Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: EiZzSEnKGaPnXhIsiQm0Z6wZIwe5Dh8BFp/1kL4Z2GI=
Subject key identifier: CB:55:BD:9E:CE:04:89:6D:0C:B2:0E:FC:E6:DE:D6:76:E2:97:C4:FA
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019E2248B06E1AABCD5DD05442B225EF223B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 0849
Signing time: Wed 13 May 2026 17:00:49 +0000
Manifest this update: Wed 13 May 2026 17:00:49 +0000
Manifest next update: Thu 14 May 2026 17:00:49 +0000
Files and hashes: 1: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: ZP17fNqiQ0OxBrrUHKeSNfJCK6s0wAlZDqVJp/9wuwQ=)
2: Y3xy27kzFffMPewtUpDREyfJrvY.roa (hash: tx10cTi8DLhzNW2hd7QG0hYENx9jGu/u+XgKab2XuPA=)
3: ZAUQOx8ZIoF_38vOnWSRuk7mSCM.roa (hash: xFSZDnEjwVDIcL0zURA7Oo3gZI5+yugqjcFTXmh2x0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 14:48:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:48:b0:6e:1a:ab:cd:5d:d0:54:42:b2:25:ef:22:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: May 13 17:00:49 2026 GMT
Not After : May 14 17:00:49 2026 GMT
Subject: CN=cb55bd9ece04896d0cb20efce6ded676e297c4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:32:f5:5d:76:d9:5e:e0:4b:92:07:14:79:47:
57:50:d7:3b:c0:a2:ce:37:8e:4e:0a:d1:dc:c1:2f:
e9:d6:d5:3f:c6:72:43:f2:7c:c4:c5:3c:07:2b:bb:
ac:34:0b:57:1d:c8:f3:81:72:30:d2:6b:ed:5c:1d:
d2:9a:dd:e6:50:e6:7b:c1:ca:93:c1:c4:69:9a:e0:
d6:4b:cf:32:6c:f6:f9:c7:2f:4b:4d:b5:ff:53:61:
00:48:ab:47:15:e2:c8:65:52:e1:1b:51:35:48:17:
c5:d2:81:ed:70:06:6e:fb:73:b5:23:e3:6c:df:e7:
6d:04:db:1c:11:c5:f3:85:11:62:78:79:ec:71:97:
2f:46:57:fe:4e:8a:c9:62:a4:6f:5f:04:b1:c7:42:
af:fc:07:74:78:bc:19:8b:3c:91:ae:74:19:30:ee:
72:f0:06:85:99:08:da:2d:5e:cf:72:c0:b7:94:44:
0f:51:87:a8:3d:35:26:54:ea:2f:b3:9b:2c:68:18:
f9:00:df:25:61:94:f7:a3:43:69:6a:b0:93:db:b1:
f0:72:29:53:70:0a:b6:94:89:99:d0:00:c0:e4:5e:
a9:74:be:73:7a:09:ba:0d:cc:0b:25:c2:1b:6a:fd:
93:4d:fd:f4:96:e9:fb:ea:29:d9:34:be:fc:66:64:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:55:BD:9E:CE:04:89:6D:0C:B2:0E:FC:E6:DE:D6:76:E2:97:C4:FA
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:72:66:51:03:86:b4:8b:2b:11:93:83:01:40:ba:71:f8:79:
11:64:86:7e:68:61:fe:23:a8:da:a0:11:b2:73:5c:59:d0:c1:
5b:0e:f4:82:36:5f:b8:1c:70:36:4c:63:c6:21:32:71:22:be:
76:01:c5:bf:fa:68:dc:3a:7a:93:74:00:b3:45:0a:9f:9c:97:
23:2d:ba:17:07:90:bd:aa:be:72:45:5e:f6:ac:c6:45:56:0c:
7b:00:1c:c4:0a:9e:ca:f7:bd:f8:bd:6c:9e:ea:23:b1:55:a1:
02:8d:a8:e2:49:fe:a7:23:95:18:60:97:33:ba:2d:74:bc:91:
9b:cd:ce:09:ba:95:76:c5:8f:26:40:e6:77:fe:00:1c:fb:2f:
b0:a7:3e:05:23:63:96:64:bc:69:60:45:89:2d:07:22:7a:96:
ab:45:2b:36:18:54:af:78:4f:00:e4:0b:96:91:90:f9:08:25:
1c:4e:a0:4e:2b:22:fd:39:e9:1f:31:9d:4b:91:ee:19:2b:8c:
8f:07:2a:f4:92:e1:67:21:3e:8e:3d:71:a7:c1:86:af:1b:db:
7c:37:9d:9c:af:9b:27:f1:02:26:2f:cc:da:fd:bd:5d:c7:e3:
9a:fa:63:10:15:26:f2:71:59:af:71:ef:47:ad:0b:06:aa:80:
66:9b:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:57:50 2026 by rpki-client