Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: gd0jc2TBB1BnygHnPhImwNS9lZ8uuaDdcZ4g7+S7a1s=
Subject key identifier: 28:94:E4:A5:0A:9D:C4:45:DF:93:15:56:47:6B:BD:D5:36:01:13:88
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019DB246FDA10D46B5817FF8338A5A8038CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 169D
Signing time: Tue 21 Apr 2026 23:01:30 +0000
Manifest this update: Tue 21 Apr 2026 23:01:30 +0000
Manifest next update: Wed 22 Apr 2026 23:01:30 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: 4NfBk5FuHz+KM8c0yVIeUxa/CySfjgVMKyO7NnwBvZg=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:fd:a1:0d:46:b5:81:7f:f8:33:8a:5a:80:38:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Apr 21 23:01:30 2026 GMT
Not After : Apr 22 23:01:30 2026 GMT
Subject: CN=2894e4a50a9dc445df931556476bbdd536011388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:a7:04:e8:ff:fd:84:3e:78:f3:ad:76:60:
5a:1e:43:b5:59:ae:a5:fc:81:92:6a:96:79:38:64:
2c:2d:1f:48:dc:b8:f6:e4:f7:66:cb:e3:22:d9:8a:
39:82:01:cb:80:f0:30:15:a9:cc:f3:bb:d6:44:09:
5d:ce:ee:03:ec:25:ef:6e:a2:a9:00:2d:20:27:94:
d9:0b:7a:d7:d3:dd:2a:37:e6:d5:9c:a5:0d:5c:3c:
0b:7f:ad:dd:cc:bf:78:bd:1a:8f:19:70:b9:a0:f5:
4e:b8:ee:99:6d:75:ca:60:e7:c2:dd:87:79:9d:fe:
75:c2:36:9e:75:31:bb:4e:69:c4:03:6b:3b:ea:37:
57:5f:6f:c9:85:65:b6:31:53:ac:67:e2:52:d9:fb:
1f:fd:63:ae:8c:89:db:af:bd:2d:bc:74:73:f2:89:
7b:8c:19:4e:6c:af:f8:ca:bc:0b:c1:ac:34:b9:ff:
ef:c1:f1:18:42:3a:ed:fa:36:5f:1b:d2:11:95:b0:
27:a0:a6:49:57:40:1e:e3:08:9e:c5:38:4f:06:db:
58:c2:24:17:46:75:1c:1d:80:7f:52:a4:8e:58:9b:
68:ed:75:37:dd:3b:76:5e:a5:6c:9a:26:f1:0b:ed:
d7:64:5b:49:28:59:e2:b8:0c:ad:8d:0b:9d:64:96:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:94:E4:A5:0A:9D:C4:45:DF:93:15:56:47:6B:BD:D5:36:01:13:88
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:39:4d:25:1e:8f:de:1a:5d:87:79:12:0d:d0:19:ae:49:46:
d1:8c:87:47:eb:35:0c:4e:ab:e2:97:8f:6c:da:b1:01:71:0b:
32:35:a5:f6:a2:4b:a9:fd:8a:5a:3d:3d:9e:6d:00:dd:c5:45:
e3:a8:7b:be:87:92:b2:b7:3d:66:10:be:5f:fb:dd:75:3c:32:
f7:1d:c0:52:8d:0a:6d:35:6c:70:ab:1d:60:ff:6e:0a:87:ce:
08:e7:c5:c0:42:cd:7b:98:3a:b8:57:4d:7a:07:aa:d3:a2:08:
e2:e0:00:22:06:f1:8c:26:89:ed:e0:38:d0:c0:4e:36:50:40:
25:30:4c:69:1a:48:ec:c7:5b:8c:e8:5d:d9:60:06:16:6f:ed:
96:68:3f:e4:41:eb:35:36:d5:a4:59:39:a1:ed:25:5f:09:50:
f4:d9:fc:c4:fd:d1:75:15:23:d0:0e:01:4a:49:5c:5b:16:d9:
0d:73:4b:b8:d7:34:bc:77:e0:4f:8d:81:10:da:9e:04:59:4f:
64:e8:3b:be:5f:6d:8f:00:08:96:d7:27:a6:95:b8:6b:60:a3:
6d:99:95:ab:ad:44:84:d1:b5:11:24:b3:55:2b:f6:e1:9b:94:
4e:4a:64:d1:6f:68:6e:82:fe:c7:fa:2d:2d:d2:f0:75:24:cd:
85:d5:a4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 05:26:50 2026 by rpki-client