Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: fUn0dUIJdkyBqmLSC8aggJdxGWgDYdK9gkAWaL8x6y4=
Subject key identifier: D5:CB:27:E1:CA:AC:E1:EA:D7:48:22:AB:0F:8A:A7:4C:21:A8:19:0B
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019E20235C5C1D667928FBE4A4A792201A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0E37
Signing time: Wed 13 May 2026 07:00:48 +0000
Manifest this update: Wed 13 May 2026 07:00:48 +0000
Manifest next update: Thu 14 May 2026 07:00:48 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: ZQkA8Xl8XbkGEDnNFT8yWd6SE4ZQJTutS584Pfo071Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:5c:5c:1d:66:79:28:fb:e4:a4:a7:92:20:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: May 13 07:00:48 2026 GMT
Not After : May 14 07:00:48 2026 GMT
Subject: CN=d5cb27e1caace1ead74822ab0f8aa74c21a8190b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:67:e6:cf:f8:14:dc:ea:e2:0f:5c:5c:2c:
00:67:41:04:91:25:eb:67:54:a2:fd:e1:66:a3:db:
9a:4e:be:6d:ae:d3:b5:07:3a:90:03:72:53:d1:48:
83:64:0e:87:d1:66:84:bf:57:b5:99:99:b4:1a:9f:
df:62:03:20:e0:c0:8c:87:4d:d8:a2:4d:25:b8:fa:
f3:b5:ff:45:76:8e:19:0d:6c:4b:6a:8a:3f:ac:7e:
0e:9b:01:59:4c:4a:6c:0c:8d:0b:48:6d:42:e5:09:
76:66:1a:39:52:72:bb:31:62:62:a3:e7:eb:f1:c0:
05:09:da:2e:d1:37:8c:ae:3e:3c:c0:95:2c:46:b5:
61:cb:6b:49:30:ca:c7:8f:e8:74:27:24:dd:f5:de:
2b:14:07:7b:12:ea:86:e0:f5:25:6e:69:48:90:77:
a9:5b:be:74:c8:e8:99:95:c3:9e:3f:7a:6e:93:a2:
8a:a8:01:eb:b9:86:ec:1f:d8:cc:73:30:27:74:6c:
d3:12:e0:17:82:7f:c0:dc:1d:19:5c:81:b4:f8:49:
4d:62:8e:c6:3a:ce:e1:17:99:1b:3c:b3:c0:81:71:
c6:ec:46:c8:94:01:38:db:32:e8:22:f0:76:e5:4c:
3b:cd:41:a7:ef:4d:66:9b:2c:71:26:98:76:52:f1:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CB:27:E1:CA:AC:E1:EA:D7:48:22:AB:0F:8A:A7:4C:21:A8:19:0B
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a2:15:15:03:1b:a6:04:38:81:bd:c1:8b:2b:f8:0c:1e:1a:
b9:fd:88:5e:b9:79:90:7e:27:f7:95:f4:6b:72:b6:17:cc:0d:
e1:3c:f0:29:12:89:f8:36:d4:45:a1:fd:d0:48:5d:3a:87:5b:
94:69:a7:f1:cc:bb:95:f0:5e:b0:a9:1c:98:54:38:a6:e6:2a:
cc:01:09:11:f3:3a:be:96:26:34:05:70:54:70:90:a4:1a:eb:
75:64:81:00:c1:24:c4:e0:3a:5a:56:bd:19:6e:b9:ab:b2:53:
34:c8:6b:1a:c6:6a:b6:de:14:1b:30:7f:55:fa:71:cf:e2:f5:
41:16:30:33:d1:fe:77:6a:ff:23:b1:4a:17:ab:f8:72:ee:77:
a3:a4:ba:03:15:d5:38:af:6d:e6:0e:2c:2d:2c:68:0a:84:26:
ab:3d:bc:6a:96:91:ba:b3:9b:7d:e3:c6:1f:6a:e1:ce:06:ab:
c3:0a:12:4b:90:63:29:c1:59:2e:6e:b8:37:23:ee:61:80:79:
72:f1:eb:fa:2c:63:8a:5b:39:e2:9f:95:1a:e0:97:26:60:56:
63:fe:4e:bb:8c:53:ad:86:56:cc:6e:fc:7a:d6:de:b1:67:b2:
e3:e6:39:53:e2:4c:99:d3:b3:13:a3:3c:9d:5c:09:f7:81:87:
4b:e3:e7:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gI1xcHWZ5KPvkpKeSIBogMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTg3YTBhYmIzZWVlNDExMDMzOGI3ZDhmM2Y3ZTdlMTI1
YmU2YzQwHhcNMjYwNTEzMDcwMDQ4WhcNMjYwNTE0MDcwMDQ4WjAzMTEwLwYDVQQD
EyhkNWNiMjdlMWNhYWNlMWVhZDc0ODIyYWIwZjhhYTc0YzIxYTgxOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZBn5s/4FNzq4g9cXCwAZ0EEkSXr
Z1Si/eFmo9uaTr5trtO1BzqQA3JT0UiDZA6H0WaEv1e1mZm0Gp/fYgMg4MCMh03Y
ok0luPrztf9Fdo4ZDWxLaoo/rH4OmwFZTEpsDI0LSG1C5Ql2Zho5UnK7MWJio+fr
8cAFCdou0TeMrj48wJUsRrVhy2tJMMrHj+h0JyTd9d4rFAd7EuqG4PUlbmlIkHep
W750yOiZlcOeP3puk6KKqAHruYbsH9jMczAndGzTEuAXgn/A3B0ZXIG0+ElNYo7G
Os7hF5kbPLPAgXHG7EbIlAE42zLoIvB25Uw7zUGn701mmyxxJph2UvHIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXLJ+HKrOHq10giqw+Kp0whqBkLMB8GA1UdIwQY
MBaAFNcYegq7Pu5BEDOLfY8/fn4SW+bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEt
YzgwMzkxZWFjOWU2LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEtYzgwMzkxZWFjOWU2
LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqIVFQMb
pgQ4gb3Biyv4DB4auf2IXrl5kH4n95X0a3K2F8wN4TzwKRKJ+DbURaH90EhdOodb
lGmn8cy7lfBesKkcmFQ4puYqzAEJEfM6vpYmNAVwVHCQpBrrdWSBAMEkxOA6Wla9
GW65q7JTNMhrGsZqtt4UGzB/Vfpxz+L1QRYwM9H+d2r/I7FKF6v4cu53o6S6AxXV
OK9t5g4sLSxoCoQmqz28apaRurObfePGH2rhzgarwwoSS5BjKcFZLm64NyPuYYB5
cvHr+ixjils54p+VGuCXJmBWY/5Ou4xTrYZWzG78etbesWey4+Y5U+JMmdOzE6M8
nVwJ94GHS+PnLw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:21:25 2026 by rpki-client