Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier: Dw3BYdFmrwYGA5Zc/u+Me0ec7rV+2R+Bv48oSp5Y3vY=
Subject key identifier: AC:45:56:15:CE:6C:5C:0F:6C:D9:7B:D3:39:2F:22:3C:06:70:A8:FC
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial: 019E3004BA229909F8AFF2C7581716D85167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number: 07E9
Signing time: Sat 16 May 2026 09:01:16 +0000
Manifest this update: Sat 16 May 2026 09:01:16 +0000
Manifest next update: Sun 17 May 2026 09:01:16 +0000
Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: SgKUDAydM7AW11m/7SnOT7btP8z2KrUv7DsOvwiAwGY=)
2: UrtdSIofhaNFKk3JSuwNs4gGVYM.roa (hash: ggNMIGKU56jLb1aZj1uZ1UliAG9bzA5REzJSwfmL/7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:ba:22:99:09:f8:af:f2:c7:58:17:16:d8:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Validity
Not Before: May 16 09:01:16 2026 GMT
Not After : May 17 09:01:16 2026 GMT
Subject: CN=ac455615ce6c5c0f6cd97bd3392f223c0670a8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:18:1c:a1:56:02:40:6e:09:f6:37:3e:94:
7b:92:f8:de:d0:e9:93:e4:66:a4:da:5f:d3:28:db:
71:0d:de:64:f2:38:bd:55:db:5c:af:35:8e:2a:60:
a0:4a:85:f2:e2:18:47:b0:fd:39:90:10:1d:a0:a3:
d1:22:d6:99:10:1b:ee:bf:67:6a:92:7f:6a:09:92:
ce:d2:65:63:ee:c5:1e:d8:f1:36:72:1e:71:72:73:
5e:5f:11:6a:79:a0:47:85:d4:b4:c6:ae:4c:35:22:
b2:93:3c:57:f8:24:de:9d:95:49:f8:84:35:38:ab:
df:5d:3b:d2:25:da:24:a0:0f:76:64:64:93:00:2d:
3f:4a:d0:27:dc:60:28:91:8c:17:dd:c1:82:f1:12:
61:63:09:32:ce:40:40:52:25:ba:72:a8:a0:05:e9:
7e:f1:61:20:c8:34:28:85:62:dd:5c:a1:41:64:b9:
01:31:e8:d6:00:4f:e6:e4:34:d2:7c:5c:5e:97:26:
bf:cb:74:a4:de:1b:42:2f:59:ec:69:86:db:50:04:
01:8a:14:ae:f8:2d:5a:b2:01:23:de:bc:5d:71:eb:
52:1f:9c:e2:84:a0:a8:69:f1:16:47:62:84:91:d2:
f5:c2:f3:96:bb:c3:57:db:66:59:fe:e3:dc:9b:77:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:45:56:15:CE:6C:5C:0F:6C:D9:7B:D3:39:2F:22:3C:06:70:A8:FC
X509v3 Authority Key Identifier:
keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:88:4e:0c:8f:b7:c1:39:1e:44:e7:13:f9:bb:c7:c1:f8:1f:
15:30:80:2d:9a:a3:02:04:07:5d:b4:e6:1c:52:04:be:28:23:
13:2b:a6:ef:ff:f0:d2:b3:39:81:d1:61:7a:b6:3c:a8:c0:bf:
bb:30:33:ae:9e:13:e0:56:1d:7d:39:c7:1a:1f:3c:41:9b:f7:
63:d3:ce:76:dc:1c:8f:a0:d1:42:ee:94:4f:7c:e7:54:21:65:
6d:de:95:05:5f:0f:df:d3:ae:a0:e0:55:21:7d:a9:c4:b1:a9:
39:52:94:40:59:ae:0c:80:94:a6:97:29:4f:5c:b6:bf:a8:3a:
7d:af:42:39:6a:f2:85:ee:e4:f3:6b:8f:62:2c:a8:3e:9e:39:
81:ac:b8:b5:05:5a:19:f8:25:6c:8c:3c:c4:35:e5:cd:93:fd:
5f:7c:e9:50:56:a6:81:b6:48:0d:8e:70:7b:cb:68:67:f1:c3:
b6:d8:72:a6:ec:fb:65:ef:f2:a5:fc:c4:b8:01:99:aa:3e:eb:
ed:e9:38:d8:e0:6d:31:51:0f:b7:44:5c:6f:fc:71:af:d8:25:
f8:13:03:46:f6:8a:06:09:d4:46:15:04:92:84:26:13:f1:36:
9d:6f:4b:bf:39:a7:9b:05:d0:73:39:50:b2:70:f5:3b:4a:51:
25:8e:d8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wBLoimQn4r/LHWBcW2FFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2E1NWQyZTNiOTE2M2NjNDg4YjZmN2FiZTYyZWIyNmU3
YThjMzgwHhcNMjYwNTE2MDkwMTE2WhcNMjYwNTE3MDkwMTE2WjAzMTEwLwYDVQQD
EyhhYzQ1NTYxNWNlNmM1YzBmNmNkOTdiZDMzOTJmMjIzYzA2NzBhOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUUYHKFWAkBuCfY3PpR7kvje0OmT
5Gak2l/TKNtxDd5k8ji9VdtcrzWOKmCgSoXy4hhHsP05kBAdoKPRItaZEBvuv2dq
kn9qCZLO0mVj7sUe2PE2ch5xcnNeXxFqeaBHhdS0xq5MNSKykzxX+CTenZVJ+IQ1
OKvfXTvSJdokoA92ZGSTAC0/StAn3GAokYwX3cGC8RJhYwkyzkBAUiW6cqigBel+
8WEgyDQohWLdXKFBZLkBMejWAE/m5DTSfFxelya/y3Sk3htCL1nsaYbbUAQBihSu
+C1asgEj3rxdcetSH5zihKCoafEWR2KEkdL1wvOWu8NX22ZZ/uPcm3f4WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxFVhXObFwPbNl70zkvIjwGcKj8MB8GA1UdIwQY
MBaAFNTKVdLjuRY8xIi296vmLrJueow4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2Et
YTRmMDEyOTNjYzA1LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xYzYwNWItMTdiMy00ODMzLWEwM2EtYTRmMDEyOTNjYzA1
LzEvMU1wVjB1TzVGanpFaUxiM3EtWXVzbTU2akRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApohODI+3
wTkeROcT+bvHwfgfFTCALZqjAgQHXbTmHFIEvigjEyum7//w0rM5gdFherY8qMC/
uzAzrp4T4FYdfTnHGh88QZv3Y9POdtwcj6DRQu6UT3znVCFlbd6VBV8P39OuoOBV
IX2pxLGpOVKUQFmuDICUppcpT1y2v6g6fa9COWryhe7k82uPYiyoPp45gay4tQVa
GfglbIw8xDXlzZP9X3zpUFamgbZIDY5we8toZ/HDtthypuz7Ze/ypfzEuAGZqj7r
7ek42OBtMVEPt0Rcb/xxr9gl+BMDRvaKBgnURhUEkoQmE/E2nW9LvzmnmwXQczlQ
snD1O0pRJY7YsQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:57:34 2026 by rpki-client