Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
File: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft (raw, json)
Hash identifier: GmU8JTkkOAFUshWZJIhLJ+FtlxAXoeDKEzJCHP1PgXU=
Subject key identifier: 05:9C:2A:4F:BC:31:E1:1A:D9:E2:79:18:DD:D4:16:96:AB:21:A3:BD
Authority key identifier: D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
Certificate issuer: /CN=d5a2196ef119221155e1683f8967d254625dae71
Certificate serial: 019E1DC77FCB2ABB8048A1AAAFB1A5568D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 20:01:13 +0000
Manifest this update: Tue 12 May 2026 20:01:13 +0000
Manifest next update: Wed 13 May 2026 20:01:13 +0000
Files and hashes: 1: 1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl (hash: b4ocwF3yNPVpXG1zXJSZ+njs8jJDi1tqa5j21DhyyUg=)
2: AHnNibYpBfUdvSGboILQ1teAIw4.roa (hash: 42GSIkMZbcrmZ8XMph6d+mXrtH34NIs/JYMf8WUp4vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:7f:cb:2a:bb:80:48:a1:aa:af:b1:a5:56:8d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a2196ef119221155e1683f8967d254625dae71
Validity
Not Before: May 12 20:01:13 2026 GMT
Not After : May 13 20:01:13 2026 GMT
Subject: CN=059c2a4fbc31e11ad9e27918ddd41696ab21a3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:37:e0:30:12:b2:3a:9f:94:9c:b8:0d:88:
9c:49:77:0c:b2:25:3e:f4:e0:f5:5e:71:4d:5b:07:
32:62:d5:d5:0f:f3:17:0d:ca:e6:ff:a0:fb:3a:26:
a5:5c:ce:cb:07:8d:89:92:15:83:e4:24:79:f1:97:
ac:98:38:f7:95:af:97:98:6e:9c:eb:68:e7:1b:58:
cd:b2:d4:fe:cf:6e:88:25:e9:c1:c4:a2:3b:06:5b:
92:32:3e:54:16:9e:a1:8a:37:25:6c:83:b0:32:d7:
9d:e1:13:7b:73:34:9a:e4:25:21:c0:22:3e:05:b3:
c4:4b:e2:14:b8:41:91:df:63:d7:e4:27:37:99:06:
ed:15:91:9c:b6:44:4f:0e:91:a4:71:70:f8:29:5b:
b3:5f:54:5b:cf:5a:21:26:2c:23:94:2a:70:78:f8:
da:a4:83:4b:ad:6d:2f:7d:12:cc:da:b5:04:82:ed:
88:9d:c5:c9:c0:0e:84:3c:fb:a2:d6:91:33:f5:56:
c3:08:13:c8:ae:9f:15:d1:02:be:7c:68:f2:25:1d:
d4:80:e3:fc:58:50:9d:c3:22:fe:61:bf:ce:b3:21:
62:f0:a4:fe:62:1f:37:b1:fb:88:4f:6e:3b:7a:84:
a1:3e:63:0f:9f:2e:a5:74:f8:fb:0f:96:e4:f6:7c:
90:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9C:2A:4F:BC:31:E1:1A:D9:E2:79:18:DD:D4:16:96:AB:21:A3:BD
X509v3 Authority Key Identifier:
keyid:D5:A2:19:6E:F1:19:22:11:55:E1:68:3F:89:67:D2:54:62:5D:AE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b06337-6517-400b-8cb5-7afa0bcd7976/1/1aIZbvEZIhFV4Wg_iWfSVGJdrnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:61:16:27:6f:c6:32:3f:7d:d1:9b:8d:cb:88:4d:b2:7c:34:
c7:2f:f5:e0:47:98:19:e9:66:3b:3a:ec:1f:b9:6b:a1:07:86:
d3:56:2b:f6:92:33:b2:24:28:16:45:8a:22:42:50:f8:c5:ad:
5c:3b:52:f3:86:78:db:23:2e:39:69:64:d0:11:ea:60:f9:40:
b5:a9:d9:1d:13:bf:57:25:f4:99:a9:bf:5c:1d:b3:90:ea:c8:
8a:ce:ca:de:0a:98:b1:08:d3:50:45:be:fc:08:3d:20:75:66:
8e:91:de:6f:d6:98:04:8c:cc:c5:df:51:23:bb:b1:03:1e:83:
f9:28:8f:15:27:21:67:f3:43:4b:72:ea:14:7a:45:61:16:22:
fd:a5:f5:04:b6:c5:70:bf:19:09:5b:dd:7e:11:22:c9:cb:ab:
f8:15:54:db:4b:83:b2:1c:43:ad:26:37:2f:0a:b9:3b:bc:34:
b9:79:1e:84:b9:2a:d6:65:45:da:c9:e8:b6:c0:f6:fe:39:06:
ff:ea:9f:58:a8:0b:50:76:7f:ed:19:7b:05:26:5b:bb:11:d4:
72:56:fa:63:80:cf:2e:b8:27:b2:3b:58:3f:bf:be:9a:5c:8b:
b7:38:f1:a6:d4:a8:75:44:d0:da:8f:f9:a6:d2:b4:e5:5d:8d:
39:a3:c8:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx3/LKruASKGqr7GlVo2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YTIxOTZlZjExOTIyMTE1NWUxNjgzZjg5NjdkMjU0NjI1
ZGFlNzEwHhcNMjYwNTEyMjAwMTEzWhcNMjYwNTEzMjAwMTEzWjAzMTEwLwYDVQQD
EygwNTljMmE0ZmJjMzFlMTFhZDllMjc5MThkZGQ0MTY5NmFiMjFhM2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MQ34DASsjqflJy4DYicSXcMsiU+
9OD1XnFNWwcyYtXVD/MXDcrm/6D7OialXM7LB42JkhWD5CR58ZesmDj3la+XmG6c
62jnG1jNstT+z26IJenBxKI7BluSMj5UFp6hijclbIOwMted4RN7czSa5CUhwCI+
BbPES+IUuEGR32PX5Cc3mQbtFZGctkRPDpGkcXD4KVuzX1Rbz1ohJiwjlCpwePja
pINLrW0vfRLM2rUEgu2IncXJwA6EPPui1pEz9VbDCBPIrp8V0QK+fGjyJR3UgOP8
WFCdwyL+Yb/OsyFi8KT+Yh83sfuIT247eoShPmMPny6ldPj7D5bk9nyQMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWcKk+8MeEa2eJ5GN3UFparIaO9MB8GA1UdIwQY
MBaAFNWiGW7xGSIRVeFoP4ln0lRiXa5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9iMDYzMzctNjUxNy00MDBiLThjYjUt
N2FmYTBiY2Q3OTc2LzEvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9iMDYzMzctNjUxNy00MDBiLThjYjUtN2FmYTBiY2Q3OTc2
LzEvMWFJWmJ2RVpJaEZWNFdnX2lXZlNWR0pkcm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2EWJ2/G
Mj990ZuNy4hNsnw0xy/14EeYGelmOzrsH7lroQeG01Yr9pIzsiQoFkWKIkJQ+MWt
XDtS84Z42yMuOWlk0BHqYPlAtanZHRO/VyX0mam/XB2zkOrIis7K3gqYsQjTUEW+
/Ag9IHVmjpHeb9aYBIzMxd9RI7uxAx6D+SiPFSchZ/NDS3LqFHpFYRYi/aX1BLbF
cL8ZCVvdfhEiycur+BVU20uDshxDrSY3Lwq5O7w0uXkehLkq1mVF2snotsD2/jkG
/+qfWKgLUHZ/7Rl7BSZbuxHUclb6Y4DPLrgnsjtYP7++mlyLtzjxptSodUTQ2o/5
ptK05V2NOaPIgQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:06:03 2026 by rpki-client