Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
File: 1TVDIcElQ2AUXq8l9pk4uN80ezE.mft (raw, json)
Hash identifier: jihPybB7kSRyDsZAOci6xN2VUSmScs4W422LqVNde+A=
Subject key identifier: E8:6D:31:8F:EC:77:D0:93:1A:8F:66:7D:6C:21:F3:62:C3:EA:21:B1
Authority key identifier: D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
Certificate issuer: /CN=d5354321c1254360145eaf25f69938b8df347b31
Certificate serial: 019E30057796666B3378E2CFA23C99029F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
Manifest number: 0E11
Signing time: Sat 16 May 2026 09:02:05 +0000
Manifest this update: Sat 16 May 2026 09:02:05 +0000
Manifest next update: Sun 17 May 2026 09:02:05 +0000
Files and hashes: 1: 1TVDIcElQ2AUXq8l9pk4uN80ezE.crl (hash: Nckp375e3HeCzRuAVk7uIDkwbhuLmXqUE0BbbtYeGR4=)
2: yqbwyn5sfCL6hbkLZAJdRWAyPBM.roa (hash: ZWKRKB/jnik25oPS/+Y2ymZERk+OEa7DBYYnhwqGBQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:77:96:66:6b:33:78:e2:cf:a2:3c:99:02:9f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5354321c1254360145eaf25f69938b8df347b31
Validity
Not Before: May 16 09:02:05 2026 GMT
Not After : May 17 09:02:05 2026 GMT
Subject: CN=e86d318fec77d0931a8f667d6c21f362c3ea21b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ee:46:81:67:e9:fe:3e:c0:8f:be:de:9a:13:
2a:e9:6c:10:76:88:92:c1:63:1b:79:5a:0b:7d:9a:
83:e6:b4:d8:86:d6:9e:2a:c1:68:50:a8:90:ef:31:
88:e7:48:7a:5c:78:04:06:13:a8:ee:eb:70:47:b8:
9e:c0:31:eb:79:33:f3:98:af:2a:01:9d:62:91:6f:
9a:e8:03:f3:02:ab:9b:68:46:d7:78:91:f9:7b:3b:
a5:42:32:2a:95:9e:8f:be:5c:06:d4:87:94:28:f0:
b6:18:7e:1c:e1:8c:38:2e:04:ce:d6:8a:ed:4f:d6:
dd:2b:1f:6e:db:5c:ed:86:a4:87:65:9d:9b:69:47:
b3:9c:68:69:f4:25:ba:42:a0:e0:7f:fb:32:b1:71:
df:07:6f:05:fe:f7:57:cc:bd:46:eb:63:83:d8:a4:
37:0b:2a:61:04:bb:b8:ac:e6:05:e3:03:48:29:eb:
f6:ad:7d:71:4f:17:31:54:df:80:15:29:9d:0e:da:
15:3d:7f:2b:ba:96:09:2d:18:82:16:3b:f9:c8:28:
d7:c0:25:e2:45:1c:1e:d5:71:5f:09:1b:ba:b8:5f:
9b:71:9e:c2:22:f1:ae:28:92:4f:68:f7:70:43:33:
f0:16:f2:7d:17:0b:f2:83:7e:58:aa:db:2b:de:3a:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:31:8F:EC:77:D0:93:1A:8F:66:7D:6C:21:F3:62:C3:EA:21:B1
X509v3 Authority Key Identifier:
keyid:D5:35:43:21:C1:25:43:60:14:5E:AF:25:F6:99:38:B8:DF:34:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TVDIcElQ2AUXq8l9pk4uN80ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d9f9a8-da01-4d35-8284-b64eb8d83658/1/1TVDIcElQ2AUXq8l9pk4uN80ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:98:ab:ef:2a:d5:1b:63:16:42:ee:a4:5e:06:0a:d2:dd:64:
cf:73:50:bc:c1:f6:fc:5d:c3:24:7a:a1:ef:88:71:5c:9d:57:
7a:7e:0c:70:07:50:b7:25:bc:71:8f:1f:eb:5a:c3:f3:b0:8d:
99:93:8d:21:25:97:e0:0d:33:68:78:aa:8e:ba:49:6b:7f:94:
68:e2:62:24:64:f3:d4:4f:9f:5d:0f:cb:25:b1:e4:24:1a:7c:
93:35:28:e7:93:b2:a4:7c:5d:5a:d7:4b:62:3e:b8:3c:5f:ab:
80:2f:37:0e:71:da:a5:32:4d:e8:08:a2:c9:83:56:4c:86:c0:
89:39:d4:2b:43:2b:c8:47:3e:0e:3c:98:42:b0:05:f4:f8:eb:
7c:ae:4d:70:9f:2a:f0:e7:0c:1a:85:b2:6b:5f:32:ec:dd:51:
ee:3c:a3:9b:1b:ca:63:00:99:13:8e:01:f8:18:71:1c:03:9d:
80:b9:75:5f:2d:cb:20:b7:d0:1d:62:fb:07:6c:0f:8a:f6:eb:
d2:60:72:d8:9c:46:72:2e:9c:58:be:3d:5a:29:29:e2:01:9b:
88:ff:32:18:eb:c5:90:95:54:20:8f:81:00:f6:21:8f:2e:a1:
62:ee:e7:c7:b1:38:77:2e:83:c4:31:15:cd:31:bf:53:0b:9f:
33:b8:32:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:17 2026 by rpki-client