Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: cMwnRm/GPW6BGjerCWZkaPacQNT/lQAHFnZV3sDdnq4=
Subject key identifier: E5:6C:84:FD:FA:63:E6:DD:4A:E3:2E:EF:16:79:DF:8D:46:D8:21:D7
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019D9B508CCCBA7453BA9E4D98E4324B547D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:00:40 +0000
Manifest this update: Fri 17 Apr 2026 12:00:40 +0000
Manifest next update: Sat 18 Apr 2026 12:00:40 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: +aonyvI2M3Qjjdfc+bWQYYKjdxo5Guvq1KzWYiInMTg=)
2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:8c:cc:ba:74:53:ba:9e:4d:98:e4:32:4b:54:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Apr 17 12:00:40 2026 GMT
Not After : Apr 18 12:00:40 2026 GMT
Subject: CN=e56c84fdfa63e6dd4ae32eef1679df8d46d821d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:21:e9:9a:4e:51:33:ed:85:fa:a7:0f:36:
ec:51:57:12:3d:76:3f:3e:13:d1:5f:71:58:d8:46:
10:8c:f3:a5:b3:a4:c2:3d:58:7e:e1:9f:3e:61:c5:
61:60:d6:b8:4a:fb:74:eb:cd:22:37:84:17:d9:28:
52:4a:d9:05:af:d4:92:07:8a:06:8d:6f:54:bf:7a:
ae:ac:8b:73:2f:98:ec:bd:c6:70:99:28:89:73:46:
35:46:f0:2e:bd:87:9e:8c:1b:62:58:d2:5c:4f:b9:
8b:cf:fe:b6:ab:d6:30:b9:31:3d:42:e8:ae:1c:5c:
cd:39:69:16:72:28:d2:00:72:47:56:8e:89:09:5e:
5a:18:12:b8:18:cc:da:a5:61:c4:bb:c9:44:d3:1d:
0b:90:39:40:12:a8:34:99:65:70:d0:55:83:be:e6:
25:a6:88:ea:a1:2b:46:ce:ea:dc:0f:76:d9:06:3f:
e3:5a:a1:d8:60:ce:c7:05:c4:ee:2e:33:55:fd:b0:
b9:85:66:1a:9c:cc:fd:9f:9c:a0:e4:6a:f3:c0:39:
32:a0:23:ce:79:b9:f0:f5:08:90:30:d8:22:f4:0c:
5c:b7:78:27:66:5c:7c:cc:34:08:68:43:86:7a:a9:
8f:05:b2:d9:67:de:af:9d:aa:46:80:98:b0:a1:65:
6b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:84:FD:FA:63:E6:DD:4A:E3:2E:EF:16:79:DF:8D:46:D8:21:D7
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:80:2a:cf:51:c9:9f:d5:a8:40:03:d0:e0:c6:dd:c0:9b:
72:4a:75:9a:a4:b4:9e:51:2c:4d:e5:47:00:86:06:41:22:b6:
95:24:3b:17:c3:46:61:25:f3:30:2c:8d:9a:5c:32:c6:a2:fa:
24:be:65:ec:56:aa:55:3e:d6:12:e2:7a:fb:e0:60:df:03:3b:
fb:5f:d6:c4:c2:48:9d:2b:26:5e:59:e5:0b:43:26:20:36:3a:
97:6c:be:2b:d6:01:48:98:9e:13:fe:1c:2c:df:b3:3f:6f:94:
63:a4:9b:9f:d7:69:96:17:cb:13:d1:ff:b0:da:69:9d:51:94:
13:79:b8:2a:3f:a8:e9:a0:ff:49:e3:53:c9:bf:51:29:8e:68:
ff:8f:ae:b4:e7:ce:ec:30:37:3b:e7:f4:be:e5:d0:02:f7:7e:
08:c5:e2:d7:e1:77:9a:ac:42:0f:24:aa:4f:7b:5c:44:f6:ab:
0d:86:c1:81:02:38:88:23:6f:38:16:fc:72:ea:6d:5e:5a:68:
b5:ca:a7:29:b6:06:56:26:9c:55:ef:ec:10:45:d0:d5:75:f3:
b3:67:5f:25:54:d7:06:b8:f8:a1:5f:12:97:bd:3f:39:ff:f2:
98:55:fe:c8:dd:80:cd:d1:ee:0f:a4:e6:e8:38:cf:7f:60:14:
bd:27:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:04 2026 by rpki-client