Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: M46QfD6IaMbgks9B7kSW1b37vZIorIEAxIZErczgb14=
Subject key identifier: C6:CB:E2:E7:54:98:AB:DF:C3:3C:4C:90:8C:C2:DE:E8:3F:F4:0C:1B
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019E1FEC517F31037535EEC34B59ACDF040C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 06:00:41 +0000
Manifest this update: Wed 13 May 2026 06:00:41 +0000
Manifest next update: Thu 14 May 2026 06:00:41 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: odrZU622bib6jD4bkIvA6yWmk1WGwXTFwv03q/8xaDo=)
2: 5RoZVTfrYaJl3awhTUEWKmh-mjw.roa (hash: vLgOLE/P+EAVb2N+cRPxBkgd+Ontprhm/1obe74MJao=)
3: ToZEV5JGyeFOLj8ty2PbNgby5sE.roa (hash: DsdlMKnutBPPcHsH+/R1jP5sFhln6SW7LBjUC07NiYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:51:7f:31:03:75:35:ee:c3:4b:59:ac:df:04:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: May 13 06:00:41 2026 GMT
Not After : May 14 06:00:41 2026 GMT
Subject: CN=c6cbe2e75498abdfc33c4c908cc2dee83ff40c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4a:38:00:c0:73:c5:b2:d7:47:20:89:45:16:
b5:c9:3a:83:fc:61:53:b9:3f:19:90:5e:19:d8:4c:
9f:dd:d9:c4:78:69:cf:bf:2f:f5:07:4b:8d:bf:0c:
c5:4c:21:e7:62:bb:7e:74:1d:21:d0:73:6e:4b:4e:
ed:61:06:ec:2e:e9:2a:53:3f:c7:a6:ac:7a:ce:c2:
52:80:88:ee:19:db:20:5b:31:35:39:5a:bf:65:0e:
a9:e5:e8:fe:7a:03:12:76:89:58:63:52:c1:1e:7e:
7f:63:e8:ab:22:2b:20:49:dc:f7:0b:88:d2:3a:81:
eb:62:d6:15:d4:e3:02:42:a2:8b:5f:9c:3a:a8:fe:
86:8d:d7:0b:cb:9c:56:23:cc:82:7e:79:ac:29:d0:
81:f6:ab:40:77:6b:b0:af:b5:b9:a0:5a:45:e3:4e:
1f:1e:bc:a4:14:1a:d7:c3:89:44:dc:2d:23:5a:3f:
5e:73:80:45:c0:02:27:5b:4c:49:2c:56:21:f5:c7:
68:fd:a3:d1:a4:7b:b0:7d:c2:27:7a:ea:bb:9a:10:
9e:08:37:c6:ff:39:e4:1e:e6:c7:5a:ee:86:1f:87:
30:00:74:7b:a8:88:8c:e8:89:9a:dd:26:41:52:0c:
0d:9d:ae:15:6a:2a:f6:47:d1:57:19:96:17:07:33:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:CB:E2:E7:54:98:AB:DF:C3:3C:4C:90:8C:C2:DE:E8:3F:F4:0C:1B
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5e:61:28:8d:d5:cd:d6:40:c0:d6:ff:97:df:7e:f2:72:bd:
ba:0b:d6:7f:54:ef:e3:9e:09:91:87:4f:83:24:12:a7:2e:40:
39:a3:22:f9:69:5c:aa:18:c5:90:60:aa:10:f4:b9:b8:e5:e9:
61:33:33:55:56:5b:2c:ca:a6:ba:9a:02:fe:e3:46:9c:07:94:
38:0b:c1:b9:33:20:80:0b:2f:00:4c:eb:2e:8d:08:ad:e9:7e:
8f:b7:39:40:e1:3d:4e:2c:ba:cb:16:7b:c3:75:73:db:fc:d8:
7d:2b:12:84:9b:db:d8:2f:2c:d2:b1:6f:49:f8:8c:1c:55:25:
02:f9:32:c0:23:b9:ff:64:76:45:74:a7:f4:bb:3f:7d:61:f3:
8a:f6:b0:ec:05:4f:98:c7:87:eb:39:d1:e7:f0:69:46:e0:cc:
4a:33:6c:00:68:10:93:10:07:3b:f3:ae:d9:3d:0c:33:78:2c:
ee:2b:55:3a:34:8e:21:d5:23:37:c4:99:d9:fa:c3:88:df:96:
13:ba:98:85:8e:69:06:99:54:4e:ca:70:c4:99:cf:a9:79:97:
87:3a:df:0d:02:20:42:25:f4:48:9f:9c:ab:62:67:c5:11:3a:
71:9b:2c:48:14:8d:7a:60:20:42:6e:30:12:42:4a:93:07:07:
c1:23:ac:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:11 2026 by rpki-client