Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: lCilbgwcVNzHinZEvA2favKctc4I3B5i5dfKmrH+gt4=
Subject key identifier: A2:ED:B6:9E:35:51:11:63:1D:2E:E7:CA:C1:D4:EE:A2:AA:2E:97:11
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019E1CB532CFFF7A4374398106EE993BA867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 06FB
Signing time: Tue 12 May 2026 15:01:37 +0000
Manifest this update: Tue 12 May 2026 15:01:37 +0000
Manifest next update: Wed 13 May 2026 15:01:37 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: 1pMFsf5WwvuA9WW/gIxQK4AxqWfg+86wumgl1/6R9IQ=)
2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:32:cf:ff:7a:43:74:39:81:06:ee:99:3b:a8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: May 12 15:01:37 2026 GMT
Not After : May 13 15:01:37 2026 GMT
Subject: CN=a2edb69e355111631d2ee7cac1d4eea2aa2e9711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:a9:4a:f3:99:4d:48:9b:86:29:81:47:65:
d1:fc:d5:c0:ba:3e:be:23:dd:43:0a:04:a3:20:55:
3a:2f:2b:fa:4b:4b:23:1d:72:4b:af:eb:5a:0a:ae:
9b:96:0e:45:0b:75:3b:3f:1d:d5:70:72:38:7b:b2:
a7:13:3d:e9:37:ee:fc:c5:a2:f1:49:99:4a:d1:66:
54:80:43:89:7e:66:79:ea:da:8e:54:c3:ca:aa:f8:
13:fb:7b:31:00:45:92:2a:40:b4:e4:4a:6d:0d:92:
43:77:6a:d1:37:52:c7:fd:b2:11:6e:be:8f:73:cf:
f7:83:c5:80:35:5e:81:ed:15:42:c0:3f:b6:b3:d7:
0c:77:fa:23:32:ec:4a:ab:70:1e:b2:42:ff:78:bc:
e1:87:7e:82:f8:77:1c:a2:20:8d:0e:fb:46:57:d7:
4c:04:70:4d:f7:ea:06:fa:a6:f1:15:fb:72:ae:00:
10:74:05:65:16:6f:f2:09:8b:ee:32:29:15:33:a9:
46:86:77:ec:7e:ba:4d:10:cf:d4:0a:d0:75:ec:7d:
94:34:47:a9:8e:3a:52:3c:60:5f:af:b2:87:ba:57:
c6:2f:36:94:16:bf:0d:d7:68:98:83:95:3f:5e:6a:
f5:9b:6d:83:c9:0e:e3:ca:4d:9c:23:2f:ce:26:9e:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:B6:9E:35:51:11:63:1D:2E:E7:CA:C1:D4:EE:A2:AA:2E:97:11
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e8:56:ec:33:5f:60:c7:df:7f:ab:ae:f6:67:a1:e8:ca:ed:
5a:9b:d3:a6:1d:75:36:ba:b7:d1:38:57:2c:30:9a:da:f0:b7:
94:3a:d6:8f:b4:1b:4d:1f:85:23:b6:4e:8d:8c:da:02:6c:c9:
0f:0d:8d:b1:49:7b:27:be:49:b7:c5:8f:8d:eb:14:9d:0c:45:
3b:e7:b4:8a:85:35:55:35:96:e6:7c:7b:6d:2e:0a:a1:40:b4:
65:8f:1a:d8:ea:e9:9e:ce:c1:f3:7f:30:08:6c:52:6e:5e:d5:
4e:52:b6:a8:1e:a3:69:82:9f:f7:c1:fe:1f:77:66:d1:88:da:
20:e8:15:f8:c9:be:28:09:65:e8:b5:9a:2d:3f:7f:0c:3c:d4:
e5:19:22:dd:9e:d9:e1:cf:41:44:b0:30:bd:de:36:52:39:6e:
57:a2:63:3f:c4:50:59:b9:26:b7:fb:69:4a:69:fa:d1:87:fd:
e2:65:93:1e:b3:c5:a1:89:ee:0d:0f:91:7f:cf:6f:63:72:78:
bd:a2:e7:a9:65:10:32:00:36:f5:46:2e:74:36:f8:cb:17:32:
b6:82:ee:32:dc:88:a5:06:52:da:1e:84:59:cf:5f:29:03:0f:
18:2d:f1:83:e6:3f:00:b9:22:5f:18:ba:e8:45:db:ec:bb:e2:
19:7a:2e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:57 2026 by rpki-client