
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: 0LQ/sg5wxS/qp41LxQeJCqTIN8U/ftkK1maLsrmn9R0=
Subject key identifier: 0C:18:95:9F:5A:DD:43:4E:15:A3:FC:80:C8:5E:56:B1:F1:55:F0:08
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 019DA29C3DB8FE3CF6E4D5094ED516080CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 1272
Signing time: Sat 18 Apr 2026 22:00:41 +0000
Manifest this update: Sat 18 Apr 2026 22:00:41 +0000
Manifest next update: Sun 19 Apr 2026 22:00:41 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: xuuO0obE23gzWfEJkY/hPED7525iqo0ZMhL6rI6BlbQ=)
2: DhpDBX_7AhUzL9AP6J2bnK3aQ1o.roa (hash: CBUZxcykEIqcfYCfDpxjg7qtOjik95UqEoINbP51Nd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:3d:b8:fe:3c:f6:e4:d5:09:4e:d5:16:08:0c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Apr 18 22:00:41 2026 GMT
Not After : Apr 19 22:00:41 2026 GMT
Subject: CN=0c18959f5add434e15a3fc80c85e56b1f155f008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:85:af:61:ba:67:96:37:68:ec:d9:ca:95:b0:
39:a7:d9:40:a0:3c:ec:6d:32:e3:a5:27:87:21:58:
3c:2a:c4:51:8c:9c:a7:36:81:4d:10:84:68:01:2e:
9d:23:02:f8:89:20:dd:27:dd:18:ae:70:a5:ad:96:
e3:a4:9d:b8:10:f0:07:a9:6d:ef:2b:57:d2:a3:34:
6f:bd:51:b5:47:de:a7:55:a4:c2:e0:88:b2:d9:f8:
93:cd:19:12:69:08:e4:3c:6c:ce:7c:83:e6:85:b6:
60:e0:5a:ba:11:ee:4b:ad:89:2a:29:74:9d:4e:e9:
19:51:00:e1:b8:97:c9:d1:a6:6d:40:2b:4f:b1:32:
77:7a:0c:57:ed:a1:0f:17:0b:06:56:d6:82:36:10:
db:23:04:6e:95:05:fc:02:e2:9c:40:a1:d3:36:62:
90:4f:39:36:54:e5:21:bf:ce:37:61:04:53:fa:0c:
1a:0f:ce:85:97:0f:2e:c8:49:6a:b8:ad:97:92:bc:
51:dd:25:6f:74:48:5b:2d:46:29:a6:98:08:80:2f:
07:6e:b7:50:ba:b9:e8:e8:7e:2b:1f:0a:cf:cd:dd:
96:d4:18:78:c4:f3:52:3f:7f:80:ff:b4:39:c4:40:
83:86:63:b4:23:8d:16:97:59:ea:54:1c:5b:65:83:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:95:9F:5A:DD:43:4E:15:A3:FC:80:C8:5E:56:B1:F1:55:F0:08
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e8:f9:44:ac:b5:3f:7f:3f:44:0a:ee:76:33:4e:27:e6:60:
ab:65:4f:c3:a5:6c:d3:0e:63:3a:4c:de:48:2b:d0:83:77:23:
20:eb:6b:94:13:2b:b9:90:c3:4f:73:14:ae:c7:32:c6:1b:fd:
13:33:20:99:99:13:76:b0:59:f5:0a:c3:5d:ef:18:8d:71:72:
96:11:6f:a9:f6:7a:9f:73:04:68:fd:7d:ff:45:66:7f:76:7a:
9d:87:5f:6d:02:bf:cd:8a:81:14:4a:80:3a:ef:1a:cb:4c:e8:
6f:cb:a2:01:35:25:ba:42:a2:6c:c7:ad:1a:23:18:a3:10:26:
bf:35:7d:67:52:5b:41:a5:b4:59:da:5d:2a:26:1d:96:0c:51:
f1:4c:78:3f:98:49:d1:02:b4:e5:43:c5:1f:ba:8d:1a:45:3c:
9b:fe:b7:bc:9f:36:04:e3:91:e3:15:a7:82:2c:4b:f2:24:28:
73:21:e6:89:ae:19:c9:50:0d:95:a9:a0:34:bf:78:1b:4e:53:
14:81:bc:26:b6:ad:43:8b:c5:59:b3:8b:b1:c4:30:7f:60:8b:
0d:40:11:41:5d:47:e8:f8:ee:a7:bc:26:4f:0b:51:2a:67:00:
e6:c4:2e:c9:b0:b4:8c:8a:d1:7c:06:e1:a4:fb:0c:26:86:0b:
9a:ab:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:40 2026 by rpki-client