Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: lC+LEHdk1BmuugLYClN3m77rKfLUCBEcY+4RakjK8Ag=
Subject key identifier: 57:78:17:CE:1A:CD:A1:DF:E7:63:0A:4F:90:68:94:15:84:C9:48:52
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 019D9A3E21A4D2BE488BCD11D4C33B5BBECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 1009
Signing time: Fri 17 Apr 2026 07:00:56 +0000
Manifest this update: Fri 17 Apr 2026 07:00:56 +0000
Manifest next update: Sat 18 Apr 2026 07:00:56 +0000
Files and hashes: 1: 0sUgrxZJElJI75bHc4PMJv-m6Hg.roa (hash: 2W0uHz9I3ibHN2TiwFffgNpABHgMMaB3ZZQbo22uvH0=)
2: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: WnnxwVcDi2oMWs3OPdY07oGBJFDcYtKDVLI061d6jTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:21:a4:d2:be:48:8b:cd:11:d4:c3:3b:5b:be:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Apr 17 07:00:56 2026 GMT
Not After : Apr 18 07:00:56 2026 GMT
Subject: CN=577817ce1acda1dfe7630a4f9068941584c94852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:2e:43:6a:3a:89:fc:cf:4e:6e:7b:78:1a:
df:88:d9:66:00:65:e8:3a:64:cb:39:63:85:56:32:
7a:f9:04:e2:b5:15:db:78:42:5b:17:80:fd:55:3e:
0b:e8:8f:e2:14:fa:18:7e:41:93:32:5d:52:41:54:
63:91:e3:17:17:d3:e5:1e:69:0f:6c:b5:a8:68:b1:
f1:17:fa:85:c1:0f:21:65:77:99:24:a4:97:43:1c:
a2:f4:ac:b3:b9:c8:ff:4a:88:72:5d:da:3f:0c:3e:
04:a4:26:ab:1b:fd:97:d5:84:4f:1b:f7:f4:3e:3e:
10:9b:17:b6:4a:fc:84:d5:5b:34:1f:35:27:f2:94:
48:28:cd:a3:f1:6b:4e:a1:73:96:b4:98:97:25:1a:
53:72:9a:63:77:62:8a:69:85:56:c8:53:5e:b4:48:
ea:73:24:c2:73:a9:f7:11:63:db:fe:57:37:8c:be:
22:fb:fd:4f:08:e7:77:1d:b8:6a:72:e5:df:29:3c:
45:c1:d3:a2:39:55:41:14:7e:33:ca:23:66:40:3d:
f8:9e:7b:92:a0:6e:d5:92:61:ba:20:a3:61:de:c7:
a7:5e:2c:ae:44:16:ed:82:52:0e:d7:a6:3b:c6:18:
52:bd:50:6c:b4:f6:d8:de:82:05:12:e3:b5:a9:d9:
12:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:78:17:CE:1A:CD:A1:DF:E7:63:0A:4F:90:68:94:15:84:C9:48:52
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:12:b6:7c:cd:1d:e0:02:97:b2:e6:4d:7e:51:d9:1d:47:35:
f6:8b:cf:c7:c4:d3:9e:b5:38:b2:ec:e7:c4:ac:11:b5:34:bc:
43:4e:72:f4:2a:cb:16:3f:e8:86:13:5c:28:bb:6d:f9:3d:ee:
01:ef:a6:ed:de:fd:5a:1f:98:14:52:96:7b:37:c1:01:c8:e7:
2d:ed:8c:35:9d:a0:18:9e:37:84:56:d4:7f:b3:29:5e:dc:e1:
2d:c4:39:d4:71:c6:70:53:f7:74:3d:ae:af:79:8f:7b:12:01:
cd:69:62:1e:40:3f:e2:a5:25:3c:be:de:4a:69:f3:09:23:f9:
4e:d8:a5:f6:4a:9b:05:62:5b:cd:87:83:57:eb:1d:d2:a0:f5:
a7:b1:02:5b:bd:ab:91:26:5b:3b:d7:f1:67:4b:53:e5:83:ea:
f4:44:b7:7b:cc:57:1f:ea:c1:2a:96:a7:54:7f:53:ed:92:33:
bc:ce:3e:f2:cd:d2:fb:71:ee:71:0f:00:53:a1:12:6d:33:4d:
40:2c:bb:7c:fa:94:fb:cd:08:21:27:73:c8:c3:10:db:88:39:
52:ed:43:c8:c9:49:ea:43:e6:1c:d7:ec:98:40:22:d9:bc:d7:
e1:e6:ea:b1:e5:6f:a0:95:ca:cd:9d:5e:4f:1b:8b:3a:4e:75:
e5:4d:07:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:29:58 2026 by rpki-client