Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: zggo28Y1KxiDzkzBINCQQCpmcPYNTfhH/gQeKHH5WRc=
Subject key identifier: D3:66:F6:33:3C:63:7E:70:89:10:35:5F:A1:1B:FA:F1:F3:A1:85:96
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019D97E22DC0D50648B1B43F1A8A14440600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0CEC
Signing time: Thu 16 Apr 2026 20:01:15 +0000
Manifest this update: Thu 16 Apr 2026 20:01:15 +0000
Manifest next update: Fri 17 Apr 2026 20:01:15 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: GOKgK2D7ndhAGLTwvRax8iTczK9gScHPzGPHhOBJwWY=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:2d:c0:d5:06:48:b1:b4:3f:1a:8a:14:44:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Apr 16 20:01:15 2026 GMT
Not After : Apr 17 20:01:15 2026 GMT
Subject: CN=d366f6333c637e708910355fa11bfaf1f3a18596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:c7:a6:5f:af:ac:e1:76:c7:c5:02:49:e9:
0f:55:c1:74:f5:26:18:ac:80:b4:51:84:e7:cb:5b:
2c:64:69:49:ec:9a:88:78:d5:23:97:59:3c:56:47:
ed:56:f6:91:69:3f:45:61:82:24:cc:f3:0f:ad:32:
fc:93:19:3c:af:3a:11:18:ef:c2:49:d3:e5:7a:ae:
fb:77:03:22:0f:e2:52:ae:ae:76:78:04:3e:94:09:
53:bf:ad:b6:02:1e:13:47:3e:cf:f5:67:1b:6f:c9:
cd:60:45:9d:27:3e:1f:db:1a:5d:e7:3e:44:c8:95:
d3:7e:8e:ae:5f:75:72:b3:82:35:ef:9f:89:51:b1:
86:ad:ec:c5:17:7e:58:64:08:d2:57:12:84:d7:43:
65:c5:a1:a0:7e:71:5a:ed:af:c6:a9:03:b8:a6:e6:
20:cb:f9:d8:17:50:c9:fb:0c:32:1c:98:02:3e:a0:
54:05:86:19:4e:bf:fd:b9:c8:f7:5f:c5:0c:d1:61:
53:87:00:51:be:ac:44:18:5f:d8:8e:5e:7a:44:be:
e5:15:d0:e2:82:87:28:10:c7:90:b0:92:a0:65:be:
4d:52:6d:38:10:69:14:a0:39:5d:44:49:6d:61:09:
48:98:10:8a:33:d2:08:6d:79:22:ef:54:d3:a7:00:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:66:F6:33:3C:63:7E:70:89:10:35:5F:A1:1B:FA:F1:F3:A1:85:96
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:40:7e:b8:9e:17:18:6c:31:3b:61:e4:4c:e1:16:f2:a4:20:
3a:9f:03:dc:34:c6:61:75:f0:49:5e:56:b8:91:0d:d4:ee:5b:
2b:46:33:95:49:4f:11:40:6f:8c:89:c7:64:68:b5:bb:d1:87:
af:00:1a:77:61:2d:06:6a:cc:00:22:5e:1b:59:f9:0d:63:71:
cc:2f:f0:9e:5d:0c:31:1d:da:a9:66:e9:10:73:b2:4a:e3:fd:
73:d4:f1:f0:33:99:57:7b:ef:8b:9c:9c:6e:b3:66:bd:15:0f:
a6:0e:3c:a6:25:ae:1f:3e:20:be:03:e5:24:25:49:32:07:ce:
73:82:e1:d5:8e:cc:79:f6:aa:71:9f:ec:a3:38:9e:a3:9d:ff:
d8:22:20:d8:81:0b:9a:3d:74:4d:26:39:05:2a:01:70:0d:96:
2b:2c:04:8d:05:22:8b:71:ba:21:d4:89:ad:f1:b3:5e:9b:eb:
12:aa:17:4b:08:3e:a5:07:00:66:aa:51:98:e3:72:9d:fa:db:
af:cd:ad:e8:e5:20:2a:39:0d:5e:65:3b:1e:16:98:9d:f4:28:
81:37:97:ab:a4:2f:40:02:7d:c3:b3:47:87:bc:8a:54:ac:bf:
aa:d7:71:5c:5f:7b:1e:2e:27:e5:67:f7:ae:6f:2d:fe:5c:f5:
b0:9e:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:06 2026 by rpki-client