Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: +r+eo6OlTzanVT0hMxnTddr/P4Nz6xSnGrOz0biPsy0=
Subject key identifier: EE:1C:98:06:E4:5B:7E:21:AA:8D:8B:C2:32:D0:1C:B6:F1:A0:C7:2D
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019E3185239D4CD3058C3730E1AC66D5014E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 1082
Signing time: Sat 16 May 2026 16:01:09 +0000
Manifest this update: Sat 16 May 2026 16:01:09 +0000
Manifest next update: Sun 17 May 2026 16:01:09 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: nQspjQokWdymjq3RCLZ7AORrjZoFo2t5hh3Be3tAuU0=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:23:9d:4c:d3:05:8c:37:30:e1:ac:66:d5:01:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: May 16 16:01:09 2026 GMT
Not After : May 17 16:01:09 2026 GMT
Subject: CN=ee1c9806e45b7e21aa8d8bc232d01cb6f1a0c72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:24:71:75:09:f3:c5:c0:7a:70:e7:ed:06:
5c:7b:b3:08:a9:f9:10:77:5e:38:b0:63:8f:13:d9:
c4:64:71:41:4e:03:df:c9:32:11:cb:72:f3:09:30:
1b:05:1a:c0:b9:58:a7:77:06:00:b7:aa:b9:2d:ec:
c0:b3:c0:e8:f4:1c:51:f6:77:1c:99:8e:73:03:c6:
06:74:8b:d8:e4:fd:88:cc:82:2f:44:11:8e:b2:a1:
39:c1:d2:7c:94:8a:3d:b0:da:de:f8:15:ef:b4:6e:
44:91:08:c7:55:f8:f5:1e:ed:08:a0:04:67:38:80:
1c:e9:ef:0e:b5:9f:f3:c4:34:03:2a:69:24:24:01:
85:13:7d:66:6d:e5:ae:33:0e:85:b4:c1:46:63:a8:
b9:07:e5:22:9b:22:cd:a2:ae:6a:eb:4d:c0:05:fd:
5e:f4:19:6b:f9:ea:d8:1e:35:3f:d0:a0:29:dc:5b:
2f:e1:71:3f:2d:c4:de:0d:38:89:c7:a7:ea:ff:fc:
1b:1c:93:0d:81:93:d5:b8:40:51:e2:61:74:b6:f4:
b7:22:b7:28:83:64:d3:f0:a7:f6:8a:4e:32:6c:60:
43:76:a9:3c:af:d4:93:89:29:0b:b6:cd:9a:3b:35:
a6:e2:7f:81:57:2b:0b:13:18:7f:68:36:4c:66:e9:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:98:06:E4:5B:7E:21:AA:8D:8B:C2:32:D0:1C:B6:F1:A0:C7:2D
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ea:c1:bc:b4:40:4c:4f:67:c8:26:b5:a1:0e:d4:28:98:ea:
4d:98:19:f7:4e:2b:2b:ec:df:ca:44:07:9d:52:26:8a:82:67:
5f:40:34:5f:aa:30:c6:53:4b:48:93:10:94:1f:2d:12:20:99:
f4:b6:83:7e:33:47:e2:67:9b:47:95:e3:04:23:d0:e7:68:3c:
aa:7b:f6:27:55:b6:a7:d5:ad:03:49:6f:e5:33:ba:54:b9:4d:
fd:98:85:0c:ac:49:64:57:b3:77:c5:04:cf:5f:6e:f3:80:d4:
e0:dc:a3:06:ad:0d:ef:50:cc:56:60:3f:4a:42:dc:7d:e5:9f:
5f:a7:69:3e:43:6b:1a:6f:ed:9d:e4:c7:49:b9:89:40:ed:31:
75:72:27:13:47:8e:7c:14:4a:7c:06:18:2f:9f:a9:be:e9:d7:
2c:80:ce:d4:a6:b4:7a:d3:6a:86:9c:74:27:10:cf:9f:1a:b6:
80:5a:d2:0c:d3:11:70:2b:d3:74:01:d0:a3:12:dc:57:03:ab:
57:78:21:c6:ce:38:ad:1e:8e:1c:b2:4a:a3:dc:1e:ad:53:fa:
95:60:85:5d:79:87:3a:be:34:20:5b:11:f0:58:3b:b3:a8:da:
e9:04:bc:72:dd:e2:64:aa:95:88:7b:d7:56:0c:f9:08:98:42:
b1:16:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:28 2026 by rpki-client