Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: Drz+Okcpw/8h2uW51T+cpqucb4Qo3yKSTtIT69uTqjs=
Subject key identifier: 4B:99:13:F1:16:BD:F1:8B:95:FC:00:72:BD:76:3D:2D:AD:70:B1:C6
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019E1DC72594CD4DB6915A00B950A2E8DBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 18C5
Signing time: Tue 12 May 2026 20:00:50 +0000
Manifest this update: Tue 12 May 2026 20:00:50 +0000
Manifest next update: Wed 13 May 2026 20:00:50 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: Io48ZySxGLAH3LT0DRdabd4YE3SB93ntgyN1lhHtGHA=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:25:94:cd:4d:b6:91:5a:00:b9:50:a2:e8:db:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: May 12 20:00:50 2026 GMT
Not After : May 13 20:00:50 2026 GMT
Subject: CN=4b9913f116bdf18b95fc0072bd763d2dad70b1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:96:60:19:16:73:dd:e3:e9:33:59:56:b3:9a:
15:bc:5e:47:0a:47:e0:d8:e6:f0:5d:ce:ba:e1:73:
aa:1e:f9:11:15:da:91:c4:95:f2:2b:32:0a:4d:2e:
1a:ff:9a:bd:af:f9:eb:93:a3:1c:47:02:f8:49:e9:
98:b9:39:c2:f3:27:2e:91:d1:c5:6a:41:37:f1:a7:
b9:3a:5e:e9:73:75:78:1e:0b:77:cf:9e:79:2b:5a:
77:29:11:2f:d2:03:a4:0b:22:3e:ae:86:69:dc:b8:
99:c1:15:a2:a1:f0:0a:90:26:78:ae:85:65:2a:ad:
e5:bd:48:06:ef:77:a9:77:6f:56:95:4f:0b:91:76:
e5:11:9f:2c:97:59:4f:58:2d:49:20:00:b7:af:18:
50:52:59:54:4f:e5:e4:21:fe:a3:5b:e2:19:b2:d6:
be:45:2c:2a:eb:dd:28:74:17:3c:7b:9a:5c:e6:c5:
f2:44:8f:76:3b:77:44:1f:f3:bb:2d:3e:a4:ba:93:
f3:5d:85:e3:05:b5:a6:83:b9:d3:df:c7:14:f6:ce:
ab:ef:5b:8d:54:ca:d1:c4:ce:f7:54:a8:d7:66:95:
6a:b2:b8:66:14:36:41:ea:cf:ce:eb:71:2a:48:10:
66:d5:89:1d:9c:7d:08:7e:44:d7:fa:47:1c:8d:84:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:13:F1:16:BD:F1:8B:95:FC:00:72:BD:76:3D:2D:AD:70:B1:C6
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2a:10:e7:ad:ea:85:39:07:5a:a0:c2:70:da:f2:5d:c9:ec:
3b:5f:d9:63:98:ea:b5:cf:5d:0f:00:9d:28:30:57:98:ba:d1:
7f:55:3b:c4:09:90:1d:8f:d2:f8:9d:3e:0e:c2:dd:98:29:b4:
68:39:0d:0a:e1:b1:83:98:c8:b3:91:87:b8:47:81:a1:e5:6f:
1e:1c:63:25:60:9d:1b:b3:bd:1e:81:f7:54:24:4e:e3:52:58:
26:e2:5b:a7:a1:ed:ae:4c:78:f1:21:8e:a8:9a:72:20:15:eb:
16:23:84:c4:02:0c:a3:50:c6:99:7d:ad:e5:88:c2:1c:75:2f:
88:9b:3f:3e:0f:61:03:c5:69:72:d4:28:0e:92:7c:f0:5b:19:
e2:d0:0a:59:00:75:be:92:19:38:06:47:13:34:3c:19:db:30:
49:f7:02:2a:2d:d8:84:ee:da:1e:dc:26:07:9f:f9:81:bf:2f:
73:1f:ca:e2:71:c9:32:96:a8:15:64:2b:76:db:3f:10:1c:16:
e0:2c:9a:39:d2:7c:74:7c:cf:cd:3e:50:12:fa:1c:10:51:98:
cd:cb:01:ea:e8:b9:53:53:20:8e:f0:3c:f0:68:d4:61:26:ca:
32:81:84:6e:11:d3:0c:7d:8a:a9:a3:dc:2e:56:47:a1:8e:74:
cd:c2:e3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:09 2026 by rpki-client