Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: KLFKV9CyHSigbMjIxljCQ6N4Fbtdi26UclIPPpLgyNk=
Subject key identifier: C3:D6:2C:2D:FA:35:B1:68:26:94:30:78:4F:22:C8:0B:20:2B:B4:19
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019D9A751B9F6AC6A80693DE478EAE8231D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 16A8
Signing time: Fri 17 Apr 2026 08:00:59 +0000
Manifest this update: Fri 17 Apr 2026 08:00:59 +0000
Manifest next update: Sat 18 Apr 2026 08:00:59 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: MMKEgKZ0xoiPZk7thmDRxUgui4pmRNx3U7EelcELhec=)
2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1b:9f:6a:c6:a8:06:93:de:47:8e:ae:82:31:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Apr 17 08:00:59 2026 GMT
Not After : Apr 18 08:00:59 2026 GMT
Subject: CN=c3d62c2dfa35b168269430784f22c80b202bb419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:12:da:d6:2f:30:24:8a:79:32:fe:a2:75:1c:
c7:3c:07:7d:f7:b5:e8:7a:48:64:ff:c2:e4:92:c7:
48:f0:af:e3:0e:ba:f7:93:75:d5:16:21:b8:a9:ed:
05:29:5a:43:06:2b:dc:e7:23:ac:33:06:03:ec:2b:
dc:1d:3d:9c:15:a5:06:c0:06:01:6b:07:73:47:d2:
f0:92:cd:e9:fa:2f:5c:90:76:dc:fa:bb:5c:64:d7:
db:e1:00:8e:5d:86:1b:30:5d:d9:f0:8b:cd:84:9f:
27:4a:4b:db:00:25:2f:af:eb:97:96:1a:b9:7f:32:
bc:87:9e:fe:c0:76:bb:58:9f:46:5e:c8:96:3b:a6:
98:15:0d:c8:5f:d0:af:3f:c7:43:a8:d8:ad:fb:a7:
71:5e:df:03:c4:f0:ef:83:19:c4:11:40:29:cd:14:
d6:59:f5:0a:b9:5b:3b:83:e8:2e:11:fb:7f:c7:f7:
a7:08:83:58:81:ee:51:0b:b3:03:53:38:b9:64:ed:
27:22:92:2f:83:61:81:aa:94:7e:a9:7b:f9:90:7c:
01:9b:05:09:a1:c6:b2:f7:09:ab:0a:b9:f9:47:f6:
f3:33:2a:28:ca:43:fb:5d:fd:a7:8e:f6:d7:13:73:
94:42:d5:74:e5:26:70:81:ac:3a:4c:65:8b:72:03:
28:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D6:2C:2D:FA:35:B1:68:26:94:30:78:4F:22:C8:0B:20:2B:B4:19
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f4:be:00:b6:02:a4:5f:b3:dd:62:b9:76:96:4f:c3:ec:a3:
4a:6d:db:3e:f3:b3:4a:48:94:ae:b9:45:6b:8e:b3:69:79:70:
2a:7b:5c:c5:c8:4b:12:2f:a8:0b:b3:ca:55:4e:dd:e2:e8:61:
ff:89:40:a8:63:68:c6:2e:ef:29:90:e6:0a:26:1a:e5:89:50:
83:15:2a:ff:e7:21:0b:fc:15:17:a6:67:89:24:11:25:ec:61:
24:a6:34:f5:fb:26:da:56:75:16:bc:37:73:97:bc:23:24:b2:
0a:46:7f:82:77:4f:bd:21:90:b6:e8:75:21:71:b4:a7:5e:89:
36:f3:91:81:ed:c7:df:62:1a:31:e3:dc:c6:bc:1c:86:2e:ae:
a6:55:bc:2b:77:e1:66:e5:bf:47:70:bb:22:61:39:97:86:0a:
9c:9d:57:60:70:d9:c9:d8:e9:e8:be:da:50:87:18:ec:cf:5e:
a1:c3:21:e5:10:da:40:9d:61:f5:01:d4:7b:28:5c:07:e4:2e:
b9:39:0b:21:1e:70:dc:92:af:63:cb:e3:0a:c1:aa:e4:22:17:
fe:68:dc:a8:19:09:a9:ee:9c:ad:e5:96:63:24:c4:fe:95:d0:
b8:80:a2:92:79:40:c1:96:93:9b:42:18:0e:c6:68:73:53:bc:
a4:59:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:25 2026 by rpki-client