Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
File: 1DVli1i3FBlu7zcb2WfAxeLKvWY.mft (raw, json)
Hash identifier: 0ReTRJmDUZMQpkhxAUi+9TtGvbyazIIyWVfdEh8Mhe4=
Subject key identifier: 29:D9:30:9F:91:C5:A7:8B:57:68:04:2E:8C:80:36:DF:19:65:A5:5F
Authority key identifier: D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
Certificate issuer: /CN=d435658b58b714196eef371bd967c0c5e2cabd66
Certificate serial: 019E314DF59CA8A751A8631C2739ACA6B7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
Manifest number: 1637
Signing time: Sat 16 May 2026 15:00:53 +0000
Manifest this update: Sat 16 May 2026 15:00:53 +0000
Manifest next update: Sun 17 May 2026 15:00:53 +0000
Files and hashes: 1: 1DVli1i3FBlu7zcb2WfAxeLKvWY.crl (hash: AvTGj6mzSq4A99cxLftZD4VvYMSjulxRUIVEwtySJug=)
2: jTE7aus6FHt_I5mpklvVVf-KpAw.roa (hash: jTSKuDkQyIFhQKFi7+s/96OtXGRbDcnGaxvdpome6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:f5:9c:a8:a7:51:a8:63:1c:27:39:ac:a6:b7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d435658b58b714196eef371bd967c0c5e2cabd66
Validity
Not Before: May 16 15:00:53 2026 GMT
Not After : May 17 15:00:53 2026 GMT
Subject: CN=29d9309f91c5a78b5768042e8c8036df1965a55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f6:a1:6a:af:d3:69:df:4f:c7:b7:fc:c3:c3:
75:0e:ea:b3:ff:fa:88:1c:85:28:41:2b:a8:5b:5b:
92:5b:13:63:51:24:c4:25:3c:8b:49:d6:02:5b:e6:
2a:de:8a:1d:01:5e:cb:c1:ce:3c:f0:98:52:ba:d6:
9c:1e:a6:f7:7e:03:d9:5e:42:be:72:be:b5:d7:14:
e9:b7:9e:ef:90:05:d4:fd:53:d9:ca:ab:31:6b:25:
05:70:4d:1c:46:0a:a3:b5:13:83:f0:7e:11:a4:53:
99:d7:2d:e6:36:82:6d:2b:46:7e:b3:29:b4:bc:76:
3a:ea:91:ae:3c:01:84:64:8b:4a:49:0b:f3:3d:58:
23:6b:6c:03:85:dc:74:ba:7e:3c:df:1f:9e:b3:c1:
fd:3b:57:92:d3:53:7b:59:32:6b:de:51:df:21:0a:
e9:83:f4:91:02:2f:b1:a5:77:6f:30:a0:d4:50:46:
18:a7:6d:c9:91:6d:e9:1d:82:64:c5:c8:10:d2:34:
7c:75:50:fe:d5:61:ce:b2:c9:0d:51:e4:e6:b5:7d:
60:6b:25:65:dd:93:9a:c4:59:cc:c6:d7:67:88:12:
5b:bf:4c:04:6d:2e:07:05:f4:d3:a0:ae:9a:ff:16:
d8:b8:6e:16:42:a2:dd:5e:bf:d4:33:7f:e8:31:d0:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:30:9F:91:C5:A7:8B:57:68:04:2E:8C:80:36:DF:19:65:A5:5F
X509v3 Authority Key Identifier:
keyid:D4:35:65:8B:58:B7:14:19:6E:EF:37:1B:D9:67:C0:C5:E2:CA:BD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DVli1i3FBlu7zcb2WfAxeLKvWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/91f8f9-fc3f-4bb8-8454-405b0bda2c26/1/1DVli1i3FBlu7zcb2WfAxeLKvWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c9:23:59:aa:28:43:64:1e:f0:e8:4e:e5:44:d6:c8:b4:2c:
b2:c8:f9:9d:59:c7:37:2f:f7:c8:d5:06:b6:0a:ee:9e:f0:ed:
9e:a4:42:5c:6b:19:1f:3f:5e:a4:c1:08:65:fb:9d:23:6f:0f:
a7:ae:de:e2:1d:73:7f:8e:6b:0e:fc:5c:54:58:3d:62:ab:e6:
f2:ff:f3:55:fc:d5:77:84:a3:8a:de:f5:70:bd:81:ed:d2:82:
7f:bf:bd:f5:4e:98:6b:50:78:a2:34:47:87:80:01:8e:89:59:
a7:50:d8:1f:03:da:3f:21:70:f0:46:a9:6f:7a:64:d2:e2:c3:
07:ba:7d:95:38:ef:fb:29:73:c3:a6:ce:34:e0:c2:03:bd:52:
06:c9:9e:70:c4:ae:f5:ce:8b:9c:66:3f:60:c6:67:02:59:ed:
ef:85:ec:1a:92:2d:44:ff:06:7e:f0:19:ef:de:f7:17:b8:1c:
21:ff:03:3f:54:80:27:9f:67:c4:2a:4a:57:85:3f:bc:29:cb:
90:95:a7:7f:9b:6b:33:59:29:71:3e:4b:b0:5b:04:80:f6:33:
8b:e9:ed:68:34:43:72:41:dd:06:d1:65:49:fd:fe:ad:f3:46:
a9:a3:39:63:04:4e:15:cf:60:30:88:1e:98:54:3c:d5:68:9d:
7c:7c:10:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:14:30 2026 by rpki-client