Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
File: 01VdufbNy92wUqRTSO8Nam1bwcE.mft (raw, json)
Hash identifier: pOKcdZO2e8jgKpYdwoPhCm+wzIcL4XRU30xMG8LnBfU=
Subject key identifier: 17:36:9A:CE:9B:C3:EB:3F:4F:53:B7:77:28:CC:F0:49:DE:B9:44:50
Authority key identifier: D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
Certificate issuer: /CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Certificate serial: 019D9B50C35CBE2CC85F2E0B1A16A7FE821F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
Manifest number: 1A
Signing time: Fri 17 Apr 2026 12:00:54 +0000
Manifest this update: Fri 17 Apr 2026 12:00:54 +0000
Manifest next update: Sat 18 Apr 2026 12:00:54 +0000
Files and hashes: 1: 01VdufbNy92wUqRTSO8Nam1bwcE.crl (hash: SGlqvT9rpFvkt1MCOuP8JfFkEnj/zi7+/W1pB8rEvBY=)
2: szLd58h9ss7j2xagBuMXF5WP0yk.roa (hash: 8ob8pb7Gxq2C51p/RiIuL1KyizGRkOlyyDDvo7AtTm0=)
3: uXRaOLAunE2UdEOM1lTRedX_8jQ.asa (hash: 5LEXYsw/l0m4ESugD1zDY5cY+ORuB71qGoxgj35oZFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c3:5c:be:2c:c8:5f:2e:0b:1a:16:a7:fe:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3555db9f6cdcbddb052a45348ef0d6a6d5bc1c1
Validity
Not Before: Apr 17 12:00:54 2026 GMT
Not After : Apr 18 12:00:54 2026 GMT
Subject: CN=17369ace9bc3eb3f4f53b77728ccf049deb94450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:20:9f:48:f3:9b:26:5b:ef:f0:07:ad:58:
9f:23:1d:37:02:31:3f:3a:78:23:59:80:a8:c3:65:
f0:6f:99:db:97:72:89:63:7e:48:38:e4:76:df:50:
12:de:7e:91:50:29:73:56:51:9a:68:26:5c:68:ad:
6e:19:76:0b:56:75:3c:5f:08:c8:4e:1a:37:2d:1b:
39:12:e0:a0:b8:03:b8:0f:8e:0e:c0:3d:00:60:d7:
bc:2d:b8:2b:0b:29:1c:50:3e:f8:a2:c9:a4:2e:3b:
d2:32:20:f1:37:62:ad:7f:9d:3f:91:c4:a7:f9:13:
24:13:12:21:90:d2:d0:8b:3c:87:f4:42:e5:1e:8c:
8a:b3:13:3f:e0:a2:c1:f7:a9:a3:4b:a0:68:de:90:
60:66:09:fd:d0:c7:54:47:e5:3f:d7:db:b3:f9:df:
fd:42:86:0f:5e:1d:f2:dd:4c:e5:25:93:47:62:4f:
69:af:aa:35:80:33:aa:1e:fc:80:79:10:a4:62:c8:
67:17:24:c6:40:34:ba:b0:56:b8:29:16:cf:3f:19:
8b:5b:c5:8f:b4:1a:6e:e2:7f:67:c3:2f:62:f5:cf:
4b:71:22:00:04:81:c4:95:50:28:48:21:56:46:06:
a9:a9:16:1d:7d:8f:ba:d6:5e:32:32:d6:61:15:91:
95:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:9A:CE:9B:C3:EB:3F:4F:53:B7:77:28:CC:F0:49:DE:B9:44:50
X509v3 Authority Key Identifier:
keyid:D3:55:5D:B9:F6:CD:CB:DD:B0:52:A4:53:48:EF:0D:6A:6D:5B:C1:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01VdufbNy92wUqRTSO8Nam1bwcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3ade31-4ac1-435e-b4e5-3ad13c603ea2/1/01VdufbNy92wUqRTSO8Nam1bwcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fe:f5:22:31:2f:30:6e:b3:8a:9f:14:8a:7b:18:0a:64:cc:
21:37:f7:b3:10:5b:a7:19:5a:19:57:68:31:44:36:17:81:40:
b6:bf:97:ee:20:a4:b6:cd:ff:bf:b4:59:40:1f:39:d1:03:e9:
c9:cb:dc:a2:ef:b8:8f:ce:36:87:b2:37:73:6c:6f:66:dc:76:
ca:60:67:7d:60:c8:dd:a1:b0:4d:8e:08:3e:76:c8:a0:c9:c3:
64:14:e1:14:88:e1:76:a8:35:cd:69:e1:58:21:c0:51:a9:2d:
d1:a5:30:0b:28:6b:56:9a:22:fc:72:ad:d0:b9:57:f1:67:53:
22:a8:8d:c7:34:75:4a:2a:6d:37:e3:37:2d:56:e4:d9:43:e0:
db:b0:59:30:1c:4e:1d:2e:f2:41:36:c6:ae:5d:e0:0a:58:6e:
c2:91:43:88:20:99:9d:bb:52:e7:d6:2f:70:37:90:b1:27:0d:
a9:89:4f:5b:d2:82:17:95:0d:ce:a5:fc:02:fa:b5:88:87:f8:
1f:57:66:60:ff:a3:e4:dd:2d:b3:8e:fc:7a:72:cb:6b:8e:30:
e4:e6:ce:e8:ba:38:4c:9f:93:46:d6:48:67:d4:9e:f2:f0:77:
85:1f:57:35:4c:82:94:65:28:e6:e1:12:46:d0:58:55:a4:53:
a2:1d:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:30 2026 by rpki-client