Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier: 5xNHzg28ppGvkukYgnMQ8aWsnabMQhfmVnsOcZYr50U=
Subject key identifier: 73:33:01:C4:47:53:FA:7A:69:A4:5F:ED:5E:D3:0D:FF:81:79:8F:BC
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial: 019E4A697283D998151A13B3B6D285295821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number: 18A0
Signing time: Thu 21 May 2026 12:01:25 +0000
Manifest this update: Thu 21 May 2026 12:01:25 +0000
Manifest next update: Fri 22 May 2026 12:01:25 +0000
Files and hashes: 1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: 5wpKH4ysOdiGOMQqx9KhpakpMD3DVOWT8lwp2Cinw6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:69:72:83:d9:98:15:1a:13:b3:b6:d2:85:29:58:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Validity
Not Before: May 21 12:01:25 2026 GMT
Not After : May 22 12:01:25 2026 GMT
Subject: CN=733301c44753fa7a69a45fed5ed30dff81798fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:be:7b:b4:f7:22:46:24:d3:b6:c2:8d:c0:
d0:1f:d8:e3:e2:23:8b:dc:e3:81:b1:e2:fe:19:69:
dc:2a:23:a8:14:30:f2:52:e7:08:0d:fc:99:ff:d6:
e4:7d:05:1b:43:74:d1:de:87:3d:13:83:65:18:2c:
19:19:0f:24:2a:d1:c5:ad:1b:4b:ad:f0:73:8e:45:
95:c9:44:3e:c1:90:72:ce:6c:e1:d7:dd:2a:be:24:
0c:5d:94:27:9a:9b:98:77:ae:b8:e8:6c:d0:73:18:
43:11:b5:c5:67:57:66:84:7b:dc:19:60:94:c2:83:
9c:8c:38:bc:e4:ee:5d:65:9f:f6:21:f6:dd:d8:53:
c4:b2:ba:de:1b:c7:d9:b8:b0:43:95:d9:60:43:a6:
7e:db:fa:03:bc:f0:90:95:f0:e1:63:51:cc:02:8c:
d9:99:cd:be:51:73:ac:9e:ce:63:47:15:d9:cf:7f:
b2:76:11:09:03:14:11:2c:c0:91:07:f9:08:bd:a1:
49:92:2e:fc:26:f2:96:51:ce:26:b9:d2:92:84:72:
30:78:72:ab:b4:48:6b:85:a3:8c:71:0b:ba:9b:6d:
4b:ac:6c:9f:39:45:a4:22:03:ed:6f:d2:a3:d0:27:
3b:2c:ff:eb:d5:8b:05:8b:5e:1f:3b:a7:41:0c:1b:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:33:01:C4:47:53:FA:7A:69:A4:5F:ED:5E:D3:0D:FF:81:79:8F:BC
X509v3 Authority Key Identifier:
keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1b:49:36:fa:d7:5a:fc:dc:90:c9:ed:74:68:6f:76:09:b3:
7a:89:5e:ba:5e:97:a4:07:a5:b8:f8:1d:b6:4a:e8:d5:9c:06:
42:b3:28:cf:0a:16:88:fd:73:69:29:eb:07:eb:05:e2:fc:4b:
4a:72:54:e0:92:cb:81:f7:3c:c5:93:83:15:a2:b2:9b:d8:a8:
58:32:40:04:e9:dc:5f:c1:7e:e0:dc:73:53:70:cb:29:2b:f9:
a9:4e:05:7f:7b:e2:c3:bc:33:c4:53:02:72:95:c6:34:9d:c0:
85:2b:a1:54:f3:e1:56:86:3d:d0:42:1f:5b:55:93:93:f5:65:
e3:4d:3b:ce:c9:ae:78:98:3b:07:53:5f:8b:ed:a8:b1:2c:2f:
e7:10:61:31:f7:ef:3d:a7:99:48:99:0e:14:53:85:e9:70:06:
80:33:4c:91:65:b5:41:53:37:7b:34:58:50:5d:6a:23:8c:71:
a8:ef:54:bb:d3:ed:a7:c4:18:89:44:90:f5:9e:45:49:e9:42:
b4:86:80:c5:61:48:89:d4:96:88:38:06:cd:c9:d6:07:e8:61:
5e:9e:3d:c1:b3:0a:3e:e7:97:79:c3:88:0f:fd:e0:0b:8c:3c:
0c:2b:6e:c4:a2:f1:fb:e4:ed:61:54:8c:f5:48:eb:6f:26:1e:
99:76:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:17:34 2026 by rpki-client