Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
File: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft (raw, json)
Hash identifier: giBQSyr9MXucSxNv6tAKNuIXFg18FWc7xZJLb4dGobA=
Subject key identifier: A4:DB:57:3A:A5:29:CE:1C:29:05:9B:DE:A1:91:CE:34:29:AC:8E:6A
Authority key identifier: D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
Certificate issuer: /CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Certificate serial: 019E1EA2D37ABD990479C9E535CDA757BE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
Manifest number: 061E
Signing time: Wed 13 May 2026 00:00:47 +0000
Manifest this update: Wed 13 May 2026 00:00:47 +0000
Manifest next update: Thu 14 May 2026 00:00:47 +0000
Files and hashes: 1: 1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl (hash: WSK+53u+YOvCMIckz4HZ329KrD63neNasgKm6nhOuQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d3:7a:bd:99:04:79:c9:e5:35:cd:a7:57:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d42cc40267e3592e1b52f0f0096cb1f2f0af167d
Validity
Not Before: May 13 00:00:47 2026 GMT
Not After : May 14 00:00:47 2026 GMT
Subject: CN=a4db573aa529ce1c29059bdea191ce3429ac8e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:32:30:25:57:88:2c:37:14:45:95:82:ee:
42:12:3a:b7:ce:ba:a8:c0:78:7d:e5:b8:fe:70:3f:
2f:6c:b7:e8:5d:3b:34:3c:ac:bb:ad:76:ee:90:33:
21:f1:e2:59:cc:de:4a:10:5b:db:89:db:a3:52:89:
a5:41:63:70:39:01:24:55:e5:3c:c2:fb:ac:2c:19:
ce:86:97:a3:12:7b:8d:1d:cf:72:07:e3:be:e7:57:
0a:f4:9c:fd:67:bf:1c:88:32:b3:8d:9d:9f:9a:a4:
44:c9:5f:0f:dd:30:af:04:cf:43:cd:c9:fa:87:0e:
21:9f:d9:62:84:8a:d1:39:68:3a:c8:8d:db:cd:3f:
ac:8d:16:15:50:97:94:0e:86:5d:c5:eb:a1:03:3b:
fb:61:8d:fc:ee:e4:f3:18:4d:4d:75:42:42:2f:5e:
a5:b0:16:3d:4f:46:cc:6c:20:44:c6:e3:b8:43:d4:
d8:df:8d:c3:e9:f1:0c:ee:23:ee:b7:5b:1b:6c:14:
5e:eb:77:77:a8:be:94:e2:7e:38:b4:3c:7c:b3:1e:
fc:2d:e4:f1:85:b5:47:e0:d3:26:f9:da:45:12:7e:
12:11:1b:24:77:77:c7:68:5f:42:f2:c0:6e:3c:1c:
56:83:08:1f:1d:d8:f4:d5:9c:fb:65:c1:d0:5e:4e:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DB:57:3A:A5:29:CE:1C:29:05:9B:DE:A1:91:CE:34:29:AC:8E:6A
X509v3 Authority Key Identifier:
keyid:D4:2C:C4:02:67:E3:59:2E:1B:52:F0:F0:09:6C:B1:F2:F0:AF:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CzEAmfjWS4bUvDwCWyx8vCvFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/71345d-2f2d-4b59-9e67-16e1308737b0/1/1CzEAmfjWS4bUvDwCWyx8vCvFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:68:06:4a:e9:3b:8c:ee:2e:dc:a0:16:a5:a0:46:0a:81:2c:
c3:34:73:13:b4:a6:6e:9b:db:17:bf:6e:49:37:74:b8:c7:b2:
a6:62:6d:6c:b8:15:c6:bd:4d:89:37:1c:6f:4d:dd:15:24:19:
d1:4a:f0:f5:bc:1b:c3:aa:d4:b0:3a:4e:57:68:0e:19:01:de:
f6:af:af:26:08:e1:5a:bd:b4:9a:2f:f8:7e:c1:82:3b:8e:e9:
16:09:87:3d:fe:10:d5:f5:4c:28:cf:1a:94:6a:c1:0b:87:a3:
ba:08:9f:62:ae:d6:d4:33:cd:8f:fc:90:1d:f6:b0:cf:32:38:
6a:ed:0a:95:aa:7a:5b:43:71:6e:59:57:0d:db:91:93:eb:08:
8b:d7:2a:bc:cc:81:84:e5:c7:31:b9:5c:b8:36:3f:d0:cf:b4:
e5:3f:ae:96:97:37:ee:c9:99:0e:cd:6b:3e:54:8d:84:08:08:
3f:7e:13:cb:b2:8f:b1:ac:58:ec:cf:a8:b4:79:96:b2:e7:fe:
f8:d3:8e:45:a2:5b:50:cb:6b:46:f5:85:7b:34:77:a0:ce:dc:
e9:9f:fe:d6:c2:bb:d4:d7:8f:74:46:63:2c:fa:29:e9:47:09:
5a:6c:32:80:99:8c:02:22:a1:aa:a0:83:0d:e9:4c:f7:7b:8f:
c0:79:d3:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eotN6vZkEecnlNc2nV75oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MmNjNDAyNjdlMzU5MmUxYjUyZjBmMDA5NmNiMWYyZjBh
ZjE2N2QwHhcNMjYwNTEzMDAwMDQ3WhcNMjYwNTE0MDAwMDQ3WjAzMTEwLwYDVQQD
EyhhNGRiNTczYWE1MjljZTFjMjkwNTliZGVhMTkxY2UzNDI5YWM4ZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmwyMCVXiCw3FEWVgu5CEjq3zrqo
wHh95bj+cD8vbLfoXTs0PKy7rXbukDMh8eJZzN5KEFvbidujUomlQWNwOQEkVeU8
wvusLBnOhpejEnuNHc9yB+O+51cK9Jz9Z78ciDKzjZ2fmqREyV8P3TCvBM9Dzcn6
hw4hn9lihIrROWg6yI3bzT+sjRYVUJeUDoZdxeuhAzv7YY387uTzGE1NdUJCL16l
sBY9T0bMbCBExuO4Q9TY343D6fEM7iPut1sbbBRe63d3qL6U4n44tDx8sx78LeTx
hbVH4NMm+dpFEn4SERskd3fHaF9C8sBuPBxWgwgfHdj01Zz7ZcHQXk4scQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTbVzqlKc4cKQWb3qGRzjQprI5qMB8GA1UdIwQY
MBaAFNQsxAJn41kuG1Lw8AlssfLwrxZ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjct
MTZlMTMwODczN2IwLzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83MTM0NWQtMmYyZC00YjU5LTllNjctMTZlMTMwODczN2Iw
LzEvMUN6RUFtZmpXUzRiVXZEd0NXeXg4dkN2Rm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGgGSuk7
jO4u3KAWpaBGCoEswzRzE7SmbpvbF79uSTd0uMeypmJtbLgVxr1NiTccb03dFSQZ
0Urw9bwbw6rUsDpOV2gOGQHe9q+vJgjhWr20mi/4fsGCO47pFgmHPf4Q1fVMKM8a
lGrBC4ejugifYq7W1DPNj/yQHfawzzI4au0Klap6W0NxbllXDduRk+sIi9cqvMyB
hOXHMblcuDY/0M+05T+ulpc37smZDs1rPlSNhAgIP34Ty7KPsaxY7M+otHmWsuf+
+NOORaJbUMtrRvWFezR3oM7c6Z/+1sK71NePdEZjLPop6UcJWmwygJmMAiKhqqCD
DelM93uPwHnTxQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:56:17 2026 by rpki-client