Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
File: 1nXJVO45yR5SX2izBxygV41qW64.mft (raw, json)
Hash identifier: v0wDYAfpD6DYWqaPKfyhQIFcZWTsjEi4ymADWoUUO28=
Subject key identifier: 54:00:31:BD:94:91:C3:EF:61:AC:A1:61:6E:47:09:2E:AB:81:2A:E1
Authority key identifier: D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
Certificate issuer: /CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Certificate serial: 019E1C1004DBC823623CC102E054DED4A7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
Manifest number: 1901
Signing time: Tue 12 May 2026 12:01:12 +0000
Manifest this update: Tue 12 May 2026 12:01:12 +0000
Manifest next update: Wed 13 May 2026 12:01:12 +0000
Files and hashes: 1: 1nXJVO45yR5SX2izBxygV41qW64.crl (hash: 3i/2NC1atnE4rluHwwSsm+ulcDbLryI2klnWCg8pkn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:04:db:c8:23:62:3c:c1:02:e0:54:de:d4:a7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d675c954ee39c91e525f68b3071ca0578d6a5bae
Validity
Not Before: May 12 12:01:12 2026 GMT
Not After : May 13 12:01:12 2026 GMT
Subject: CN=540031bd9491c3ef61aca1616e47092eab812ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:7d:a1:63:12:8e:72:be:04:8a:7f:84:8e:
e6:96:ae:e6:af:22:df:e7:bc:2a:6b:e5:5c:ac:5c:
1e:16:47:50:79:3f:cd:ce:83:cd:12:63:01:d6:d6:
10:9f:be:a0:fb:e0:15:a0:9d:2d:0a:65:5a:f8:24:
92:fe:b4:b5:d4:b7:65:0d:44:7b:be:0b:20:b8:98:
f9:99:97:01:1a:9e:43:13:e4:4a:77:54:3b:a9:52:
43:8f:88:01:6e:53:f1:b8:9a:c8:8f:62:06:4e:41:
f5:fa:3a:5d:b8:ca:5d:c9:c7:d4:c9:0d:d1:7c:df:
c3:75:2d:c7:35:9d:fd:46:51:ec:eb:2c:c1:4e:2d:
cc:4c:21:9f:9b:96:1c:3c:cc:f8:fd:4b:b3:e5:c1:
74:8e:c8:34:53:87:31:6c:99:38:32:d1:80:8a:e1:
90:ab:26:fd:67:36:7a:d2:83:fe:c1:0f:4c:63:1e:
a9:bd:7a:80:c5:3f:76:08:ce:3b:05:67:81:df:65:
26:18:7a:93:34:fe:aa:4f:7d:e8:40:7d:a6:cb:dd:
fa:87:09:aa:ac:ad:89:d6:e6:19:d7:da:0c:e8:e1:
b5:21:09:fd:a2:17:6b:f7:a7:60:bd:0b:83:91:e2:
f0:bf:45:23:21:4f:d1:61:1b:ac:45:26:33:dd:e4:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:00:31:BD:94:91:C3:EF:61:AC:A1:61:6E:47:09:2E:AB:81:2A:E1
X509v3 Authority Key Identifier:
keyid:D6:75:C9:54:EE:39:C9:1E:52:5F:68:B3:07:1C:A0:57:8D:6A:5B:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nXJVO45yR5SX2izBxygV41qW64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/43c34b-e8d0-45a2-940e-5717cf52c79a/1/1nXJVO45yR5SX2izBxygV41qW64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1b:f0:cb:53:7c:6c:82:91:e4:a1:0c:9a:80:16:ff:82:df:
e5:24:de:e7:c9:05:98:9b:67:0c:6a:d3:06:25:48:bd:15:51:
19:e0:79:54:3a:6c:43:d7:72:79:4e:95:67:c3:a2:df:ec:2e:
f1:01:ac:0b:26:7c:10:59:84:1b:af:e0:6a:5f:58:2d:27:90:
de:1c:db:31:bb:ea:34:81:24:ab:3e:8a:f1:58:2a:1b:af:1e:
a8:16:ef:3b:8e:eb:b4:a4:31:f6:46:a1:66:e2:9a:aa:36:20:
ff:bb:5d:52:9d:fd:3a:f2:4a:a1:c8:f1:1f:80:66:ea:e4:ac:
8b:1a:4b:36:80:11:41:13:51:44:f0:7b:06:7e:81:6a:ed:c9:
ec:0e:ba:55:66:d1:8b:a1:1d:98:10:e6:b5:7f:1a:04:43:80:
05:1a:a0:2a:27:d0:ba:64:24:80:dc:38:97:4a:ea:a4:0b:3c:
d7:06:04:dc:db:23:f9:d1:cc:fb:52:c2:18:5a:7e:6a:22:0b:
43:7f:c5:09:7d:07:3e:c8:51:60:ef:f6:16:b3:ed:9f:b0:28:
8a:28:9b:74:00:0b:8b:e3:db:99:5f:2d:da:43:9a:95:0b:04:
f4:10:b8:c6:d2:83:5d:31:5f:bf:58:a2:5c:e0:56:f9:eb:3c:
d7:23:67:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cEATbyCNiPMEC4FTe1Ke6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NzVjOTU0ZWUzOWM5MWU1MjVmNjhiMzA3MWNhMDU3OGQ2
YTViYWUwHhcNMjYwNTEyMTIwMTEyWhcNMjYwNTEzMTIwMTEyWjAzMTEwLwYDVQQD
Eyg1NDAwMzFiZDk0OTFjM2VmNjFhY2ExNjE2ZTQ3MDkyZWFiODEyYWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEF9oWMSjnK+BIp/hI7mlq7mryLf
57wqa+VcrFweFkdQeT/NzoPNEmMB1tYQn76g++AVoJ0tCmVa+CSS/rS11LdlDUR7
vgsguJj5mZcBGp5DE+RKd1Q7qVJDj4gBblPxuJrIj2IGTkH1+jpduMpdycfUyQ3R
fN/DdS3HNZ39RlHs6yzBTi3MTCGfm5YcPMz4/Uuz5cF0jsg0U4cxbJk4MtGAiuGQ
qyb9ZzZ60oP+wQ9MYx6pvXqAxT92CM47BWeB32UmGHqTNP6qT33oQH2my936hwmq
rK2J1uYZ19oM6OG1IQn9ohdr96dgvQuDkeLwv0UjIU/RYRusRSYz3eRRtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQAMb2UkcPvYayhYW5HCS6rgSrhMB8GA1UdIwQY
MBaAFNZ1yVTuOckeUl9oswccoFeNaluuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUt
NTcxN2NmNTJjNzlhLzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC80M2MzNGItZThkMC00NWEyLTk0MGUtNTcxN2NmNTJjNzlh
LzEvMW5YSlZPNDV5UjVTWDJpekJ4eWdWNDFxVzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjBvwy1N8
bIKR5KEMmoAW/4Lf5STe58kFmJtnDGrTBiVIvRVRGeB5VDpsQ9dyeU6VZ8Oi3+wu
8QGsCyZ8EFmEG6/gal9YLSeQ3hzbMbvqNIEkqz6K8VgqG68eqBbvO47rtKQx9kah
ZuKaqjYg/7tdUp39OvJKocjxH4Bm6uSsixpLNoARQRNRRPB7Bn6Bau3J7A66VWbR
i6EdmBDmtX8aBEOABRqgKifQumQkgNw4l0rqpAs81wYE3Nsj+dHM+1LCGFp+aiIL
Q3/FCX0HPshRYO/2FrPtn7AoiiibdAALi+PbmV8t2kOalQsE9BC4xtKDXTFfv1ii
XOBW+es81yNnLw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:31:25 2026 by rpki-client