Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: YBgHXsGOrQ6M1o9DirYETMnXqQLMFASUWGle7MsoP+c=
Subject key identifier: 21:6F:5F:FD:34:23:05:23:38:07:15:AE:57:97:DD:AC:6A:F7:33:70
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019E2F5F6A785F36ED0D1D07F462FB5A41E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 1913
Signing time: Sat 16 May 2026 06:00:42 +0000
Manifest this update: Sat 16 May 2026 06:00:42 +0000
Manifest next update: Sun 17 May 2026 06:00:42 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: j9hahk5dspTU1OsIyT6bALGDJ++PUuJ2UBmYNN9fPCE=)
2: 5RoZVTfrYaJl3awhTUEWKmh-mjw.roa (hash: vLgOLE/P+EAVb2N+cRPxBkgd+Ontprhm/1obe74MJao=)
3: ToZEV5JGyeFOLj8ty2PbNgby5sE.roa (hash: DsdlMKnutBPPcHsH+/R1jP5sFhln6SW7LBjUC07NiYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:6a:78:5f:36:ed:0d:1d:07:f4:62:fb:5a:41:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: May 16 06:00:42 2026 GMT
Not After : May 17 06:00:42 2026 GMT
Subject: CN=216f5ffd34230523380715ae5797ddac6af73370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:10:63:b7:17:36:1c:79:49:87:ea:61:d3:
e2:0c:c7:bf:bd:99:dd:e3:33:d4:5b:bf:1a:17:85:
36:3a:21:bf:c4:1f:25:d7:77:fd:19:3c:1b:59:c6:
17:96:b7:67:9e:75:c8:5a:1b:16:68:b5:3f:a6:70:
fa:59:3a:4b:71:3c:46:1c:64:c0:1d:05:65:28:48:
6b:c8:ec:f6:08:04:94:44:b1:4b:f8:46:d0:be:99:
85:e4:dc:94:9d:65:fe:ee:ff:b3:e3:08:7a:f9:85:
2e:cc:94:72:c5:24:a6:98:19:0e:fb:64:a0:5c:e0:
ec:fc:03:53:9c:07:f1:66:aa:09:f3:64:28:01:8b:
e9:75:45:ca:90:2e:2c:02:e4:69:8c:39:7b:d8:35:
52:30:69:1e:cb:bc:0a:c4:68:da:86:42:1d:1b:fc:
9f:d6:1e:ba:e2:89:6f:45:25:59:4e:d9:af:55:ab:
af:98:1a:68:85:ac:9b:ed:86:46:22:e7:31:64:3c:
64:10:15:dc:1a:ac:58:42:9b:23:23:ca:62:75:a8:
61:c8:da:87:f1:b8:01:ce:ad:87:91:c4:fb:11:86:
01:e6:a1:f0:08:98:86:59:13:89:a8:03:02:3a:1e:
f1:a1:3d:54:70:aa:1e:3d:e9:ae:7e:e4:9b:ed:2b:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6F:5F:FD:34:23:05:23:38:07:15:AE:57:97:DD:AC:6A:F7:33:70
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f9:f4:4b:2e:ee:a6:2d:a2:3e:bd:5a:ba:95:43:6b:fa:ba:
04:f0:8b:02:ba:a0:ec:40:91:cd:20:93:87:1d:09:ab:68:c6:
08:e6:40:2d:ad:b6:8a:bc:3c:fe:84:9f:0b:d9:87:c1:4a:a8:
f3:54:e5:af:e6:b8:37:e0:19:1f:b2:ff:ef:9e:50:e4:2e:60:
bb:a0:e0:8c:e8:3a:41:45:bf:07:05:7d:50:32:30:af:9d:18:
8d:48:57:5d:d8:8d:01:0c:92:da:1f:54:65:27:1d:2b:68:97:
bb:9d:08:00:f2:7c:13:a1:e5:39:01:12:e0:e4:b2:c3:27:fe:
dc:87:72:45:3d:01:65:f5:be:8f:46:ba:5d:45:a0:f0:9c:06:
4e:d1:0e:b5:04:6b:ac:ae:4f:16:4c:a7:e9:68:5a:98:26:7d:
20:fa:8c:b8:09:ee:dd:78:ec:5b:16:a2:b7:60:c5:dd:68:dd:
b7:9f:e5:51:a8:f7:0b:4a:ed:58:eb:29:40:0b:fa:d9:5b:f0:
bb:e3:c6:62:cd:1a:7a:53:a8:3a:46:9c:54:78:2f:a8:8d:e3:
15:47:dc:69:9b:15:25:32:30:92:c3:8b:3d:a7:92:7d:02:49:
31:13:96:1d:28:ec:7f:c4:30:a0:d2:9a:10:de:cf:76:9d:a6:
2f:27:94:7f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4vX2p4XzbtDR0H9GL7WkHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWE4MTBlM2FiMTk2NGI0NGVjYjM3NzgzNDBiMjY2ZGJk
YTExMjYwHhcNMjYwNTE2MDYwMDQyWhcNMjYwNTE3MDYwMDQyWjAzMTEwLwYDVQQD
EygyMTZmNWZmZDM0MjMwNTIzMzgwNzE1YWU1Nzk3ZGRhYzZhZjczMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvroQY7cXNhx5SYfqYdPiDMe/vZnd
4zPUW78aF4U2OiG/xB8l13f9GTwbWcYXlrdnnnXIWhsWaLU/pnD6WTpLcTxGHGTA
HQVlKEhryOz2CASURLFL+EbQvpmF5NyUnWX+7v+z4wh6+YUuzJRyxSSmmBkO+2Sg
XODs/ANTnAfxZqoJ82QoAYvpdUXKkC4sAuRpjDl72DVSMGkey7wKxGjahkIdG/yf
1h664olvRSVZTtmvVauvmBpohayb7YZGIucxZDxkEBXcGqxYQpsjI8pidahhyNqH
8bgBzq2HkcT7EYYB5qHwCJiGWROJqAMCOh7xoT1UcKoePemufuSb7St6LQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCFvX/00IwUjOAcVrleX3axq9zNwMB8GA1UdIwQY
MBaAFPsagQ46sZZLROyzd4NAsmbb2hEmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14cUJEanF4bGt0RTdMTjNnMEN5WnR2YUVTWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvOWQ2MDZlLTA4YTYtNGY0YS1iOTgw
LWI1YWJmNDQwZTg5My8xLzEteHFCRGpxeGxrdEU3TE4zZzBDeVp0dmFFU1kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMwLzlkNjA2ZS0wOGE2LTRmNGEtYjk4MC1iNWFiZjQ0MGU4
OTMvMS8xLXhxQkRqcXhsa3RFN0xOM2cwQ3ladHZhRVNZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyPn0
Sy7upi2iPr1aupVDa/q6BPCLArqg7ECRzSCThx0Jq2jGCOZALa22irw8/oSfC9mH
wUqo81Tlr+a4N+AZH7L/755Q5C5gu6DgjOg6QUW/BwV9UDIwr50YjUhXXdiNAQyS
2h9UZScdK2iXu50IAPJ8E6HlOQES4OSywyf+3IdyRT0BZfW+j0a6XUWg8JwGTtEO
tQRrrK5PFkyn6WhamCZ9IPqMuAnu3XjsWxait2DF3Wjdt5/lUaj3C0rtWOspQAv6
2Vvwu+PGYs0aelOoOkacVHgvqI3jFUfcaZsVJTIwksOLPaeSfQJJMROWHSjsf8Qw
oNKaEN7Pdp2mLyeUfw==
-----END CERTIFICATE-----
Generated at Sat May 16 16:26:56 2026 by rpki-client