Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: tZSreHqmrSo/gNx2iMTz/5JcfKBmoguHoAzn7/GmMdE=
Subject key identifier: 52:5C:1D:CD:18:80:A0:90:81:1C:3E:B0:3F:36:85:16:82:6A:7C:AE
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019EC25BCF5AF356B7970CB95967B7189D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 10CD
Signing time: Sat 13 Jun 2026 19:00:57 +0000
Manifest this update: Sat 13 Jun 2026 19:00:57 +0000
Manifest next update: Sun 14 Jun 2026 19:00:57 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: jFaMZH/gIyuoXLHp30ztyBVlFE3Iokyn00n6MY5wi0M=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:cf:5a:f3:56:b7:97:0c:b9:59:67:b7:18:9d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Jun 13 19:00:57 2026 GMT
Not After : Jun 14 19:00:57 2026 GMT
Subject: CN=525c1dcd1880a090811c3eb03f368516826a7cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:da:16:80:97:f2:55:aa:c7:50:d0:62:05:9e:
75:ea:b8:ad:6b:23:fe:2c:ea:21:08:c4:4f:77:0b:
f6:93:98:67:11:9d:6d:04:3f:5f:f1:a7:fe:99:31:
7e:c0:3f:dd:bd:3d:b6:5e:1b:20:4d:11:83:aa:cf:
cc:8c:0b:5d:0f:0e:db:c3:5b:79:31:56:9f:7f:a2:
28:50:40:24:1b:90:ef:06:44:4c:9f:72:2b:b8:4b:
da:f3:d0:ee:0f:c0:2e:ec:96:1d:71:38:75:28:48:
02:4a:26:5a:24:54:ac:0e:42:36:8b:d4:24:2d:17:
f8:14:25:cf:01:8e:bf:38:68:c8:55:f1:be:40:e9:
d7:a3:aa:24:15:e5:6c:2a:54:49:65:d7:a5:86:c4:
a6:ff:1a:21:a9:c3:d6:30:96:d8:ec:8a:e2:9e:7a:
27:a7:61:8e:6a:f9:e6:dd:97:11:d7:2c:31:49:a3:
43:8b:6a:68:be:29:3d:e7:6b:79:d5:15:ae:d5:41:
a3:fd:ef:b1:ed:eb:ff:7a:b0:83:ef:fa:03:3f:b6:
8f:47:8f:10:3b:9a:e0:84:a1:91:5c:07:33:44:ca:
93:13:5a:ea:95:59:c7:13:19:7f:be:ac:6c:35:78:
b9:0d:29:aa:81:96:93:75:ba:1c:10:94:8a:7b:5d:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5C:1D:CD:18:80:A0:90:81:1C:3E:B0:3F:36:85:16:82:6A:7C:AE
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:42:5f:b3:e8:0e:99:04:5a:e5:8e:9c:80:3c:e7:09:fa:5b:
02:95:eb:1e:de:09:72:1b:10:ff:0d:c2:e5:6e:fd:8c:0a:14:
b2:16:d9:58:9b:55:fb:f5:99:d8:95:03:4d:16:86:b0:e3:b1:
30:61:e2:b6:cb:ac:63:eb:03:1e:d6:e6:ce:8c:bd:ba:2e:4c:
16:55:13:88:5e:b7:23:47:fa:28:b9:e7:fd:53:36:95:2d:aa:
0a:44:7f:d0:08:9d:50:86:69:45:79:81:61:3a:ae:9e:1c:47:
26:e8:4e:31:db:7e:57:0e:f1:a6:e4:95:4d:cc:b2:cc:dd:d6:
0b:ef:98:01:51:72:fc:aa:6c:6c:5b:5f:d3:ab:e2:09:88:6c:
e6:d6:08:10:20:5d:d5:8d:15:8a:6a:ec:dd:74:25:c2:1e:bc:
b0:f2:db:38:f4:c6:85:41:cd:67:ee:2b:5d:d6:39:a5:ba:0c:
0a:6c:8c:25:18:24:d6:c7:73:99:c7:93:c9:e1:1c:0d:2e:d7:
59:10:9d:4c:57:0c:99:8a:1a:d1:14:2b:22:7f:0a:0d:98:69:
6f:57:39:bc:64:2b:11:c4:f7:35:4f:c4:41:f3:27:3f:c7:74:
88:fe:21:d4:cd:3b:bc:5d:06:31:41:7b:41:db:6c:af:07:0c:
92:0a:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:09:01 2026 by rpki-client