Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: A/dAZb844gdNPciVSmtcgSNGqQ3OdNOmZpNAFGY4ap8=
Subject key identifier: D4:6E:C4:AE:7D:C8:07:89:FF:EE:23:8D:2E:6B:2D:B9:FA:3D:B5:7A
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019D992B03CB65EA69C5F319F8917D94021C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1690
Signing time: Fri 17 Apr 2026 02:00:26 +0000
Manifest this update: Fri 17 Apr 2026 02:00:26 +0000
Manifest next update: Sat 18 Apr 2026 02:00:26 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: zl7BUDF/62ufcNyQQ6uSEj/+4DnPKuL5hzAUr21IViI=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:03:cb:65:ea:69:c5:f3:19:f8:91:7d:94:02:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Apr 17 02:00:26 2026 GMT
Not After : Apr 18 02:00:26 2026 GMT
Subject: CN=d46ec4ae7dc80789ffee238d2e6b2db9fa3db57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:26:97:78:b2:56:1d:25:39:72:7b:32:cf:e3:
d1:2f:72:6a:70:ec:4a:40:35:77:1f:38:48:6c:eb:
bb:41:bd:c7:78:22:94:e8:75:b5:45:87:92:f5:03:
08:13:b8:8e:73:8e:74:32:f5:26:b9:f8:0f:89:e5:
47:73:6c:12:7d:ac:c6:67:0b:86:07:07:2a:e2:ce:
a2:9c:88:df:88:5b:12:fc:a0:7c:3e:cc:7a:41:2e:
03:86:f1:77:7f:46:4d:66:da:36:a7:d8:8e:24:ba:
25:d1:3e:4a:c0:f2:7e:79:81:a1:76:f6:06:43:68:
7e:e4:4f:c2:04:e9:25:32:9a:4b:a2:5c:c4:ad:18:
43:7f:2f:d7:45:cd:b4:fe:c7:8a:50:41:d0:d5:57:
65:ed:4f:22:c2:32:ce:eb:e5:08:a2:f7:ba:bb:2f:
0f:cc:84:c7:15:6f:e4:69:19:ff:cb:14:f6:7d:57:
58:77:85:23:07:20:84:84:11:75:07:f8:51:09:30:
fa:05:b4:57:0a:99:3d:57:9c:1c:aa:49:fb:7b:29:
26:90:92:d9:75:eb:01:6d:c8:d9:08:3c:44:d5:d4:
7d:c8:6a:0d:f0:e2:84:72:ee:a1:d4:e3:b0:4a:40:
1d:b2:af:6c:e1:b5:72:d6:b5:3d:da:7e:07:73:c0:
33:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6E:C4:AE:7D:C8:07:89:FF:EE:23:8D:2E:6B:2D:B9:FA:3D:B5:7A
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:1c:0a:eb:48:89:f5:67:3d:4c:25:4e:8d:95:4c:94:ff:4d:
f2:35:b1:09:5f:df:53:f5:59:49:ef:43:da:64:94:0c:9c:c4:
c4:de:d3:2a:d6:c9:a6:b4:88:68:6d:3e:1b:3d:9b:12:53:63:
16:f4:e4:67:20:9a:81:16:02:be:40:94:45:e0:28:43:c8:5b:
57:b7:43:f2:b2:71:2a:19:e0:ce:30:e0:28:43:c0:77:0e:58:
40:c9:7c:b3:8b:ea:9e:e2:34:a0:e7:eb:04:3f:bf:8f:0c:69:
45:57:09:6e:81:45:6d:59:ad:9b:2b:37:26:8b:07:34:b6:18:
a3:2a:ef:bd:a5:4c:a1:53:23:bd:a1:4e:88:3e:bf:b8:23:53:
a9:bc:d9:a6:36:da:46:f3:78:6b:28:cd:b5:a8:15:d6:13:ce:
1a:48:7c:55:bf:55:7a:be:9c:13:79:cd:7a:87:2a:5f:86:d5:
84:de:50:c1:c1:69:45:5b:ef:c4:12:92:86:b9:51:5c:3e:bb:
c9:10:f2:f4:97:fb:ce:e5:ab:84:12:19:39:8b:9f:a7:c0:d8:
7f:de:e8:4e:7f:77:a8:d7:98:68:47:6d:f3:23:10:22:7e:62:
43:74:fc:61:6d:32:db:67:90:2e:6e:5c:16:56:d4:2a:e4:e4:
23:1b:d4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:16:51 2026 by rpki-client