Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.mft (raw, json)
Hash identifier: fUVvneAGlAnjj2aSV52DHi7wtFPsArkr12GDArVX9Dc=
Subject key identifier: 50:B5:13:0A:AC:D5:4A:5B:3E:20:FB:EC:ED:CC:49:6E:21:DA:8C:4D
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 019E1CEBC7547DC797088A5258BBF405CA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
Manifest number: 0591
Signing time: Tue 12 May 2026 16:01:14 +0000
Manifest this update: Tue 12 May 2026 16:01:14 +0000
Manifest next update: Wed 13 May 2026 16:01:14 +0000
Files and hashes: 1: 1P9RiRrUTBZt7roTFZZsmh2DkJc.crl (hash: RIm/3xboGpeCj2MhDid/6bpvQ4vN9WUeXMBGl+w40uI=)
2: Z41uijNFQ0G-iZW7PiDpJ2EAmv0.roa (hash: AfUXmqvyv0xkNeTqOicnT0Mi5qeFfpzbGMDou/p87aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:c7:54:7d:c7:97:08:8a:52:58:bb:f4:05:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: May 12 16:01:14 2026 GMT
Not After : May 13 16:01:14 2026 GMT
Subject: CN=50b5130aacd54a5b3e20fbecedcc496e21da8c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:92:30:f3:82:bb:58:22:b4:c0:0f:d1:6d:3d:
1c:e2:e3:33:e8:2d:c2:f1:70:bc:29:19:ee:c7:ab:
d8:5a:ab:0d:3e:5e:e5:6d:cf:5e:b4:92:b1:3a:fa:
b4:8b:94:98:14:d6:1e:99:8e:9c:02:c2:ab:4f:3b:
ce:46:cf:95:77:bc:1f:d8:a5:e7:72:45:45:12:8b:
68:cc:62:df:29:35:00:1b:00:c4:db:b4:fb:fb:42:
3f:24:05:6d:55:cc:c8:5c:2a:96:29:75:38:92:d5:
26:49:a3:97:71:ac:09:23:fd:d4:59:c9:e7:15:dd:
b2:cc:a3:6f:d4:90:8b:ba:62:16:e6:00:d5:30:3b:
1e:d2:b4:3b:17:76:6f:75:ef:af:4a:f6:0c:09:31:
69:ee:81:5e:ea:fe:ca:2f:b1:a9:b6:66:3a:cb:9f:
6f:b3:4c:2f:a5:ce:86:47:d9:7e:1b:26:7e:b4:78:
4a:65:3e:ec:f2:f9:87:7f:8c:f5:04:b0:52:0c:be:
b7:cc:bb:5a:2e:3c:97:10:f3:ca:28:a5:b8:77:8b:
de:70:b5:bd:42:a6:8e:b3:c6:4f:2f:cc:27:e3:97:
33:ac:5c:22:32:4c:99:c4:89:1e:c7:91:59:3e:e9:
d0:66:60:a9:66:6f:b7:d3:3f:4e:f8:58:de:16:c0:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B5:13:0A:AC:D5:4A:5B:3E:20:FB:EC:ED:CC:49:6E:21:DA:8C:4D
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ae:2f:f6:29:db:55:39:f3:7f:04:c1:61:3e:70:89:d7:5a:
10:34:e0:35:23:13:67:7e:52:dd:67:6a:ad:27:4d:13:70:7b:
46:24:8f:2a:d9:61:36:7f:14:06:8e:3a:4b:3b:d1:b5:e4:81:
ca:98:c0:11:e2:92:ea:1f:8a:9f:96:24:7c:ae:17:13:65:bf:
1f:ff:e1:6d:72:f7:29:ba:96:0a:2d:9f:d1:97:5c:16:b7:f9:
ec:22:7e:a1:f2:51:99:8d:fe:79:83:0e:67:74:90:8a:e8:d7:
b6:fa:bd:97:d1:42:f7:ce:fc:4e:c7:04:07:d3:d7:41:fe:cb:
9b:9c:bd:24:72:54:0c:92:04:a4:ec:bc:3a:85:da:62:5a:b2:
c8:72:4f:8a:03:3b:70:b0:e0:4d:41:e5:9e:85:e6:27:0b:72:
cf:74:d4:a2:6e:59:c9:2c:d3:f8:57:fa:58:98:d5:7e:07:5c:
82:42:d1:0f:72:f8:2c:bc:f2:7c:2c:0f:e7:0b:f8:9c:eb:45:
a4:18:4e:fc:b2:ae:f0:1c:93:a1:ec:d9:bc:34:59:f6:61:ee:
5e:f6:09:97:75:40:44:4d:95:d6:9d:e5:77:c5:8c:2b:8c:72:
58:4f:34:54:12:e8:ad:86:c8:07:76:de:cf:9f:64:7a:a4:45:
8c:8c:29:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4c68dUfceXCIpSWLv0Bco0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZmY1MTg5MWFkNDRjMTY2ZGVlYmExMzE1OTY2YzlhMWQ4
MzkwOTcwHhcNMjYwNTEyMTYwMTE0WhcNMjYwNTEzMTYwMTE0WjAzMTEwLwYDVQQD
Eyg1MGI1MTMwYWFjZDU0YTViM2UyMGZiZWNlZGNjNDk2ZTIxZGE4YzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJIw84K7WCK0wA/RbT0c4uMz6C3C
8XC8KRnux6vYWqsNPl7lbc9etJKxOvq0i5SYFNYemY6cAsKrTzvORs+Vd7wf2KXn
ckVFEotozGLfKTUAGwDE27T7+0I/JAVtVczIXCqWKXU4ktUmSaOXcawJI/3UWcnn
Fd2yzKNv1JCLumIW5gDVMDse0rQ7F3Zvde+vSvYMCTFp7oFe6v7KL7GptmY6y59v
s0wvpc6GR9l+GyZ+tHhKZT7s8vmHf4z1BLBSDL63zLtaLjyXEPPKKKW4d4vecLW9
QqaOs8ZPL8wn45czrFwiMkyZxIkex5FZPunQZmCpZm+30z9O+FjeFsCtkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFC1Ewqs1UpbPiD77O3MSW4h2oxNMB8GA1UdIwQY
MBaAFNT/UYka1EwWbe66ExWWbJodg5CXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQt
Y2E4MGJhZGQ3OWJmLzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xOTk1ZTAtZjQ1MC00OTU4LThhMmQtY2E4MGJhZGQ3OWJm
LzEvMVA5UmlSclVUQlp0N3JvVEZaWnNtaDJEa0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZa4v9inb
VTnzfwTBYT5widdaEDTgNSMTZ35S3WdqrSdNE3B7RiSPKtlhNn8UBo46SzvRteSB
ypjAEeKS6h+Kn5YkfK4XE2W/H//hbXL3KbqWCi2f0ZdcFrf57CJ+ofJRmY3+eYMO
Z3SQiujXtvq9l9FC9878TscEB9PXQf7Lm5y9JHJUDJIEpOy8OoXaYlqyyHJPigM7
cLDgTUHlnoXmJwtyz3TUom5ZySzT+Ff6WJjVfgdcgkLRD3L4LLzyfCwP5wv4nOtF
pBhO/LKu8ByToezZvDRZ9mHuXvYJl3VARE2V1p3ld8WMK4xyWE80VBLorYbIB3be
z59keqRFjIwpkw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:30:52 2026 by rpki-client