Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: sfAnN+P41OtmAAwU8Gy/zaV52Q1YUTibqN3YM9Xg1KE=
Subject key identifier: 2B:1A:DE:85:1A:C1:7A:75:EA:76:83:33:CC:7B:83:8B:77:5C:D9:18
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019E30E02F28445D764180F89E29634D99BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 190D
Signing time: Sat 16 May 2026 13:00:58 +0000
Manifest this update: Sat 16 May 2026 13:00:58 +0000
Manifest next update: Sun 17 May 2026 13:00:58 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: cmKjhJw3PCP4NYaEXFzqPG4R7NE6OYlsbkc84moYoT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:2f:28:44:5d:76:41:80:f8:9e:29:63:4d:99:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: May 16 13:00:58 2026 GMT
Not After : May 17 13:00:58 2026 GMT
Subject: CN=2b1ade851ac17a75ea768333cc7b838b775cd918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:60:d8:30:90:dd:0b:0c:18:5c:21:38:c1:
14:22:51:a9:ba:ee:32:78:e9:b3:06:24:f5:3a:a6:
ef:7b:22:90:8e:c8:d1:84:fe:d7:a2:45:3f:ab:50:
ee:91:a6:55:04:59:33:11:3d:c8:dd:f2:9d:3c:30:
80:9b:03:45:6d:b0:c6:d8:01:38:c4:9d:c7:a7:c2:
61:4e:5e:f5:e4:4f:e4:63:38:6b:ba:56:93:2f:60:
29:6d:44:a5:7c:0d:07:8e:2e:56:d4:3e:6b:4c:b8:
91:86:66:3d:00:0b:cb:bd:c0:80:20:0b:af:f2:ce:
7d:76:fb:f6:c6:eb:65:19:2a:be:cd:82:0b:c4:36:
49:33:84:36:9a:a2:d4:69:0e:74:f1:96:67:24:94:
ea:f2:92:1a:b6:9b:4b:2d:2d:cd:97:9c:8d:c4:cf:
be:d6:05:02:93:1d:ac:eb:6d:0f:3a:98:a3:ef:10:
0f:77:6a:25:17:34:b8:c1:84:1c:6c:76:db:98:e9:
2f:0f:16:81:77:40:cb:4e:cf:bc:10:ec:bc:59:5e:
e2:83:0f:7d:d9:50:01:fd:97:0f:44:3b:c5:1d:d1:
b4:36:ff:d7:ca:43:52:d1:a4:51:49:d1:cc:88:aa:
9d:9a:42:eb:a4:b8:f0:41:b3:03:8e:64:c3:18:e6:
ab:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:DE:85:1A:C1:7A:75:EA:76:83:33:CC:7B:83:8B:77:5C:D9:18
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d0:1b:90:21:a8:28:24:a1:59:71:34:f5:fc:14:7d:14:ba:
bc:23:e9:19:1e:79:0e:e8:b4:89:3e:3d:fb:61:a6:f9:29:ae:
ff:89:05:c9:b1:d7:eb:9c:7f:5b:b7:3a:44:62:85:c5:61:6d:
9a:45:0f:21:50:bb:ad:50:51:42:3b:52:9c:ad:71:64:9d:cf:
ca:e9:01:c2:02:0c:d6:51:91:a0:43:ff:9d:a9:4a:b2:1b:4e:
8f:ab:6e:99:b0:5a:e8:ca:3b:3d:40:f0:9c:66:19:13:6d:66:
67:e4:90:2e:93:4c:6e:24:75:ec:e6:fc:be:9e:b0:61:48:f2:
5d:59:fc:b6:e0:e9:3c:9f:ff:f2:bd:e4:ca:cf:b5:b2:e2:31:
02:92:23:f5:0b:4f:0f:ad:77:39:e6:e1:ff:f6:5a:74:1c:75:
95:6d:76:e8:0f:77:da:ad:d0:06:25:ad:fd:14:96:04:6e:2c:
8f:f9:24:37:ea:f6:39:01:0c:5f:df:8c:a2:a1:5d:32:ea:48:
4e:16:b1:04:82:be:a1:2b:de:1e:5f:7d:e3:90:5d:22:d4:0c:
64:da:9c:b8:db:67:30:67:41:ff:b7:52:e6:5c:52:e6:3d:53:
6b:b5:d9:81:40:05:c2:16:39:6c:57:03:79:f0:9e:e3:c9:b5:
c3:62:ab:96
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4w4C8oRF12QYD4niljTZm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMWEwOGRiNDYyOTViNGRlOGFmMmI5ZjkwZDZmZmM3NmNj
YTMxOWEwHhcNMjYwNTE2MTMwMDU4WhcNMjYwNTE3MTMwMDU4WjAzMTEwLwYDVQQD
EygyYjFhZGU4NTFhYzE3YTc1ZWE3NjgzMzNjYzdiODM4Yjc3NWNkOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+5g2DCQ3QsMGFwhOMEUIlGpuu4y
eOmzBiT1OqbveyKQjsjRhP7XokU/q1DukaZVBFkzET3I3fKdPDCAmwNFbbDG2AE4
xJ3Hp8JhTl715E/kYzhrulaTL2ApbUSlfA0Hji5W1D5rTLiRhmY9AAvLvcCAIAuv
8s59dvv2xutlGSq+zYILxDZJM4Q2mqLUaQ508ZZnJJTq8pIatptLLS3Nl5yNxM++
1gUCkx2s620POpij7xAPd2olFzS4wYQcbHbbmOkvDxaBd0DLTs+8EOy8WV7igw99
2VAB/ZcPRDvFHdG0Nv/XykNS0aRRSdHMiKqdmkLrpLjwQbMDjmTDGOarwwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCsa3oUawXp16naDM8x7g4t3XNkYMB8GA1UdIwQY
MBaAFPsaCNtGKVtN6K8rn5DW/8dsyjGaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14b0kyMFlwVzAzb3J5dWZrTmJfeDJ6S01aby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzIvYjhkY2YxLWJjOTMtNDU2ZC1hZDE2
LWI4ODk4ZTY2YjNlMy8xLzEteG9JMjBZcFcwM29yeXVma05iX3gyektNWm8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzMyL2I4ZGNmMS1iYzkzLTQ1NmQtYWQxNi1iODg5OGU2NmIz
ZTMvMS8xLXhvSTIwWXBXMDNvcnl1ZmtOYl94MnpLTVpvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNAb
kCGoKCShWXE09fwUfRS6vCPpGR55Dui0iT49+2Gm+Smu/4kFybHX65x/W7c6RGKF
xWFtmkUPIVC7rVBRQjtSnK1xZJ3PyukBwgIM1lGRoEP/nalKshtOj6tumbBa6Mo7
PUDwnGYZE21mZ+SQLpNMbiR17Ob8vp6wYUjyXVn8tuDpPJ//8r3kys+1suIxApIj
9QtPD613Oebh//ZadBx1lW126A932q3QBiWt/RSWBG4sj/kkN+r2OQEMX9+MoqFd
MupIThaxBIK+oSveHl9945BdItQMZNqcuNtnMGdB/7dS5lxS5j1Ta7XZgUAFwhY5
bFcDefCe48m1w2Krlg==
-----END CERTIFICATE-----
Generated at Sat May 16 18:39:35 2026 by rpki-client