Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: Nmv7ZSuDcMufmBiTYDtaORdQ3CHeF/t8fm0Qw+vXZW8=
Subject key identifier: 1E:51:AD:34:91:04:96:C2:E9:35:6B:26:F0:A9:4E:F2:F2:2A:85:76
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019E1C0FCD25A48E50563032A8E03BAE7AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 02D6
Signing time: Tue 12 May 2026 12:00:57 +0000
Manifest this update: Tue 12 May 2026 12:00:57 +0000
Manifest next update: Wed 13 May 2026 12:00:57 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: VgX+5eMvyEY3kkW6jMIhQpVAntGJYllkOcLOzIfqn54=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:cd:25:a4:8e:50:56:30:32:a8:e0:3b:ae:7a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: May 12 12:00:57 2026 GMT
Not After : May 13 12:00:57 2026 GMT
Subject: CN=1e51ad34910496c2e9356b26f0a94ef2f22a8576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:22:96:65:bc:36:66:02:de:ed:0c:4f:db:8b:
a5:c7:dd:c9:70:4b:a8:6c:ea:a9:7d:b4:ab:af:8e:
f4:03:8a:20:d8:28:85:67:91:07:5e:1c:fb:54:13:
16:20:ec:b1:97:a2:47:0a:24:f6:6f:94:9d:8e:8d:
a9:01:1f:50:4d:8e:19:36:d5:09:bb:3d:c9:e7:70:
fb:62:ef:12:86:d9:d2:e8:1f:5b:9e:de:4e:05:80:
ac:4e:18:fd:9c:d3:02:f8:97:55:76:ab:aa:a2:51:
4b:09:c1:53:60:fa:aa:8b:85:64:75:a7:1d:ef:06:
07:ee:69:dd:2f:21:fc:1b:eb:ea:d8:06:10:3b:a7:
3b:78:27:5f:b6:7d:ff:39:fd:43:d9:18:56:6e:e0:
0f:70:42:5c:24:69:91:e3:3d:3e:60:84:f0:ef:b4:
2a:6b:15:06:45:97:5f:a6:a3:1c:d4:3b:3b:23:50:
bb:bc:db:94:24:c9:1d:1e:f0:a8:b0:21:e8:31:9a:
d0:e3:08:16:41:36:1a:2b:5c:dd:83:60:61:35:8c:
46:c4:34:73:66:7c:aa:d2:59:08:54:d5:cb:bf:20:
21:96:b0:07:76:fa:0e:5d:48:66:22:72:d0:e1:66:
8e:43:1b:4a:9e:f9:d8:dd:75:d6:48:fc:39:ee:c3:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:51:AD:34:91:04:96:C2:E9:35:6B:26:F0:A9:4E:F2:F2:2A:85:76
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:86:20:d4:18:40:5a:58:28:81:98:8a:8f:3a:1b:ae:b1:36:
1a:98:3b:80:4b:1b:dd:a0:1d:81:f6:eb:b9:48:56:f0:ee:d9:
32:a8:a8:1c:e6:18:c4:b9:ad:df:6d:bb:fa:71:5a:0a:5b:6e:
c1:32:aa:fc:9a:81:18:d4:75:2f:b1:16:5f:2e:32:2b:2d:e2:
8b:e7:7e:55:f4:95:79:44:e6:14:59:68:17:09:48:5b:ab:48:
d9:05:3c:a5:82:7a:61:20:10:ea:1d:be:a2:41:44:f2:7d:92:
03:20:2b:6a:af:40:11:5c:c1:c0:77:5b:32:ce:5a:38:b6:61:
87:2a:df:1a:4e:7b:c1:1b:06:f1:4b:f7:73:82:c7:26:46:33:
0f:dd:a8:90:33:6e:1c:ba:c3:6f:36:ac:4f:83:47:49:e7:d2:
55:c4:33:42:f5:5e:14:7d:85:74:83:74:a1:a2:50:17:5f:36:
34:3c:9d:94:40:9f:16:ed:9d:01:83:ad:24:78:d7:0e:7d:71:
7d:3a:60:29:7c:28:2a:6f:28:2d:88:40:1f:04:d4:29:b0:af:
fc:19:25:4c:44:04:fc:bc:0b:ba:fd:c2:94:4a:26:80:12:2a:
ee:f1:bd:d8:dd:d1:b8:3f:43:00:8f:ae:73:6b:71:9d:90:64:
90:c8:a5:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cD80lpI5QVjAyqOA7rnrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTU0OWY1NzViMDQ3YmNiZGMzM2U3ZDJkMzZlZGE4NDcx
ZmRlY2EwHhcNMjYwNTEyMTIwMDU3WhcNMjYwNTEzMTIwMDU3WjAzMTEwLwYDVQQD
EygxZTUxYWQzNDkxMDQ5NmMyZTkzNTZiMjZmMGE5NGVmMmYyMmE4NTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SKWZbw2ZgLe7QxP24ulx93JcEuo
bOqpfbSrr470A4og2CiFZ5EHXhz7VBMWIOyxl6JHCiT2b5Sdjo2pAR9QTY4ZNtUJ
uz3J53D7Yu8ShtnS6B9bnt5OBYCsThj9nNMC+JdVdquqolFLCcFTYPqqi4Vkdacd
7wYH7mndLyH8G+vq2AYQO6c7eCdftn3/Of1D2RhWbuAPcEJcJGmR4z0+YITw77Qq
axUGRZdfpqMc1Ds7I1C7vNuUJMkdHvCosCHoMZrQ4wgWQTYaK1zdg2BhNYxGxDRz
Znyq0lkIVNXLvyAhlrAHdvoOXUhmInLQ4WaOQxtKnvnY3XXWSPw57sPW2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5RrTSRBJbC6TVrJvCpTvLyKoV2MB8GA1UdIwQY
MBaAFNYVSfV1sEe8vcM+fS027ahHH97KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMt
NWZkMDk4ZjM0NTlkLzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMtNWZkMDk4ZjM0NTlk
LzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYYg1BhA
WlgogZiKjzobrrE2Gpg7gEsb3aAdgfbruUhW8O7ZMqioHOYYxLmt3227+nFaCltu
wTKq/JqBGNR1L7EWXy4yKy3ii+d+VfSVeUTmFFloFwlIW6tI2QU8pYJ6YSAQ6h2+
okFE8n2SAyAraq9AEVzBwHdbMs5aOLZhhyrfGk57wRsG8Uv3c4LHJkYzD92okDNu
HLrDbzasT4NHSefSVcQzQvVeFH2FdIN0oaJQF182NDydlECfFu2dAYOtJHjXDn1x
fTpgKXwoKm8oLYhAHwTUKbCv/BklTEQE/LwLuv3ClEomgBIq7vG92N3RuD9DAI+u
c2txnZBkkMilLg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:14:41 2026 by rpki-client