Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: P8FCwFrsKqCkiIup5DRomAo2TlFLIHwKTrDHhS1VwJA=
Subject key identifier: 51:22:F7:11:87:97:80:62:7E:E9:AD:3B:C2:73:76:BA:8F:E1:F8:F8
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019E314E5C75B0E151670C1E3EEBEF883324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 02E1
Signing time: Sat 16 May 2026 15:01:19 +0000
Manifest this update: Sat 16 May 2026 15:01:19 +0000
Manifest next update: Sun 17 May 2026 15:01:19 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: SYAbmcR412ZuCAYOr0BGaunAVTvH2eDKTKhbI7c/z6k=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:5c:75:b0:e1:51:67:0c:1e:3e:eb:ef:88:33:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: May 16 15:01:19 2026 GMT
Not After : May 17 15:01:19 2026 GMT
Subject: CN=5122f711879780627ee9ad3bc27376ba8fe1f8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:cf:bb:2a:a5:a7:82:91:0c:77:eb:a5:65:
36:cb:31:6e:24:80:30:82:cc:49:67:eb:b6:5d:9b:
bb:d4:88:ea:db:84:be:f5:89:7a:18:9d:ec:3b:6e:
68:35:3d:c9:81:ba:fb:b6:95:73:8a:a6:22:53:92:
90:c5:2b:4e:98:f5:cb:98:0c:24:b3:d9:e4:4c:04:
6b:fc:09:d6:59:b6:8f:25:a9:e5:53:9b:53:dd:e3:
db:ed:a7:95:41:af:ee:9c:a8:f7:bb:8c:81:bf:5f:
8c:d8:da:2e:ec:15:3a:7d:f1:8b:70:fb:66:ce:fc:
4a:d0:18:15:2a:78:76:23:c1:77:62:4f:45:ea:e2:
b0:c6:a8:dc:6e:d6:6f:3f:ce:44:a0:7e:27:f4:e6:
84:25:a0:36:c0:4c:06:17:8b:6e:aa:43:3b:0b:5e:
9d:98:7e:dc:10:26:6b:cd:75:b7:d1:a0:82:86:59:
80:f9:77:7e:03:43:0a:c5:03:3c:3f:d9:91:64:a4:
88:8a:84:8f:46:b8:7b:11:03:69:40:d5:88:5f:53:
63:21:20:ee:cd:72:ea:78:b8:40:e4:48:11:11:be:
84:54:1c:a2:79:7f:0d:ec:c5:bd:a9:ea:18:9e:ab:
b3:76:9c:7f:72:5a:ba:d7:ee:60:e2:cf:08:d7:54:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:F7:11:87:97:80:62:7E:E9:AD:3B:C2:73:76:BA:8F:E1:F8:F8
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:19:a5:c1:cf:ef:ad:da:77:d1:2d:25:f6:62:1d:44:01:f7:
51:42:01:37:38:d7:77:fd:08:2b:eb:cd:eb:17:0c:53:b1:b5:
45:25:0a:a6:b5:0a:72:f3:ce:55:06:f4:6e:50:e6:7d:20:a1:
d0:0f:cb:6f:2b:90:31:89:f6:82:a2:b5:3a:07:c0:8a:9c:cb:
8c:ee:a9:d1:29:cf:17:1e:55:85:e3:11:dd:62:d5:02:11:05:
34:ee:b6:3a:c8:b0:ad:88:30:11:7a:bb:b2:2f:ca:5c:0b:9c:
62:3c:05:92:6b:a6:53:a9:fc:43:76:91:e6:20:b5:fe:56:2e:
d4:5a:2e:9a:d0:78:fc:48:17:26:d1:84:a1:31:78:05:9e:d7:
23:c2:1c:7e:70:51:9c:97:f4:51:47:fe:dd:53:9c:56:ac:a3:
9d:3a:57:dd:28:2f:16:35:18:03:d6:ab:e9:32:11:8e:64:bf:
5f:52:0e:d7:a0:d9:3b:b7:32:df:70:4a:dd:1e:8e:37:9c:f4:
e9:a8:c1:ec:dd:25:7f:38:a4:d5:bd:66:f3:1b:41:ad:77:bf:
8c:ff:2e:18:7e:87:a8:34:fc:4e:c1:98:89:75:e0:f4:d9:06:
22:da:e7:86:3a:49:ba:75:8a:54:1e:cb:ab:46:49:0f:72:dd:
55:da:c3:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xTlx1sOFRZwwePuvviDMkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTU0OWY1NzViMDQ3YmNiZGMzM2U3ZDJkMzZlZGE4NDcx
ZmRlY2EwHhcNMjYwNTE2MTUwMTE5WhcNMjYwNTE3MTUwMTE5WjAzMTEwLwYDVQQD
Eyg1MTIyZjcxMTg3OTc4MDYyN2VlOWFkM2JjMjczNzZiYThmZTFmOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iXPuyqlp4KRDHfrpWU2yzFuJIAw
gsxJZ+u2XZu71Ijq24S+9Yl6GJ3sO25oNT3Jgbr7tpVziqYiU5KQxStOmPXLmAwk
s9nkTARr/AnWWbaPJanlU5tT3ePb7aeVQa/unKj3u4yBv1+M2Nou7BU6ffGLcPtm
zvxK0BgVKnh2I8F3Yk9F6uKwxqjcbtZvP85EoH4n9OaEJaA2wEwGF4tuqkM7C16d
mH7cECZrzXW30aCChlmA+Xd+A0MKxQM8P9mRZKSIioSPRrh7EQNpQNWIX1NjISDu
zXLqeLhA5EgREb6EVByieX8N7MW9qeoYnquzdpx/clq61+5g4s8I11TlnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEi9xGHl4BifumtO8JzdrqP4fj4MB8GA1UdIwQY
MBaAFNYVSfV1sEe8vcM+fS027ahHH97KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMt
NWZkMDk4ZjM0NTlkLzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNmQyNWItZDU0My00MjJkLThiNDMtNWZkMDk4ZjM0NTlk
LzEvMWhWSjlYV3dSN3k5d3o1OUxUYnRxRWNmM3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhmlwc/v
rdp30S0l9mIdRAH3UUIBNzjXd/0IK+vN6xcMU7G1RSUKprUKcvPOVQb0blDmfSCh
0A/LbyuQMYn2gqK1OgfAipzLjO6p0SnPFx5VheMR3WLVAhEFNO62OsiwrYgwEXq7
si/KXAucYjwFkmumU6n8Q3aR5iC1/lYu1FoumtB4/EgXJtGEoTF4BZ7XI8IcfnBR
nJf0UUf+3VOcVqyjnTpX3SgvFjUYA9ar6TIRjmS/X1IO16DZO7cy33BK3R6ON5z0
6ajB7N0lfzik1b1m8xtBrXe/jP8uGH6HqDT8TsGYiXXg9NkGItrnhjpJunWKVB7L
q0ZJD3LdVdrDVQ==
-----END CERTIFICATE-----
Generated at Sat May 16 21:14:07 2026 by rpki-client