Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: ZtiwoePdG8NRhX5TjyzTkwXxGJ3MwnlvR061ackue9o=
Subject key identifier: 65:17:22:F9:DE:1B:0D:16:26:75:B3:FB:9F:B8:DB:07:42:CE:31:4E
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 019E276FB0DB91F9E40FB13C5F88B10E0AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0B44
Signing time: Thu 14 May 2026 17:01:31 +0000
Manifest this update: Thu 14 May 2026 17:01:31 +0000
Manifest next update: Fri 15 May 2026 17:01:31 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: pNoNTrTXNXi+zFc99fPvQm1lhQ3jNo4sMWaht7svAvQ=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
3: xKZaKt2ejyS1RvKxbygcbV14q7Y.roa (hash: pRhnCq62G3nLpLOE3zJBDzARRGgB05rKDlaS5XncNNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 16:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:6f:b0:db:91:f9:e4:0f:b1:3c:5f:88:b1:0e:0a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: May 14 17:01:31 2026 GMT
Not After : May 15 17:01:31 2026 GMT
Subject: CN=651722f9de1b0d162675b3fb9fb8db0742ce314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:99:b0:21:f4:76:ee:0c:62:56:86:e2:5a:
15:c2:21:dd:db:61:e4:c5:cd:69:c5:c8:85:99:67:
8b:ef:31:f0:89:1c:22:25:68:cc:dc:1f:e2:74:90:
96:38:1c:8c:38:32:3f:3a:72:1f:0f:f5:3d:59:de:
c4:79:9f:50:17:5b:b0:e7:36:a7:69:a8:cf:c9:ba:
a2:07:3b:89:47:9b:69:a4:bc:a8:58:53:94:22:db:
95:a4:ea:ec:71:98:94:5e:40:09:07:9d:66:83:bd:
8e:e4:3a:13:4b:49:a2:05:34:cd:d2:17:5e:da:4e:
ac:d7:8d:6b:4d:7c:35:38:75:1d:4b:33:e7:22:22:
06:ea:ab:ed:5b:0a:e1:32:2d:3e:29:36:ef:b4:4f:
f4:81:bd:f6:fc:5d:48:1d:bc:a2:1f:61:5b:69:a0:
a0:94:f4:b2:ec:44:c4:04:38:c4:8a:a8:75:61:56:
97:7e:15:1b:69:d6:05:c1:1b:7a:df:d2:d6:43:fa:
74:e9:05:b6:59:ce:13:3a:41:12:46:52:de:5c:36:
50:27:db:7c:1f:d1:65:12:64:60:a3:bd:cf:a3:cc:
93:a9:78:a4:b2:7f:d3:94:14:cc:15:2e:4b:8c:44:
47:c7:8e:d1:dd:3a:c2:a1:f3:c5:d4:d2:b8:15:be:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:17:22:F9:DE:1B:0D:16:26:75:B3:FB:9F:B8:DB:07:42:CE:31:4E
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3e:40:85:da:3c:91:c0:79:f5:c3:63:31:f2:6c:07:85:b1:
d5:3f:a2:00:c4:1a:11:5f:d6:88:61:de:b2:cf:3d:b8:2b:ba:
a3:29:46:2e:f8:4c:63:de:74:76:47:7b:75:f9:47:1f:49:b0:
6a:fd:32:3f:73:73:b3:df:88:f5:1d:36:22:33:1a:b9:3f:a8:
68:e9:d1:79:d9:e3:45:c0:e8:de:23:3a:71:ef:b1:d2:65:39:
b3:74:b1:83:9d:2d:8f:27:8b:cd:a7:c6:4e:73:38:e2:5d:57:
5d:54:24:66:1c:94:52:2e:75:51:ef:79:71:2e:b6:8d:d4:53:
af:98:47:6c:b0:5c:0c:1a:c1:25:69:da:4b:64:71:41:4c:18:
c2:0a:21:fe:7c:3d:ce:29:af:46:d8:9a:70:b6:2a:f3:df:72:
bd:a4:d9:13:19:24:f6:96:08:c8:8f:d9:94:d5:01:75:f7:d7:
e9:ab:e2:e1:27:4c:1f:d5:7e:46:d8:77:31:f9:d3:86:21:c1:
51:46:06:f4:a1:b6:b0:a2:69:f6:93:ce:4f:eb:8b:93:57:ee:
c9:b3:51:53:03:0d:df:d4:39:0e:63:56:f6:ee:bd:ac:0d:a5:
82:82:34:af:70:69:9d:19:23:1f:29:e5:18:3d:99:1c:65:69:
25:9b:bd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 20:10:49 2026 by rpki-client