:80:25:7d:74:09:be:01:95:
e1:fe:32:ef:43:d6:8b:7e:5e:3b:b1:4d:a1:b1:33:cf:ac:0d:
97:71:7a:7b:1a:d8:3a:14:ac:3f:31:b8:02:b9:c0:6f:86:b0:
c9:88:a3:e6:18:87:1a:72:41:56:18:aa:94:fe:b9:28:9f:4f:
81:c0:19:ea:a5:a6:3d:fb:50:c8:ab:a9:e8:66:f7:08:9d:9e:
8c:02:a8:69:a4:df:6d:ff:b0:50:fc:eb:c2:98:e4:3d:47:89:
71:19:1a:b2:d3:d2:a4:8a:9e:b1:0f:b9:97:7c:9e:89:41:bc:
12:30:13:31:b9:9f:de:dc:96:05:22:5a:bf:3c:48:af:13:60:
49:d4:cb:2e:c3:b6:92:b4:04:b4:aa:1a:f5:4f:c5:83:b1:4c:
57:2b:a7:96:c3:44:bc:20:1f:87:f1:65:ee:ea:79:ef:4c:14:
fd:e1:38:9f:7f:6f:d0:d3:7e:36:91:fb:95:d1:56:9b:ba:d1:
94:01:52:db:75:6a:a3:87:90:2e:d5:b1:d9:00:33:e5:d2:b4:
20:29:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:06 2026 by rpki-client