Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: B3456EQuT1xmvuB3dY8wlo3Kn8MrEDf3eipSeJnrERM=
Subject key identifier: 1B:5B:5C:97:94:AA:17:E3:DF:2E:AC:E9:14:68:E1:56:B3:27:A4:89
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 019E1BD8C1812CE29E4830CA712F8D51DEAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 06F5
Signing time: Tue 12 May 2026 11:00:50 +0000
Manifest this update: Tue 12 May 2026 11:00:50 +0000
Manifest next update: Wed 13 May 2026 11:00:50 +0000
Files and hashes: 1: 1-h29TFu81qQRwRTQtKfc7V6oGgw.roa (hash: j/GCQjpdQOAVMzUdmUHPipCJ4VSAK8zR3xsINI1wkiE=)
2: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: x2Plihx+gMTxEHHO94bu0GfqZEwsNvP/Kt17PvkCcfg=)
3: VA3axwwQBEAh3SAZjVNVTalZ9aI.roa (hash: YtFl8mLZl6C/LoW3ZfK8hDiYR/xZr0E23c6JNCbR4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:c1:81:2c:e2:9e:48:30:ca:71:2f:8d:51:de:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: May 12 11:00:50 2026 GMT
Not After : May 13 11:00:50 2026 GMT
Subject: CN=1b5b5c9794aa17e3df2eace91468e156b327a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:aa:70:c0:02:7f:f4:0e:45:25:47:50:c2:
f8:c8:1d:85:9b:ae:e1:82:37:19:e8:86:ae:a8:5e:
03:82:73:4d:8d:75:17:c8:c7:43:a7:a8:b8:7f:0a:
33:69:ed:8f:c0:a5:45:8a:be:7b:6f:ad:47:6c:d4:
f2:03:2d:24:3c:3b:75:62:43:ac:01:5b:e4:88:19:
62:4f:05:b9:32:3d:da:68:f4:60:de:ad:29:27:04:
90:d9:21:8e:da:92:61:19:ff:af:06:54:05:eb:95:
63:c0:70:8f:62:90:0a:ad:ff:31:01:1c:e0:68:ab:
1c:50:b5:21:9b:fb:25:9e:11:13:40:f5:03:31:c3:
c3:32:f4:ff:0e:43:bc:ae:4f:4e:f7:05:a7:56:ae:
33:84:0e:1e:0d:9c:52:23:2e:52:b1:06:33:eb:a4:
a0:41:8e:b9:d1:27:c9:70:01:0b:cb:81:5c:7d:f3:
e5:a9:05:e5:04:4d:23:94:9d:91:c8:44:fe:d0:7b:
ff:19:52:66:bb:ac:e8:33:98:22:13:ae:75:c0:b8:
17:48:aa:a0:66:f1:08:75:80:7c:e2:30:a1:fb:4c:
36:c8:45:f1:2c:8b:13:1e:87:cd:7a:82:84:9b:d7:
fa:b9:dc:a2:35:5a:d1:83:3a:a8:ad:4a:71:01:df:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:5C:97:94:AA:17:E3:DF:2E:AC:E9:14:68:E1:56:B3:27:A4:89
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:23:bf:b5:43:d9:14:54:d6:ad:fe:2a:fb:81:9e:bd:27:eb:
e7:c9:21:e1:1d:31:8c:9c:63:d6:f5:67:80:2e:bc:26:14:4d:
4a:a1:21:e7:8e:57:be:1c:35:e2:54:33:d5:6f:b5:76:c7:4a:
8e:b3:39:70:12:84:9d:7e:a2:e3:03:1a:15:ac:1e:1a:c3:2a:
91:f7:b5:9f:db:08:27:8b:e0:78:2b:e3:72:6e:39:e9:13:e7:
ac:4c:4d:3f:b0:06:ca:62:98:5e:19:f5:d9:bc:19:e0:0f:65:
6b:1f:9e:bc:4f:7e:e4:a8:67:15:46:fb:47:dd:71:00:a6:33:
fb:e7:d2:1a:3f:98:93:79:5b:ad:5c:47:2c:33:c0:9c:63:21:
38:04:98:bd:00:5a:c7:5a:e7:2b:e9:ce:1f:8f:fb:92:2a:dd:
91:7d:c5:eb:7b:23:87:32:e8:4d:eb:b3:47:c6:03:de:eb:89:
42:56:66:76:1b:54:62:81:72:94:69:86:d6:89:f6:ab:9d:76:
7d:2c:62:fa:8d:40:05:1e:6f:83:ed:7d:62:5f:60:8b:4a:25:
e3:64:58:dc:9f:ef:3a:86:df:1e:2d:61:98:ae:dc:23:6a:b5:
02:33:7f:80:af:23:84:92:db:19:6e:30:95:4c:24:fd:94:50:
0b:d8:23:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2MGBLOKeSDDKcS+NUd6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk
YTI1NmUwHhcNMjYwNTEyMTEwMDUwWhcNMjYwNTEzMTEwMDUwWjAzMTEwLwYDVQQD
EygxYjViNWM5Nzk0YWExN2UzZGYyZWFjZTkxNDY4ZTE1NmIzMjdhNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBGqcMACf/QORSVHUML4yB2Fm67h
gjcZ6IauqF4DgnNNjXUXyMdDp6i4fwozae2PwKVFir57b61HbNTyAy0kPDt1YkOs
AVvkiBliTwW5Mj3aaPRg3q0pJwSQ2SGO2pJhGf+vBlQF65VjwHCPYpAKrf8xARzg
aKscULUhm/slnhETQPUDMcPDMvT/DkO8rk9O9wWnVq4zhA4eDZxSIy5SsQYz66Sg
QY650SfJcAELy4FcffPlqQXlBE0jlJ2RyET+0Hv/GVJmu6zoM5giE651wLgXSKqg
ZvEIdYB84jCh+0w2yEXxLIsTHofNeoKEm9f6udyiNVrRgzqorUpxAd+QKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtbXJeUqhfj3y6s6RRo4VazJ6SJMB8GA1UdIwQY
MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt
ODUxZDljMDQ0ZTcwLzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw
LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyO/tUPZ
FFTWrf4q+4GevSfr58kh4R0xjJxj1vVngC68JhRNSqEh545Xvhw14lQz1W+1dsdK
jrM5cBKEnX6i4wMaFaweGsMqkfe1n9sIJ4vgeCvjcm456RPnrExNP7AGymKYXhn1
2bwZ4A9lax+evE9+5KhnFUb7R91xAKYz++fSGj+Yk3lbrVxHLDPAnGMhOASYvQBa
x1rnK+nOH4/7kirdkX3F63sjhzLoTeuzR8YD3uuJQlZmdhtUYoFylGmG1on2q512
fSxi+o1ABR5vg+19Yl9gi0ol42RY3J/vOobfHi1hmK7cI2q1AjN/gK8jhJLbGW4w
lUwk/ZRQC9gjYA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:16:58 2026 by rpki-client