Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: bxYoOvTDcEO1P4qMgduQPrkBu1GBxU81oPZS0wcc/5E=
Subject key identifier: 80:98:B0:04:FB:7F:6E:5E:DA:39:BB:35:FA:5B:78:11:39:16:25:8E
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019DA4F8881579CDFA0D72D5E79C79DBD641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 06BD
Signing time: Sun 19 Apr 2026 09:00:44 +0000
Manifest this update: Sun 19 Apr 2026 09:00:44 +0000
Manifest next update: Mon 20 Apr 2026 09:00:44 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: LwRd0ao/GY9SNUeaQFPXic5H+EaT6NxoZpcSFlVy+6s=)
2: uR2uktqhw4VUD7MA87wx15LSDMQ.roa (hash: dBrAWGqUgoQMO2aAWFKVKmrXl4B58KcbKhMomtwhN/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:88:15:79:cd:fa:0d:72:d5:e7:9c:79:db:d6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Apr 19 09:00:44 2026 GMT
Not After : Apr 20 09:00:44 2026 GMT
Subject: CN=8098b004fb7f6e5eda39bb35fa5b78113916258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:fc:e8:78:4b:c6:30:e0:72:0c:b9:e5:07:
e7:2c:d9:62:0c:df:e2:1b:a2:29:ce:f1:27:5e:16:
59:29:69:84:79:c3:aa:86:94:46:cd:a8:bd:68:7a:
c6:85:7a:46:7e:15:c0:f0:b5:87:50:81:e1:30:eb:
b1:bf:ff:fe:4d:0d:fb:81:1a:43:57:3e:f9:3f:8b:
66:4f:e9:40:4a:81:ac:03:fb:9a:c1:ba:1e:eb:29:
d9:7b:a0:ca:97:1c:be:ad:3a:b1:13:85:1b:f5:6f:
8f:82:a5:0b:99:c9:31:e1:ac:31:c9:55:c4:87:a0:
ab:54:ab:32:f0:df:a2:53:67:f6:84:ed:06:64:f1:
04:24:83:91:bf:31:35:7f:29:60:33:c0:3f:c5:60:
52:6f:55:9e:15:e9:8b:90:5b:b3:4e:c2:37:26:1c:
53:ad:81:c4:4d:6c:56:b9:a0:a6:67:b0:af:fd:fe:
a3:b7:79:d4:41:a7:a5:b9:05:62:ab:4f:98:61:4f:
8f:59:50:40:52:aa:2a:9e:fc:bc:c8:0a:9e:76:90:
98:45:05:42:80:56:8d:8a:9e:af:b3:84:61:0f:21:
56:b3:aa:bd:0b:70:4c:21:bc:38:ff:0b:b3:0a:d9:
6d:2e:ff:de:50:76:0f:46:f2:c2:5a:1b:b0:22:64:
8f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:98:B0:04:FB:7F:6E:5E:DA:39:BB:35:FA:5B:78:11:39:16:25:8E
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ac:c2:69:27:e6:34:f4:15:07:b4:2b:07:72:57:06:30:0f:
de:7c:5f:84:74:77:de:74:7d:56:35:61:b2:a4:2c:93:d5:29:
e9:b4:97:8e:ff:ef:45:29:fb:3f:63:25:7a:e0:fd:e0:18:8d:
ad:12:73:74:5e:12:2f:6c:5a:4b:f6:bc:f4:86:7d:77:02:e2:
00:8e:59:ff:bf:0f:10:fb:5e:c5:53:7a:a0:d7:88:bd:5c:c8:
52:e6:aa:6d:c9:28:ae:29:be:cd:ea:0e:0f:75:cf:40:37:48:
82:04:b0:15:f0:fb:10:52:eb:c9:2a:89:f0:fc:d8:1b:33:2d:
e8:e6:aa:3c:39:40:2a:5d:52:20:cc:86:fa:67:ed:fd:c6:fc:
db:ee:63:46:f7:f7:78:61:4b:4d:f4:aa:a8:f4:3a:ac:7c:f9:
6a:cc:08:c3:f0:de:ac:7c:e1:e6:45:4e:1d:f0:06:e1:37:9c:
64:54:9f:37:b3:53:17:87:0d:c8:72:e7:b6:35:5e:6a:1e:0b:
7f:f9:48:51:c4:e7:5a:46:1a:71:5f:91:96:66:7c:6c:b5:71:
d2:9a:55:92:5c:88:7c:c6:f3:e3:5f:b3:af:9e:d9:55:5c:4f:
18:f8:62:aa:2b:17:7d:7b:bf:6f:d9:eb:26:ef:66:d0:40:00:
8e:2f:01:94
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2k+IgVec36DXLV55x529ZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTJmMDVmY2Q1OWZkMTY4NmY5MjljNjdiZWRjZWY1OWU1
NTBkZjIwHhcNMjYwNDE5MDkwMDQ0WhcNMjYwNDIwMDkwMDQ0WjAzMTEwLwYDVQQD
Eyg4MDk4YjAwNGZiN2Y2ZTVlZGEzOWJiMzVmYTViNzgxMTM5MTYyNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAz86HhLxjDgcgy55QfnLNliDN/i
G6IpzvEnXhZZKWmEecOqhpRGzai9aHrGhXpGfhXA8LWHUIHhMOuxv//+TQ37gRpD
Vz75P4tmT+lASoGsA/uawboe6ynZe6DKlxy+rTqxE4Ub9W+PgqULmckx4awxyVXE
h6CrVKsy8N+iU2f2hO0GZPEEJIORvzE1fylgM8A/xWBSb1WeFemLkFuzTsI3JhxT
rYHETWxWuaCmZ7Cv/f6jt3nUQaeluQViq0+YYU+PWVBAUqoqnvy8yAqedpCYRQVC
gFaNip6vs4RhDyFWs6q9C3BMIbw4/wuzCtltLv/eUHYPRvLCWhuwImSP2QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFICYsAT7f25e2jm7NfpbeBE5FiWOMB8GA1UdIwQY
MBaAFPsS8F/NWf0WhvkpxnvtzvWeVQ3yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14THdYODFaX1JhRy1TbkdlLTNPOVo1VkRmSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzkvYTAzN2QxLWVhN2MtNGM4NS04MTI4
LWQ0ZDBhYWI3MDFiZi8xLzEteEx3WDgxWl9SYUctU25HZS0zTzlaNVZEZkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M5L2EwMzdkMS1lYTdjLTRjODUtODEyOC1kNGQwYWFiNzAx
YmYvMS8xLXhMd1g4MVpfUmFHLVNuR2UtM085WjVWRGZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6zC
aSfmNPQVB7QrB3JXBjAP3nxfhHR33nR9VjVhsqQsk9Up6bSXjv/vRSn7P2MleuD9
4BiNrRJzdF4SL2xaS/a89IZ9dwLiAI5Z/78PEPtexVN6oNeIvVzIUuaqbckorim+
zeoOD3XPQDdIggSwFfD7EFLrySqJ8PzYGzMt6OaqPDlAKl1SIMyG+mft/cb82+5j
Rvf3eGFLTfSqqPQ6rHz5aswIw/DerHzh5kVOHfAG4TecZFSfN7NTF4cNyHLntjVe
ah4Lf/lIUcTnWkYacV+RlmZ8bLVx0ppVklyIfMbz41+zr57ZVVxPGPhiqisXfXu/
b9nrJu9m0EAAji8BlA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:06 2026 by rpki-client