Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: aXZNWOYGs0gGY5vY+nweE8mxyEldNNLzofdVhiS7Ck4=
Subject key identifier: EE:2F:71:8D:36:98:E6:43:25:AD:3A:14:7C:D5:BA:F4:EF:C5:9A:A3
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 019E31852364ADB7694512004C3B0A904622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 16:01:09 +0000
Manifest this update: Sat 16 May 2026 16:01:09 +0000
Manifest next update: Sun 17 May 2026 16:01:09 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: K0r2VaHrSN2fzABxbPl2FGgicEY6uHTP4K9ybhHr24k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:23:64:ad:b7:69:45:12:00:4c:3b:0a:90:46:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: May 16 16:01:09 2026 GMT
Not After : May 17 16:01:09 2026 GMT
Subject: CN=ee2f718d3698e64325ad3a147cd5baf4efc59aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:dd:15:2e:12:80:41:58:59:28:3a:4e:88:
c3:59:c6:4b:59:63:48:93:13:3e:0b:3a:fe:f4:d7:
a2:9a:b7:e8:50:f4:93:4f:bd:75:a1:f7:da:6d:a1:
26:e2:88:b7:12:56:f2:34:25:7e:d4:9e:b8:43:f2:
66:bf:45:fe:58:b5:27:d4:58:45:7c:19:8e:8a:9a:
da:c8:53:36:95:ca:da:87:1f:89:9c:08:75:f6:e1:
25:f5:6e:3f:d2:1e:33:b7:a6:df:a2:2b:e2:a9:f0:
9d:cd:86:19:64:c1:ec:b6:bf:38:f2:7d:31:e2:87:
6a:8b:18:6e:c1:9f:61:77:96:a3:90:10:7f:20:d3:
a8:f4:fe:ad:28:1a:d6:b7:6e:88:61:69:16:7f:bb:
f4:81:eb:87:bd:9a:ff:f3:bb:5c:23:7f:ce:a7:16:
00:9d:d7:cb:71:10:09:91:48:c3:6d:56:6c:4f:4d:
4d:4b:65:00:e0:2c:45:9c:35:67:de:1a:70:50:43:
70:19:23:c3:e4:60:77:a2:8b:53:b3:fe:69:a8:8e:
a0:f7:3d:a9:5d:d2:45:5e:5a:a5:99:3f:ef:62:5d:
c6:c2:2d:4f:58:80:90:51:4b:40:f3:ec:d7:54:93:
c8:2f:42:64:99:fd:3a:6e:1b:8f:ac:44:e3:e7:9e:
73:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2F:71:8D:36:98:E6:43:25:AD:3A:14:7C:D5:BA:F4:EF:C5:9A:A3
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:14:9f:06:20:88:68:7c:49:a8:90:5f:79:94:44:92:3d:34:
2b:d6:df:63:4d:ea:8f:65:02:45:1f:d7:6f:2f:a4:58:8d:81:
63:c1:e1:62:e7:47:0f:75:7d:05:c9:08:f4:39:b2:0d:b4:97:
e0:b0:90:e1:86:91:6d:f9:d4:80:52:38:62:b9:e9:51:fb:d7:
89:2c:68:03:5c:6d:31:c4:50:65:e7:df:7d:fe:7f:32:d7:d3:
f2:31:50:60:91:da:34:89:54:8d:61:57:e6:66:8b:f7:9b:9d:
56:2b:87:fd:dc:b6:93:42:12:6c:ac:3c:fe:9d:12:20:a7:a8:
61:15:71:20:70:96:f1:0d:d0:4c:d2:a4:58:f9:93:48:17:1c:
7e:58:46:da:99:50:bc:fd:17:e3:7e:95:0f:ab:ca:72:3c:25:
74:72:6d:57:13:47:fe:ce:dc:e3:5f:50:86:59:0c:86:1d:7d:
8c:60:3b:3a:97:82:27:53:40:f7:7d:81:65:9a:36:f1:28:78:
b4:2f:88:da:04:f8:3d:98:2d:08:1f:7b:d0:33:92:eb:d8:76:
4f:b3:10:b2:ea:2c:b2:ad:d4:c7:c2:9c:22:ec:9e:80:6f:80:
7a:da:21:1e:6c:e7:70:a4:ea:64:ec:3c:13:d8:99:a6:2e:f5:
d8:46:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:39:41 2026 by rpki-client