Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
File: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft (raw, json)
Hash identifier: Q1SmKFa6nn8tG37904dtLD1jNpETs0RAAJkTI3YzxsU=
Subject key identifier: 1D:DB:06:1E:CD:4F:90:82:48:79:03:98:31:3A:7B:1A:65:44:56:CD
Authority key identifier: D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
Certificate issuer: /CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Certificate serial: 019E3184C0E53192790EB1C9C199F0ABA310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
Manifest number: 191D
Signing time: Sat 16 May 2026 16:00:44 +0000
Manifest this update: Sat 16 May 2026 16:00:44 +0000
Manifest next update: Sun 17 May 2026 16:00:44 +0000
Files and hashes: 1: 1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl (hash: D2OgmFM/rlChWC8DqA8BJ0oi/f3OsM6Y4bggomnbLPs=)
2: Gez5PpAamR2Dld4nToIpywC4n04.roa (hash: DLzb0cAOuJy5ZOk7xS5DW/f6ULYNGKEl0VG/BvqN4oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:84:c0:e5:31:92:79:0e:b1:c9:c1:99:f0:ab:a3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d612742b91d770fe8efbc9b5dcf8dc38984dd0f0
Validity
Not Before: May 16 16:00:44 2026 GMT
Not After : May 17 16:00:44 2026 GMT
Subject: CN=1ddb061ecd4f908248790398313a7b1a654456cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:26:b5:21:a1:af:dd:d5:4f:2e:0b:a0:e9:
a0:35:41:3f:a9:2f:6c:03:79:e7:d1:cc:5b:47:2f:
d4:12:08:3b:ca:15:b2:4c:c8:fc:9e:b7:2a:a2:b0:
ee:d3:a0:cd:1c:3c:d4:71:20:6d:88:eb:96:6b:54:
6a:b7:cf:08:2f:87:a7:4d:6b:37:82:4f:7b:b1:36:
af:72:2a:79:a4:39:b4:a2:08:e9:74:44:c9:5a:2a:
dc:c7:f6:23:c6:cc:1e:a5:49:88:a9:13:1e:9f:c9:
e8:ea:6c:5c:c6:1e:40:62:cf:e0:5f:87:55:10:91:
9f:22:10:f2:91:ed:6b:c1:59:0d:6a:a7:11:f9:ee:
f2:58:14:1c:9f:e8:41:c6:aa:d1:66:11:9c:6d:63:
12:56:fd:63:e5:36:43:07:46:5e:1e:ab:3b:f5:90:
82:a1:a6:a8:26:03:dd:99:54:3b:60:fb:00:af:70:
3a:9c:26:4b:35:28:64:df:6c:f2:8e:52:c2:e6:ae:
7a:d3:ba:a9:9d:3d:03:a1:2b:22:7c:c9:6b:fd:cb:
25:7b:aa:bc:d6:83:af:e6:d5:9b:07:b1:26:c1:ab:
c8:b0:f5:0d:a3:3f:9e:72:74:ee:46:28:1f:40:ec:
0d:e5:e3:fc:25:76:d5:cb:06:b7:c9:d2:b7:67:d0:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:06:1E:CD:4F:90:82:48:79:03:98:31:3A:7B:1A:65:44:56:CD
X509v3 Authority Key Identifier:
keyid:D6:12:74:2B:91:D7:70:FE:8E:FB:C9:B5:DC:F8:DC:38:98:4D:D0:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hJ0K5HXcP6O-8m13PjcOJhN0PA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/13fb65-4ee7-4026-aa3a-9d56e3adca90/1/1hJ0K5HXcP6O-8m13PjcOJhN0PA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:29:e9:a0:19:af:1d:06:33:41:14:0d:60:e8:bc:6f:8e:18:
31:96:f3:67:94:e3:76:7f:48:52:06:05:08:1e:90:df:38:2e:
bc:74:4c:75:c3:d9:0c:32:43:54:36:66:d3:d4:41:79:f8:05:
10:98:9c:f7:2d:de:8a:0e:52:80:76:24:e8:8e:c2:e6:6e:4b:
08:58:1e:38:e5:21:34:74:6a:9a:1e:43:14:ef:85:53:4f:d7:
62:81:39:67:f0:1a:7c:b2:53:2a:13:db:6b:d4:da:c2:64:5d:
ac:81:db:0f:24:1c:8c:37:15:b4:14:a1:59:e4:58:cf:bd:d4:
6c:d3:16:d2:fd:80:56:60:97:43:58:c8:07:fe:a2:54:93:68:
a2:7a:1b:97:9f:c4:9d:4c:7f:e3:11:a4:a5:ad:4e:43:50:e6:
33:da:70:8d:3a:5e:27:cd:c9:0b:fe:a8:3c:8c:c0:d5:c3:76:
0e:a6:b2:b7:d7:ea:e5:e3:72:27:75:ff:8a:9b:9f:29:9c:0d:
51:ed:10:e5:ae:d3:c0:7e:4b:24:30:dc:36:bc:73:87:ab:72:
4d:d4:f3:8b:4e:77:39:d4:6f:e1:69:60:c0:fa:e7:e0:a1:cd:
e3:62:e5:91:cf:04:54:d1:a9:ee:2d:19:87:6b:ee:6d:36:22:
c7:15:e8:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhMDlMZJ5DrHJwZnwq6MQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTI3NDJiOTFkNzcwZmU4ZWZiYzliNWRjZjhkYzM4OTg0
ZGQwZjAwHhcNMjYwNTE2MTYwMDQ0WhcNMjYwNTE3MTYwMDQ0WjAzMTEwLwYDVQQD
EygxZGRiMDYxZWNkNGY5MDgyNDg3OTAzOTgzMTNhN2IxYTY1NDQ1NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoQmtSGhr93VTy4LoOmgNUE/qS9s
A3nn0cxbRy/UEgg7yhWyTMj8nrcqorDu06DNHDzUcSBtiOuWa1Rqt88IL4enTWs3
gk97sTavcip5pDm0ogjpdETJWircx/YjxswepUmIqRMen8no6mxcxh5AYs/gX4dV
EJGfIhDyke1rwVkNaqcR+e7yWBQcn+hBxqrRZhGcbWMSVv1j5TZDB0ZeHqs79ZCC
oaaoJgPdmVQ7YPsAr3A6nCZLNShk32zyjlLC5q5607qpnT0DoSsifMlr/csle6q8
1oOv5tWbB7EmwavIsPUNoz+ecnTuRigfQOwN5eP8JXbVywa3ydK3Z9B4MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3bBh7NT5CCSHkDmDE6explRFbNMB8GA1UdIwQY
MBaAFNYSdCuR13D+jvvJtdz43DiYTdDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2Et
OWQ1NmUzYWRjYTkwLzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8xM2ZiNjUtNGVlNy00MDI2LWFhM2EtOWQ1NmUzYWRjYTkw
LzEvMWhKMEs1SFhjUDZPLThtMTNQamNPSmhOMFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCnpoBmv
HQYzQRQNYOi8b44YMZbzZ5Tjdn9IUgYFCB6Q3zguvHRMdcPZDDJDVDZm09RBefgF
EJic9y3eig5SgHYk6I7C5m5LCFgeOOUhNHRqmh5DFO+FU0/XYoE5Z/AafLJTKhPb
a9TawmRdrIHbDyQcjDcVtBShWeRYz73UbNMW0v2AVmCXQ1jIB/6iVJNoonobl5/E
nUx/4xGkpa1OQ1DmM9pwjTpeJ83JC/6oPIzA1cN2Dqayt9fq5eNyJ3X/ipufKZwN
Ue0Q5a7TwH5LJDDcNrxzh6tyTdTzi053OdRv4WlgwPrn4KHN42Llkc8EVNGp7i0Z
h2vubTYixxXoRw==
-----END CERTIFICATE-----
Generated at Sat May 16 18:41:44 2026 by rpki-client