Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: R2mjqDzeDg8DneUeiDkXE5mcvXQ0KY4SQJ+j3gbiG6g=
Subject key identifier: E1:A7:D9:16:96:06:07:F9:8E:67:52:B9:F6:ED:85:21:44:A8:47:C0
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 01A0C444FEAE0556D110AC9FFDB09EA96BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1834
Signing time: Mon 21 Sep 2026 14:00:50 +0000
Manifest this update: Mon 21 Sep 2026 14:00:50 +0000
Manifest next update: Tue 22 Sep 2026 14:00:50 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: 7MxKZ73BAi0iqbidf4iRikaCvz9fn+zoX35jzf4bu0w=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:fe:ae:05:56:d1:10:ac:9f:fd:b0:9e:a9:6b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Sep 21 14:00:50 2026 GMT
Not After : Sep 22 14:00:50 2026 GMT
Subject: CN=e1a7d916960607f98e6752b9f6ed852144a847c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b9:0b:38:48:b6:18:3e:e6:35:6c:3d:13:45:
6e:9b:81:6e:9b:ad:65:2d:76:82:ce:e2:9f:dd:fb:
87:a3:68:5f:3f:c1:1b:7d:88:0a:5e:df:74:6d:f5:
06:44:b0:2b:52:00:2f:d9:99:14:21:31:69:88:89:
fc:90:e7:95:d8:7d:53:16:4d:39:26:60:e7:ee:32:
54:16:79:23:5b:5f:38:b6:c3:e0:d4:70:a1:70:30:
9a:ad:e1:fc:7f:57:1d:76:86:e3:55:16:09:a5:8d:
14:8f:92:0f:86:ce:06:7f:ef:ee:7e:fc:f3:0c:34:
81:f2:3c:54:8c:5c:ca:e8:96:4d:61:40:9b:b6:9b:
06:fa:15:7b:b7:19:b5:72:c4:52:71:96:a4:4e:74:
6f:fd:03:1c:52:4e:fb:8a:3b:fc:10:e0:e1:d9:e9:
be:0b:81:46:29:2d:02:44:eb:d1:20:67:b6:d4:f3:
f9:4c:3c:ea:b4:6b:48:e2:76:5b:8c:bc:90:84:9b:
52:bf:8f:39:c2:12:a6:2c:b3:7c:aa:3f:93:2b:f0:
ae:48:63:dd:ae:c9:0c:85:20:97:42:68:09:f9:d9:
98:8c:7b:1f:a8:b0:14:44:7a:f2:3b:26:e6:51:a5:
ae:85:df:6e:13:20:b2:d9:d5:c0:6e:c2:54:92:18:
b6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A7:D9:16:96:06:07:F9:8E:67:52:B9:F6:ED:85:21:44:A8:47:C0
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a0:6a:46:af:b4:3b:52:f8:71:2a:0d:8c:8d:4b:a0:6c:2d:
49:e2:74:04:4c:3e:31:48:f3:3a:e4:6b:1b:9b:5c:eb:be:f3:
7d:d0:1d:b5:4d:fb:d1:86:11:ec:02:b9:62:21:49:31:aa:f9:
42:24:c8:fd:ee:fb:9e:c5:43:f4:72:20:72:55:6f:19:d6:fb:
5a:b0:32:2c:ab:a1:cd:5d:a2:9c:bd:e4:1b:d6:1b:fc:85:f5:
77:03:59:1d:83:bc:ab:33:fb:84:4e:6d:c7:52:3a:79:d2:6d:
f6:31:02:17:a7:e4:19:a5:05:a7:b7:e6:32:a3:c4:05:01:59:
ef:20:10:08:62:b2:ae:96:bc:b8:66:d2:55:57:48:de:83:65:
03:40:2c:e7:4e:bc:fd:cc:62:21:23:5d:f3:0d:05:ff:2b:ea:
da:eb:cc:2b:5c:d4:d9:67:15:06:09:00:cf:5b:f7:b0:4a:a2:
c6:df:54:3d:4c:60:2b:22:b1:f0:24:51:c5:cc:e1:4e:07:1d:
cb:ad:64:11:48:79:6e:6f:e7:29:1c:ef:c4:ee:d0:46:b7:ee:
11:dd:ea:07:fd:8b:d3:d8:f5:3f:f8:e8:27:cb:a4:61:f7:a1:
04:c1:a5:88:ca:7e:e5:64:b6:39:5a:53:78:16:73:76:d8:71:
cb:db:c8:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDERP6uBVbREKyf/bCeqWv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1N2M3ZGIwNGU3OGMyMjFmM2RmMmEyYWYwODJiNTE4ZDk2
MmE4ZjAwHhcNMjYwOTIxMTQwMDUwWhcNMjYwOTIyMTQwMDUwWjAzMTEwLwYDVQQD
EyhlMWE3ZDkxNjk2MDYwN2Y5OGU2NzUyYjlmNmVkODUyMTQ0YTg0N2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7kLOEi2GD7mNWw9E0Vum4Fum61l
LXaCzuKf3fuHo2hfP8EbfYgKXt90bfUGRLArUgAv2ZkUITFpiIn8kOeV2H1TFk05
JmDn7jJUFnkjW184tsPg1HChcDCareH8f1cddobjVRYJpY0Uj5IPhs4Gf+/ufvzz
DDSB8jxUjFzK6JZNYUCbtpsG+hV7txm1csRScZakTnRv/QMcUk77ijv8EODh2em+
C4FGKS0CROvRIGe21PP5TDzqtGtI4nZbjLyQhJtSv485whKmLLN8qj+TK/CuSGPd
rskMhSCXQmgJ+dmYjHsfqLAURHryOybmUaWuhd9uEyCy2dXAbsJUkhi2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGn2RaWBgf5jmdSufbthSFEqEfAMB8GA1UdIwQY
MBaAFNV8fbBOeMIh898qKvCCtRjZYqjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgt
ZmU5NWE5YWYzYWRjLzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8xOGQwNTktM2NiMi00NmJmLWE1ODgtZmU5NWE5YWYzYWRj
LzEvMVh4OXNFNTR3aUh6M3lvcThJSzFHTmxpcVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKBqRq+0
O1L4cSoNjI1LoGwtSeJ0BEw+MUjzOuRrG5tc677zfdAdtU370YYR7AK5YiFJMar5
QiTI/e77nsVD9HIgclVvGdb7WrAyLKuhzV2inL3kG9Yb/IX1dwNZHYO8qzP7hE5t
x1I6edJt9jECF6fkGaUFp7fmMqPEBQFZ7yAQCGKyrpa8uGbSVVdI3oNlA0As5068
/cxiISNd8w0F/yvq2uvMK1zU2WcVBgkAz1v3sEqixt9UPUxgKyKx8CRRxczhTgcd
y61kEUh5bm/nKRzvxO7QRrfuEd3qB/2L09j1P/joJ8ukYfehBMGliMp+5WS2OVpT
eBZzdthxy9vImg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:58:36 2026 by rpki-client