Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier: QFm0GGciJNJ/CGOL78GPL2iX/eI/SOpjUiQKzQmi2JA=
Subject key identifier: EC:8F:20:E3:83:13:3D:41:93:0A:5C:97:4B:93:0E:C9:05:A5:3B:4B
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 019E3117212662FC994CD80E5623F85E1040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number: 0700
Signing time: Sat 16 May 2026 14:00:59 +0000
Manifest this update: Sat 16 May 2026 14:00:59 +0000
Manifest next update: Sun 17 May 2026 14:00:59 +0000
Files and hashes: 1: 1-h29TFu81qQRwRTQtKfc7V6oGgw.roa (hash: j/GCQjpdQOAVMzUdmUHPipCJ4VSAK8zR3xsINI1wkiE=)
2: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: JVskjD53Ni82taXPvA9pcc+Jcym+3qctieD3VxgB+S0=)
3: VA3axwwQBEAh3SAZjVNVTalZ9aI.roa (hash: YtFl8mLZl6C/LoW3ZfK8hDiYR/xZr0E23c6JNCbR4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:21:26:62:fc:99:4c:d8:0e:56:23:f8:5e:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: May 16 14:00:59 2026 GMT
Not After : May 17 14:00:59 2026 GMT
Subject: CN=ec8f20e383133d41930a5c974b930ec905a53b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:42:1b:67:b3:e0:78:a3:f2:31:a0:82:13:
d4:38:1e:23:f9:48:3e:71:67:4f:c6:4b:7e:d0:af:
37:9e:44:73:c0:e7:5d:b4:62:b5:1a:60:6d:ac:08:
0e:cc:c5:40:55:6a:18:ba:b6:bc:fa:12:d9:7b:88:
3b:10:33:ee:08:34:87:8e:0c:af:45:11:84:61:fd:
55:9e:28:3e:25:2f:b3:1d:4a:6c:8a:d6:b3:7f:6f:
f9:a1:48:e8:da:b0:a2:54:5a:1c:5e:20:99:a8:20:
3a:aa:5b:55:cc:d7:ce:44:d3:21:bf:ee:28:1f:01:
9f:e0:88:ec:86:fa:b1:c9:9c:46:01:cf:d9:f4:bb:
c6:b9:25:44:04:30:fb:25:34:97:9f:57:59:80:f0:
cf:3c:0f:65:47:a7:b5:e5:33:ac:b5:20:3c:ae:f6:
4c:27:d1:74:8c:97:97:1c:22:95:b5:3e:fa:50:81:
23:79:09:1d:0f:88:04:29:d4:9e:d5:da:a1:6b:1e:
e7:ed:7b:bc:47:3d:75:28:5d:1b:22:6c:6d:43:f4:
94:e0:18:58:97:16:9a:56:d1:f2:1a:dd:b8:98:72:
ff:0e:1f:e0:83:a6:64:43:cc:44:d8:66:2c:b1:aa:
3c:0c:25:5a:b1:5f:fe:23:e4:eb:73:11:49:51:f2:
f8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8F:20:E3:83:13:3D:41:93:0A:5C:97:4B:93:0E:C9:05:A5:3B:4B
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4c:c0:f4:a6:e9:08:97:fb:b9:34:b2:9d:91:48:9e:ba:8f:
38:14:65:60:9d:bf:84:67:86:5e:b2:bd:cd:1a:a8:3a:ea:f6:
e3:23:d1:a9:1e:ec:8b:2d:17:9f:be:ac:b0:b5:d6:a7:9a:57:
ae:9f:3d:40:3f:6a:dc:a2:29:2d:16:9e:84:1d:78:4e:18:bc:
35:17:70:76:c1:1e:9e:8e:0e:71:8d:d8:4f:29:28:06:13:6b:
17:07:47:a5:35:dd:64:f9:e9:1a:27:f2:e2:ec:9f:9a:06:34:
bf:cb:5e:bd:d6:4d:49:41:6f:bf:17:19:10:95:30:84:80:4f:
47:ee:86:9a:12:4a:e0:4c:21:1a:44:06:6d:64:4b:7e:c2:42:
8a:96:ab:19:8b:78:6d:3d:95:8c:49:62:91:35:a6:1d:a2:b0:
28:e0:35:e6:65:81:54:63:fc:b3:b8:c3:41:72:16:f0:9f:81:
cc:e7:2c:d7:a9:35:e0:74:01:4d:13:9a:d0:51:3b:21:ec:ff:
1f:a4:24:ea:68:20:60:95:d3:8b:22:0c:2f:9b:99:7d:d5:d0:
36:4b:c1:72:2f:f8:15:b8:66:91:9e:40:30:8f:13:18:6c:5f:
52:6a:66:49:97:54:8a:99:82:d3:66:1f:1a:fa:8c:d8:bd:72:
2a:80:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:10 2026 by rpki-client