Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: BsC97Lh3YQkv7uFHP9oNl01zw9ZC1vCamo6RZqn9Ga8=
Subject key identifier: B1:6F:36:77:E3:71:B1:FA:B3:AF:AA:98:BC:38:2F:52:CC:BC:CA:F3
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019E2FCDF0B27B936D4128E366CDB778ADC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 08:01:25 +0000
Manifest this update: Sat 16 May 2026 08:01:25 +0000
Manifest next update: Sun 17 May 2026 08:01:25 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: 9jk1YwoQCctZKS427Ty3xBygVjIhsluj+g4QWUG/IAA=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:f0:b2:7b:93:6d:41:28:e3:66:cd:b7:78:ad:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: May 16 08:01:25 2026 GMT
Not After : May 17 08:01:25 2026 GMT
Subject: CN=b16f3677e371b1fab3afaa98bc382f52ccbccaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:19:8f:5a:52:22:e1:55:f3:a4:80:33:52:
9d:6e:45:11:aa:9a:22:02:87:cb:17:15:24:a1:00:
34:a6:c2:08:6b:01:c7:23:ae:a1:b4:46:0f:00:05:
45:30:6e:79:5f:7a:f0:7d:d6:86:91:64:5a:b9:35:
29:80:66:df:e9:e0:f0:36:61:4f:e3:79:2a:d2:f1:
3f:f1:33:9b:f2:6f:1f:95:7d:c1:36:6d:75:8f:53:
88:b5:e3:c5:11:2c:f4:d1:b3:00:70:fb:95:14:32:
99:88:78:28:2b:37:6c:83:e5:10:1e:fe:36:68:51:
ba:98:a1:0d:81:ea:de:d1:67:c8:8e:e7:32:86:3e:
ef:29:b6:b1:77:e7:b5:fa:10:57:1d:67:b7:54:dc:
bc:b7:d9:5e:b8:b1:6c:1d:44:bb:ac:1d:21:42:20:
96:ab:cd:8a:bc:f0:d4:b9:b5:01:89:e7:9f:16:27:
d6:bd:0f:63:44:a9:b0:40:7b:22:48:3e:a6:fe:a4:
2a:ec:c2:f2:a5:57:11:41:16:99:c7:9c:23:27:4d:
dd:27:4f:56:64:62:3b:6c:e4:0b:5d:4e:fb:fc:79:
5b:82:52:6d:f4:15:be:2c:3a:ef:77:7d:f3:bd:21:
49:dd:63:bd:d8:96:1e:bd:6d:72:39:44:dc:28:42:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6F:36:77:E3:71:B1:FA:B3:AF:AA:98:BC:38:2F:52:CC:BC:CA:F3
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:cc:a2:bf:47:9a:08:92:c6:25:e2:c0:54:74:c8:bf:74:29:
da:6c:44:dd:5b:ca:50:a1:f6:b2:7a:f2:26:22:00:44:0c:21:
ac:20:20:84:45:02:5f:c2:84:1b:9b:7a:f0:d5:74:a6:ec:90:
33:44:9d:15:68:5c:6b:c5:cf:ce:0e:1f:f9:2f:82:31:ca:78:
1c:37:25:be:4d:19:9e:bd:2c:f7:98:ca:0a:00:fd:13:98:57:
01:3f:e1:ed:b0:12:2e:56:b2:be:5d:c9:6c:e5:f1:4f:51:ce:
eb:01:e2:3f:2b:33:77:72:2d:93:77:8a:16:94:d2:38:f6:4f:
13:75:02:bd:5b:a8:7c:5b:86:56:d7:b1:f3:21:f9:a4:76:e3:
e1:66:ff:8d:09:52:ac:56:30:e6:af:16:bf:8a:a7:b0:fa:33:
7a:d9:3f:a1:c2:4f:7b:d9:b2:f5:3a:08:9a:8c:e1:67:4e:86:
e9:56:22:fa:11:f1:f0:ee:ae:8c:7c:f0:a0:48:96:12:7d:d3:
05:ea:d5:b4:56:12:7a:d1:fd:80:ae:2e:2d:92:7a:64:89:91:
c2:b4:98:00:63:74:77:ef:f1:2f:ca:13:26:26:5a:28:1c:0a:
dd:59:8d:42:00:94:df:c5:e6:8f:8d:8d:df:a6:0c:fc:38:cb:
ae:88:5d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:25 2026 by rpki-client