Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File: 1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier: iwo9yzS7NV4NncoDsPka6CGRf9sml264DXd8lcFyByw=
Subject key identifier: E4:76:E5:09:33:3B:09:32:CB:5B:97:4E:AB:6D:12:05:3E:F4:28:64
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer: /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial: 019EBF5A9105E5DA3C51432EF678F5BC7180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number: 189E
Signing time: Sat 13 Jun 2026 05:00:44 +0000
Manifest this update: Sat 13 Jun 2026 05:00:44 +0000
Manifest next update: Sun 14 Jun 2026 05:00:44 +0000
Files and hashes: 1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: TamLr7AYOT/XVuTeeUfkVia9VyRF81jXb62e1J10hC4=)
2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:91:05:e5:da:3c:51:43:2e:f6:78:f5:bc:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Validity
Not Before: Jun 13 05:00:44 2026 GMT
Not After : Jun 14 05:00:44 2026 GMT
Subject: CN=e476e509333b0932cb5b974eab6d12053ef42864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:a6:ed:24:52:f7:22:3a:d8:0d:da:fd:0c:
b0:ca:85:79:8c:c7:9c:5b:fa:f2:67:d0:0a:78:c7:
5f:9d:ac:f2:a3:38:3e:f2:d1:5c:cd:6e:ea:73:7c:
62:6f:1d:71:e4:9a:b3:0a:1e:f5:63:1f:15:9d:85:
20:7f:65:2a:c6:43:da:73:33:17:d8:ac:e1:85:b7:
39:b6:e7:10:4c:2e:cb:50:f4:65:78:b4:46:0e:e9:
0c:74:39:29:3f:32:1b:28:e7:64:5d:b6:74:0c:9e:
25:0b:db:03:6a:62:dd:d4:6a:ab:40:1c:82:9e:2e:
47:3f:11:30:43:06:08:38:42:8a:a4:4f:9b:87:7a:
d6:2b:5d:61:5e:14:ed:ea:0f:ff:55:73:3a:1b:63:
8f:e5:c9:ec:d3:47:3b:13:da:3d:e2:15:e3:b5:41:
e8:9b:35:78:1d:ef:01:f3:41:c6:e6:07:ac:eb:45:
e2:02:81:5f:e0:7f:21:be:6b:e1:d7:10:06:71:1d:
c8:d1:d8:95:36:b2:8e:20:b0:f3:40:f4:de:a2:61:
b4:d7:e5:15:6a:30:3b:56:4e:9a:3e:fa:e2:07:4d:
03:f4:9a:cc:58:f6:ad:b5:a8:42:44:8e:9b:a0:c8:
13:fa:c1:14:cc:b5:09:19:16:11:45:0f:2d:d4:69:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:76:E5:09:33:3B:09:32:CB:5B:97:4E:AB:6D:12:05:3E:F4:28:64
X509v3 Authority Key Identifier:
keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:38:8a:c2:dd:32:90:19:9b:a6:28:a7:b0:a4:b1:eb:05:1c:
4e:a9:45:27:55:69:39:29:00:e6:bb:3b:26:28:4a:32:8f:2c:
11:e1:a5:80:91:0b:d2:c2:5e:ff:04:6d:55:11:de:0a:e0:60:
0a:cd:b6:0a:d1:9c:00:e4:5c:61:8b:5c:3f:26:92:e7:4d:a0:
59:ea:e4:fe:ad:75:3b:5b:08:35:44:45:24:e4:9d:60:5a:5d:
53:47:49:83:ab:39:1c:cd:8f:71:eb:65:23:8a:f9:3e:9b:6f:
b1:67:80:f0:3f:c8:79:7d:f8:38:31:86:b0:2d:99:01:1a:a1:
47:4c:b6:73:53:94:23:d6:5c:c7:60:18:1b:8b:b7:b7:c0:93:
d7:25:0f:f1:09:dd:94:42:59:28:48:3f:c8:1f:03:1c:4d:e7:
76:42:8e:6b:ab:c5:16:28:7e:01:d0:a0:c2:b6:54:6b:38:d5:
dc:e8:4a:0e:a9:02:b0:38:7d:26:35:b5:31:06:c6:29:b3:e2:
4f:14:23:e3:ae:8b:03:bd:de:8c:52:49:50:25:37:90:27:4d:
e4:98:ef:9f:00:58:40:14:b8:79:df:d3:e9:6a:52:d6:34:e6:
50:5a:5d:34:58:8d:b5:98:7b:db:39:93:c0:38:b6:56:22:d8:
3c:0a:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:52 2026 by rpki-client