Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
File: 1Xx9sE54wiHz3yoq8IK1GNliqPA.mft (raw, json)
Hash identifier: Phe21+yStsdZDW3J+n19aHjjLU42JRQB2Nnv80X740g=
Subject key identifier: 6C:E1:BC:BE:5A:54:7D:B4:7A:76:01:AE:6D:2B:88:E4:8B:D3:99:11
Authority key identifier: D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
Certificate issuer: /CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Certificate serial: 019E9BF318A47BD9A3606E4D4C7DB777FC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
Manifest number: 1716
Signing time: Sat 06 Jun 2026 08:01:00 +0000
Manifest this update: Sat 06 Jun 2026 08:01:00 +0000
Manifest next update: Sun 07 Jun 2026 08:01:00 +0000
Files and hashes: 1: 1Xx9sE54wiHz3yoq8IK1GNliqPA.crl (hash: RASmLlfqNlUjtrpmYcnTFX6Z14sx3vY6j/qhdEb4fSI=)
2: I9OU46hLv3YAsUVV8jYm-K3ogQc.roa (hash: PTrVMEbjSSvbOH15AKpjuFbu9tPLz/RRTf10Mbtb4p4=)
3: rbBoW2EoIYr4WTvaRxP1eRxLC9A.roa (hash: J3nkU/5cOyHNdOGxEte3et6IIXxfoCGaTYZOSkdKSjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:f3:18:a4:7b:d9:a3:60:6e:4d:4c:7d:b7:77:fc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57c7db04e78c221f3df2a2af082b518d962a8f0
Validity
Not Before: Jun 6 08:01:00 2026 GMT
Not After : Jun 7 08:01:00 2026 GMT
Subject: CN=6ce1bcbe5a547db47a7601ae6d2b88e48bd39911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:61:98:dc:11:b1:36:72:8d:85:c0:95:4d:56:
5c:75:42:74:ea:1b:3a:08:32:d6:8c:42:31:0c:78:
09:82:4e:15:66:58:d2:c1:c6:e2:2d:48:5e:f0:7c:
20:59:a1:21:d6:6e:63:7e:15:f4:66:b0:15:e8:2b:
e3:a4:17:f1:9a:57:d3:4d:62:77:1e:27:a1:b6:15:
b0:0f:ee:b7:8c:ac:09:63:fd:80:8e:85:6c:19:74:
e8:73:e8:0d:b6:cd:96:5a:fa:05:3c:45:73:d4:5c:
24:3f:aa:e4:f1:57:f1:5a:d7:2d:31:95:af:46:fc:
b3:a5:3d:5b:75:45:a1:79:d5:ce:df:02:5d:68:b1:
6a:7e:75:ad:a9:e3:6d:04:11:f8:e0:35:86:d4:3a:
55:4f:0b:f3:71:e4:48:2d:81:87:cd:9a:e0:e9:99:
69:f2:cb:00:bb:37:71:e5:12:3c:f6:95:42:f7:9f:
69:63:54:09:48:f3:3a:5e:2f:26:d4:4c:7b:b7:cc:
38:65:35:d1:a8:85:ab:20:10:b5:d7:db:da:56:12:
6d:a1:20:93:e2:09:6e:45:e8:c7:fe:94:7e:fa:86:
6f:79:d8:e7:c3:e1:5c:f7:d2:c1:ec:3c:c2:01:0f:
cd:ee:b9:52:e5:57:5a:a9:17:9c:61:88:0f:52:c0:
9e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E1:BC:BE:5A:54:7D:B4:7A:76:01:AE:6D:2B:88:E4:8B:D3:99:11
X509v3 Authority Key Identifier:
keyid:D5:7C:7D:B0:4E:78:C2:21:F3:DF:2A:2A:F0:82:B5:18:D9:62:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xx9sE54wiHz3yoq8IK1GNliqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/18d059-3cb2-46bf-a588-fe95a9af3adc/1/1Xx9sE54wiHz3yoq8IK1GNliqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c9:8f:2a:95:1d:59:71:18:24:fc:a5:2a:b4:6f:2e:b5:7d:
08:1f:80:27:59:39:44:50:29:49:59:cf:a4:7d:d7:d6:24:13:
b9:35:19:6f:b2:2e:28:d7:17:3a:ca:27:64:c3:cc:46:cf:2c:
72:5c:a7:2e:c0:90:53:5b:d0:04:c8:d7:42:30:d6:8a:a1:aa:
f4:ab:c6:ce:1d:77:06:7d:fd:49:a3:9e:e0:e7:73:82:49:d3:
1b:fa:65:ce:ae:10:d1:d4:cf:59:28:b7:8e:24:d6:e1:ab:34:
26:5e:c0:57:93:52:6b:37:47:d7:ba:1a:56:54:40:43:8d:88:
f2:03:17:96:56:b9:9d:6f:f9:bf:75:c8:09:58:8b:bd:45:c4:
52:51:06:f2:03:a2:41:ac:51:9e:92:ca:ce:a7:53:f7:e6:a9:
89:c5:26:0b:42:41:83:6d:04:30:d8:b5:3c:3c:35:08:6c:b0:
3b:4d:94:af:8b:f2:68:a7:15:fc:c8:f7:0a:41:d8:82:44:8c:
d9:b0:82:48:ea:ec:69:01:62:ae:7a:7d:ca:45:38:f2:77:24:
d5:d0:f9:2e:61:19:cc:f9:f2:ba:a0:7f:c4:a5:f9:2a:bb:e3:
73:73:88:13:dc:39:cf:4b:ee:00:37:01:65:13:ca:f8:c2:67:
ae:fa:cc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:06:23 2026 by rpki-client