Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json)
Hash identifier: NY7Kq+kgckR8OVO8oifTL7AARzHstN4YYlE0jT8XSG0=
Subject key identifier: A1:87:5D:BB:4B:4A:BA:88:90:BA:7E:58:1F:79:77:A1:33:10:0B:BB
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 019D9A06C45E1F00BE3C24736F0A72BB7683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
Manifest number: 17A9
Signing time: Fri 17 Apr 2026 06:00:27 +0000
Manifest this update: Fri 17 Apr 2026 06:00:27 +0000
Manifest next update: Sat 18 Apr 2026 06:00:27 +0000
Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: DhbqVSuF6ASAsiNDjCEqgXkFc8CimtmskfDPthWjKwU=)
2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:c4:5e:1f:00:be:3c:24:73:6f:0a:72:bb:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Apr 17 06:00:27 2026 GMT
Not After : Apr 18 06:00:27 2026 GMT
Subject: CN=a1875dbb4b4aba8890ba7e581f7977a133100bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:75:1d:9f:85:40:9a:ca:e3:8f:13:3c:9f:
ad:a5:21:6e:5f:ad:99:d3:ca:62:85:10:a8:6e:cc:
9e:a2:a8:f8:8f:3d:58:4a:ec:53:07:66:5a:2b:ca:
1e:c8:8b:e5:27:b3:a4:45:97:55:df:bc:92:49:74:
1f:e1:92:7d:0d:55:64:22:ac:37:fb:dc:78:c0:34:
ed:83:38:c8:10:d3:b3:20:98:fb:ca:34:b2:01:68:
96:fc:26:11:19:f4:60:ca:5e:cb:9c:d7:2b:52:2c:
4e:57:bf:d7:d4:82:55:49:52:40:9f:f3:32:66:4f:
66:48:f2:f6:b3:e1:80:4d:85:f7:c1:f7:e7:a4:83:
f7:cd:a7:3e:47:d8:8f:af:d3:70:bb:aa:65:6b:5a:
45:6e:90:86:6d:a2:b2:5c:c1:78:0b:e5:34:b7:4f:
2e:a8:25:35:a3:c8:22:ae:c6:c1:da:a3:b9:a5:13:
f2:a2:6a:f6:b3:37:a7:30:7d:4a:e2:83:da:b2:1d:
d7:4b:28:e9:98:49:39:40:00:c6:d8:47:3a:41:50:
76:d9:88:57:ce:e9:20:dd:a1:23:42:1d:62:74:6c:
9d:4c:41:1c:eb:aa:56:1a:8f:77:a0:49:70:4a:c5:
9e:d8:5b:98:eb:3b:af:cd:96:e9:2d:fc:57:a3:88:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:87:5D:BB:4B:4A:BA:88:90:BA:7E:58:1F:79:77:A1:33:10:0B:BB
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:63:dd:06:4e:a3:a0:67:de:94:a1:65:3c:54:92:1a:5b:84:
6a:86:01:83:14:c3:c0:d9:6a:1e:70:99:25:ea:f7:83:5c:9c:
a4:52:d8:ac:10:02:1c:82:d1:da:30:00:29:f0:55:41:38:8e:
3e:1c:55:c5:ff:0c:d2:2a:fd:1b:80:a0:4a:4e:5f:39:d5:de:
b0:a0:ee:4d:0c:ec:83:98:47:51:50:b3:e2:35:91:17:8c:e1:
0d:c2:3f:0f:f2:2f:f9:b6:72:f2:80:9c:ff:32:ad:0e:90:17:
85:0c:5b:f7:27:0b:60:d0:cb:ae:ff:85:fc:2e:37:be:54:da:
44:15:ae:fb:1c:95:2e:29:9a:e2:ce:5d:7a:30:ed:09:31:4f:
a7:cf:5c:45:97:af:ad:d4:90:b2:53:78:f4:40:fb:80:46:47:
5e:c1:09:33:9b:61:62:8b:03:e0:33:ef:d9:93:90:63:42:da:
0c:59:c0:28:e7:6f:c0:60:93:bb:47:3b:1b:08:6c:59:ba:08:
e6:88:1c:93:17:59:b9:37:c6:56:d0:53:c1:e5:10:42:99:6c:
dc:45:5e:54:b9:0e:7c:f6:87:ae:74:22:d3:87:9f:15:3a:f1:
3b:77:ef:16:79:23:b6:7c:02:10:27:85:2b:fb:ef:c0:59:b2:
7d:d1:c1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:03 2026 by rpki-client