
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: aZ9iNKHfS2Nyi8d5GOzCBC7npStCoqUeTAKma/nFtiA=
Subject key identifier: 71:83:87:FE:C4:18:8A:45:83:F7:73:A9:33:6E:39:F1:D4:1D:D1:63
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019E295DBEE31CD3F206BD222F0AD524C613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 01C3
Signing time: Fri 15 May 2026 02:01:09 +0000
Manifest this update: Fri 15 May 2026 02:01:09 +0000
Manifest next update: Sat 16 May 2026 02:01:09 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: iRlKPX4tXDwHP2gsm6xAOk25KrSwg9gpRbHvenbk4ic=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: ylydL3qXftFW7Uij6tIt41OMzD8.asa (hash: WkGPoaULmCIO7XY8Ndhcz75a3abt6wk2tMgYPdwb3B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:be:e3:1c:d3:f2:06:bd:22:2f:0a:d5:24:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: May 15 02:01:09 2026 GMT
Not After : May 16 02:01:09 2026 GMT
Subject: CN=718387fec4188a4583f773a9336e39f1d41dd163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:b2:5d:9f:a4:b4:8e:b3:1d:f3:37:61:75:
16:8c:c3:e4:32:75:76:59:bd:e9:9b:0d:ed:90:1d:
9e:9f:d3:9b:bf:c6:82:67:d8:6a:f7:0d:3a:e6:1d:
55:db:67:f0:0d:03:bf:7e:59:66:e2:ae:da:e1:38:
fc:81:12:b5:ac:a3:01:5e:b3:20:88:12:46:3e:86:
e0:04:7b:9e:d2:4b:9c:c0:79:6d:f2:64:26:5c:c1:
16:07:d2:aa:db:ba:71:33:d1:4d:28:f4:89:90:3d:
83:3c:ed:5c:bc:7c:20:6d:9e:58:8a:77:1f:21:5a:
75:63:5f:d9:27:19:c1:c0:de:74:74:37:62:8c:b7:
bb:f9:8b:d2:0d:4d:0f:05:f7:99:c5:6e:63:cd:53:
ea:b1:fe:43:3b:63:08:53:3a:a6:3a:02:7f:f4:ea:
35:b9:46:e1:dd:a1:77:4b:e6:8f:33:49:b4:77:0e:
bf:7d:2c:c9:43:0f:56:23:03:46:bc:02:38:50:93:
da:3f:6a:60:a7:1d:d0:81:a7:de:4d:3c:ff:3f:ab:
80:9a:06:c1:e6:78:a1:ed:14:dd:a1:e3:4d:f6:11:
3a:5f:95:b6:9b:46:bb:cf:aa:65:ee:14:00:26:f0:
27:7f:6c:be:56:5f:12:1b:3f:ae:bc:51:02:e8:01:
ef:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:83:87:FE:C4:18:8A:45:83:F7:73:A9:33:6E:39:F1:D4:1D:D1:63
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:0a:6d:14:06:4b:ed:69:9e:f2:71:a0:88:cc:08:43:e8:
5b:e0:09:2e:d2:84:c7:29:9b:42:8b:b5:9f:63:e1:69:93:44:
50:f2:30:e5:15:12:4d:5a:51:57:d0:d8:83:ea:8a:65:eb:b4:
65:88:b0:e6:34:32:2d:53:a4:b1:66:d3:4c:a5:f0:b6:97:ca:
ed:a9:e2:86:58:b3:da:e7:96:e1:8b:35:4e:38:9f:03:b6:dd:
8b:d6:cf:f1:4c:00:c5:3e:e2:69:9d:6b:20:76:dc:cf:5e:a9:
99:8d:b0:e3:ac:01:a6:b9:9d:6a:10:d5:17:8b:72:f3:66:51:
d0:fa:68:31:25:dc:5c:c7:51:f0:d2:6a:66:6f:a5:ab:f8:96:
fc:3f:9c:17:c2:81:24:b6:78:c2:16:ec:35:60:d9:58:88:5e:
70:50:c4:c6:9f:98:21:13:ce:a4:48:89:fc:16:fe:61:63:1d:
42:31:89:92:de:c3:ef:67:b2:88:f1:1a:b4:53:f8:ce:51:d4:
19:09:b1:b4:df:fe:91:8a:74:1b:69:90:49:db:1f:73:57:a1:
b6:9b:c3:ba:9c:ad:ce:89:71:2b:ba:f6:6c:7e:d9:38:1c:31:
61:f5:57:08:80:28:ce:14:b6:40:7d:e1:a6:a2:31:b1:d0:72:
93:33:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:57:03 2026 by rpki-client