Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: xyBSo8DuT+ixy2NU4UTh9SUriRKvNIY9629wBekfTKo=
Subject key identifier: 73:E4:C6:71:FA:17:7C:4E:24:D5:F3:F8:B9:02:CA:F9:14:6F:D4:35
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019E28B96CF65EA7019383E2201F35496B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 1649
Signing time: Thu 14 May 2026 23:01:41 +0000
Manifest this update: Thu 14 May 2026 23:01:41 +0000
Manifest next update: Fri 15 May 2026 23:01:41 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: 6c/p/QlbGCEvJDWMwBabS0sJ7FyURypW/ltvpZ0MIYk=)
2: 2ztr66xhOcOr2Kq6L1D4fEoRjwo.roa (hash: amz+yTvX9x7rzj0FFfB2aTlKhOEfzIXqA7tCgNwl8L8=)
3: qWQiW28A_Jo14Y39qDD0HLmiY-8.asa (hash: 8rDU18bK8PhMwmhMuLhLWAv0jhvLi/dsvTpVtjnhZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:6c:f6:5e:a7:01:93:83:e2:20:1f:35:49:6b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: May 14 23:01:41 2026 GMT
Not After : May 15 23:01:41 2026 GMT
Subject: CN=73e4c671fa177c4e24d5f3f8b902caf9146fd435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:58:48:b4:5a:03:31:0c:c3:cc:03:8a:ad:ca:
5f:b5:f2:c8:78:cf:72:53:aa:47:ed:12:c2:72:27:
55:e3:63:7d:ec:37:49:ec:8f:70:9e:f9:f8:38:87:
a3:f2:49:fa:a8:d5:6d:37:bf:8b:78:c7:51:60:d3:
e2:71:d7:46:ae:f5:e9:91:f4:5c:00:39:10:28:d2:
91:b0:fd:32:65:ad:16:65:43:b3:1c:79:68:c5:2b:
91:95:9d:80:92:e4:18:93:31:d3:22:43:d6:89:25:
a8:b5:b9:49:9c:7f:ad:97:d2:e1:15:a9:a4:57:5a:
43:60:10:49:51:ee:7c:b0:df:4d:66:33:99:cc:8e:
04:56:8a:1b:fa:7a:d9:bb:7b:b6:c0:94:3b:1f:71:
e6:83:37:f1:51:40:a5:f8:0f:88:89:63:7a:9f:c5:
b3:ae:a1:c0:27:fa:bf:25:44:a7:4d:62:bf:55:56:
62:06:c6:9d:ef:75:ea:1b:20:8f:b3:48:22:6b:88:
9a:bb:29:95:19:92:a6:2e:7f:47:d0:f8:e6:50:19:
74:d1:f6:aa:03:7e:b7:5d:19:bc:1d:9d:9a:b5:f6:
c4:2f:c2:55:81:7a:c1:bd:4a:c8:08:14:49:37:4e:
9d:7b:5b:8b:97:92:72:89:b1:83:81:90:09:68:7d:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E4:C6:71:FA:17:7C:4E:24:D5:F3:F8:B9:02:CA:F9:14:6F:D4:35
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fa:cd:e6:e4:ef:d3:97:17:e3:18:fd:2c:21:33:8b:aa:74:
1e:58:f4:b8:5f:93:dd:cd:48:54:f8:ba:17:21:c0:86:3f:af:
87:fd:e3:f0:8c:d0:f2:77:c6:85:a5:fb:7c:0d:04:24:7b:2e:
cb:fc:0e:4f:b9:ad:30:06:5e:2d:af:02:75:a4:83:e5:27:d3:
73:36:05:13:64:1c:65:33:d5:26:69:dd:11:61:6a:29:87:c8:
dd:6e:69:77:71:a7:03:01:8e:4e:0c:1d:b1:e0:05:9d:06:a5:
71:6f:59:17:4d:bc:e8:1e:0f:7a:ad:86:8f:eb:70:ea:92:10:
86:c0:da:db:5d:73:31:c9:2f:bf:b6:24:87:0f:08:a9:f9:f7:
09:fa:47:66:a3:e3:5d:25:5b:85:50:31:56:59:fe:99:bd:b8:
5e:c6:17:23:0b:37:5b:a1:69:46:21:a3:0a:af:34:3b:ec:93:
2e:58:59:bc:e3:e4:fb:e1:d8:cc:0e:41:d6:ff:3b:02:a1:2e:
78:f6:1c:13:c3:72:92:8f:f5:e2:f8:0c:fb:0f:71:8a:b2:2d:
0e:e8:e0:35:40:0d:11:8a:f9:69:cd:b6:6c:c6:19:c2:d3:cd:
ae:08:0e:ef:b1:87:00:da:a6:fd:dc:cf:58:84:06:e3:72:1f:
b2:10:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:45 2026 by rpki-client