Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: 2E9SM5RuHEAM/1U1v+0FP1KwfeEjGfgb0voYkYiTFp8=
Subject key identifier: 8C:5B:FB:53:0C:64:43:57:6A:E8:98:2D:FE:23:E7:20:77:72:75:2D
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019E1E6C8BA8D02D774ABE7C59AA2D6C4D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 16D5
Signing time: Tue 12 May 2026 23:01:30 +0000
Manifest this update: Tue 12 May 2026 23:01:30 +0000
Manifest next update: Wed 13 May 2026 23:01:30 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: qyK+ImLo0yhAAyiulXHFryhAhifA9YPqscQAAyZ5kk8=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:8b:a8:d0:2d:77:4a:be:7c:59:aa:2d:6c:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: May 12 23:01:30 2026 GMT
Not After : May 13 23:01:30 2026 GMT
Subject: CN=8c5bfb530c6443576ae8982dfe23e7207772752d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:68:37:90:c5:4e:dd:d4:a8:9b:16:f6:aa:
37:f6:20:7a:fc:7d:1b:e8:7a:0e:17:55:55:13:ba:
cb:9a:1d:6c:5d:c2:45:0e:21:2e:15:e7:3c:e6:5e:
67:1b:72:4a:2f:ff:6e:dd:12:bb:f1:39:d4:6b:a1:
22:73:03:4f:df:55:47:2f:34:25:12:35:d6:24:b0:
c9:9d:36:17:1c:aa:7a:69:bc:e3:54:40:dc:3b:93:
30:26:dc:f2:d6:da:72:2a:70:a6:b8:1f:ec:98:86:
3e:83:5d:cd:82:2a:50:2d:cb:ae:e6:be:d0:ac:21:
67:4b:25:eb:f1:bd:90:4a:42:3e:39:fb:5f:43:9d:
4c:ab:8f:2b:74:7d:6d:3e:f1:3d:47:5c:b7:28:b1:
c7:7c:5d:59:fe:34:f4:ad:8f:e7:5b:20:8d:34:9e:
74:f4:45:cb:85:b2:4c:2a:9d:9a:eb:3a:66:61:10:
d3:95:fb:c6:5c:ad:e3:9b:ef:fe:12:82:5d:69:8a:
db:1f:61:6b:62:fc:19:4c:d9:65:dd:19:be:3c:bf:
55:17:29:67:4a:a7:3b:50:06:83:45:a9:e9:fb:46:
51:e4:ff:73:b2:9c:64:e3:72:b0:dc:43:ce:61:61:
f4:07:10:59:51:d2:e6:70:77:0c:1d:ff:c7:46:9c:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5B:FB:53:0C:64:43:57:6A:E8:98:2D:FE:23:E7:20:77:72:75:2D
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9a:dc:79:06:08:4c:1f:43:c0:a4:cd:67:1e:45:19:81:6a:
a0:e0:fc:b6:c0:ec:6a:43:13:a9:78:15:b0:4c:4c:8a:31:03:
8c:c5:a1:4a:e5:2f:f3:15:69:70:ab:7e:73:41:e7:5f:84:c0:
b4:7c:c6:11:1b:a1:1b:47:0a:76:23:b9:1a:eb:02:c2:f3:1b:
af:9a:bc:45:af:c5:50:03:b6:3c:2b:84:f1:0a:2c:2d:ad:2b:
ea:de:21:34:e1:ac:41:d2:0b:e4:f1:bc:a1:37:2f:3e:64:5d:
c2:ac:e1:d9:39:13:ff:57:3f:55:a1:31:b4:1b:d6:9b:7e:d5:
14:c1:b2:b5:c7:8d:fd:d2:01:ec:e9:54:9b:a1:fd:02:e4:3a:
a3:df:76:cf:c8:81:ea:89:92:00:68:6d:f8:2d:e8:cb:ed:6a:
1f:a5:fc:fa:cb:2e:8a:25:1e:f1:fb:15:2e:3d:2b:37:d3:66:
7f:cb:f0:4a:78:46:42:9c:69:a4:ac:4e:d9:3a:fd:62:81:82:
64:d9:d0:25:76:52:cd:f5:f1:b2:ed:de:bf:7a:94:bc:e0:b2:
e0:cf:40:54:43:80:75:cf:e4:17:c3:a5:20:fe:5a:07:7d:91:
f0:fc:df:0f:87:c2:dc:bb:3a:45:8b:3a:d4:88:8d:1c:95:3b:
f3:27:c4:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ebIuo0C13Sr58WaotbE12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1N2M3ZGIwNGU3OGMyMjFmM2RmMmEyYWYwODJiNTE4ZDk2
MmE4ZjAwHhcNMjYwNTEyMjMwMTMwWhcNMjYwNTEzMjMwMTMwWjAzMTEwLwYDVQQD
Eyg4YzViZmI1MzBjNjQ0MzU3NmFlODk4MmRmZTIzZTcyMDc3NzI3NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW5oN5DFTt3UqJsW9qo39iB6/H0b
6HoOF1VVE7rLmh1sXcJFDiEuFec85l5nG3JKL/9u3RK78TnUa6EicwNP31VHLzQl
EjXWJLDJnTYXHKp6abzjVEDcO5MwJtzy1tpyKnCmuB/smIY+g13NgipQLcuu5r7Q
rCFnSyXr8b2QSkI+OftfQ51Mq48rdH1tPvE9R1y3KLHHfF1Z/jT0rY/nWyCNNJ50
9EXLhbJMKp2a6zpmYRDTlfvGXK3jm+/+EoJdaYrbH2FrYvwZTNll3Rm+PL9VFyln
Sqc7UAaDRanp+0ZR5P9zspxk43Kw3EPOYWH0BxBZUdLmcHcMHf/HRpxvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxb+1MMZENXauiYLf4j5yB3cnUtMB8GA1UdIwQY
MBaAFNV8fbBOeMIh898qKvCCtRjZYqjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgt
ZmU5NWE5YWYzYWRjLzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgtZmU5NWE5YWYzYWRj
LzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABprceQYI
TB9DwKTNZx5FGYFqoOD8tsDsakMTqXgVsExMijEDjMWhSuUv8xVpcKt+c0HnX4TA
tHzGERuhG0cKdiO5GusCwvMbr5q8Ra/FUAO2PCuE8QosLa0r6t4hNOGsQdIL5PG8
oTcvPmRdwqzh2TkT/1c/VaExtBvWm37VFMGytceN/dIB7OlUm6H9AuQ6o992z8iB
6omSAGht+C3oy+1qH6X8+ssuiiUe8fsVLj0rN9Nmf8vwSnhGQpxppKxO2Tr9YoGC
ZNnQJXZSzfXxsu3ev3qUvOCy4M9AVEOAdc/kF8OlIP5aB32R8PzfD4fC3Ls6RYs6
1IiNHJU78yfEzw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:26:21 2026 by rpki-client