Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: aIKRO7i7EitBPzzXoSa3Exyv0tG1tDssZbkqhdyq7BQ=
Subject key identifier: 1E:C1:5B:26:64:AC:5C:DD:D8:42:17:9A:3B:68:42:3F:F7:3A:19:41
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019E1CB54A161CCF944C4BCA1185635289E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 15:01:43 +0000
Manifest this update: Tue 12 May 2026 15:01:43 +0000
Manifest next update: Wed 13 May 2026 15:01:43 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: fLSdiRhyel66Biqc4f0mrDhD0IkKt6rFujPm7JApltU=)
2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:4a:16:1c:cf:94:4c:4b:ca:11:85:63:52:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: May 12 15:01:43 2026 GMT
Not After : May 13 15:01:43 2026 GMT
Subject: CN=1ec15b2664ac5cddd842179a3b68423ff73a1941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a9:96:8c:5d:d4:83:86:43:d7:0a:da:e0:7c:
ce:2f:ba:b7:e4:d9:a3:61:44:ce:00:78:ec:5d:cd:
7c:84:7e:1d:70:96:78:44:9d:21:2e:98:8b:c1:d4:
e5:cc:29:dd:21:3b:9a:92:66:13:cf:ab:dc:0b:c0:
54:e7:4d:52:82:4e:df:f2:f4:8d:39:8e:b7:79:55:
81:2d:e8:81:56:68:50:2e:d2:64:59:3e:d1:df:f4:
ae:5e:48:fc:15:00:c2:c7:79:30:16:62:c2:9b:56:
f8:44:68:bc:54:aa:07:db:ec:f2:83:35:d1:1a:a9:
ca:ce:ba:26:40:e9:05:1b:48:aa:e9:d5:4c:b8:cc:
83:d4:21:60:af:43:38:ec:59:c4:b2:9c:9c:63:9e:
fa:73:85:7b:b5:8b:9c:5e:f5:fd:34:c0:3f:61:96:
00:9c:c1:b5:63:da:1e:5e:ea:c7:ff:33:0c:76:61:
27:21:d6:2d:e1:4c:f9:83:a1:d3:4f:ed:5b:54:45:
5c:45:31:53:28:b7:21:6f:e1:a4:6a:99:43:94:66:
b8:f2:be:9f:5e:c0:5e:9e:8f:dd:ab:26:ea:5e:7f:
c7:9b:31:e4:4d:c5:5b:7d:c3:57:0c:e4:39:29:38:
25:88:3c:d5:83:af:65:5f:76:a5:a1:d8:e0:c0:4d:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C1:5B:26:64:AC:5C:DD:D8:42:17:9A:3B:68:42:3F:F7:3A:19:41
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:39:46:df:76:dc:c9:c5:8d:3d:33:e4:0a:74:27:c0:31:5c:
6a:6b:77:1a:ef:7a:d2:17:9d:53:44:df:f2:67:7c:20:3c:58:
35:3d:2c:af:52:90:38:f3:d2:25:31:f9:ae:ab:10:07:03:7a:
25:6c:2f:2e:6f:d5:6b:19:4d:14:2b:04:11:4c:b6:5f:13:33:
f6:1d:8d:fa:60:d1:75:c8:11:9f:71:bc:64:b8:bd:dd:bc:eb:
f4:09:8c:7f:75:51:ec:b7:90:c6:ef:e4:95:dc:88:91:8f:24:
2b:1a:42:7a:e7:36:6d:4d:3d:ca:6a:c9:47:c5:f0:9a:08:6e:
e2:46:69:e9:40:a7:00:e9:ac:de:5a:06:e2:7e:1e:83:74:14:
7e:b1:e3:b8:9d:4d:3b:2b:cb:4a:9d:87:cc:0b:40:7b:ea:b6:
7b:bb:2c:81:97:c9:63:e1:f7:cd:07:00:4d:01:dd:a0:5e:1e:
d2:6d:fa:13:c2:92:88:37:29:8a:3f:68:ec:72:53:b6:45:db:
73:78:16:7b:53:f0:9f:9a:92:0f:43:5c:d9:24:a6:7b:09:09:
40:05:58:e1:db:c4:cc:d5:86:e9:22:0c:d8:c1:ad:58:95:e7:
b8:55:61:68:86:d7:1a:5e:d6:83:7e:f3:38:7e:1b:63:b7:9c:
08:bd:48:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:42 2026 by rpki-client