Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: bJ/uGL5ZEnSWhZ3VudJyJJjODAqfPOBsG7Vx7DLSnqA=
Subject key identifier: 9C:B4:BC:26:FD:F8:03:53:3E:C8:10:82:39:C7:B7:CD:96:CE:05:FA
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019D98BDBD3AAC75BC5B7172C363E530490D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 15FF
Signing time: Fri 17 Apr 2026 00:01:04 +0000
Manifest this update: Fri 17 Apr 2026 00:01:04 +0000
Manifest next update: Sat 18 Apr 2026 00:01:04 +0000
Files and hashes: 1: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: kneClEIXc9a6YP+Yi10sCQ7G7F+yAc9Nup1JBNK7iD0=)
2: GgOMAQruAzmkXd3YxcVIPj0Q92A.roa (hash: aiEiFcDwOGmCZNV/ayFmXDTOeDIePLYyLtQ16GSKhHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:bd:3a:ac:75:bc:5b:71:72:c3:63:e5:30:49:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Apr 17 00:01:04 2026 GMT
Not After : Apr 18 00:01:04 2026 GMT
Subject: CN=9cb4bc26fdf803533ec8108239c7b7cd96ce05fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:5d:73:0e:5a:20:5c:3d:ae:73:0b:7c:d1:
e7:d3:6e:87:98:58:14:a7:a9:b5:7a:ed:a5:ee:78:
45:bf:e2:01:7b:30:79:bc:7b:fc:ae:71:d8:13:47:
2a:76:c1:99:3c:75:8d:c0:e0:2a:ef:32:b4:5e:d6:
51:da:3d:ca:65:93:7a:38:14:14:6c:12:6e:98:4b:
a5:30:e8:5c:9b:cd:fe:40:fa:82:ad:4f:7c:ea:81:
33:69:65:50:2d:c3:a5:e9:e5:d7:61:c2:bf:e5:57:
48:3f:a3:14:10:1e:4d:23:2c:39:9f:ca:07:4f:2e:
f7:f2:62:26:55:c1:12:ee:7e:b2:3e:7f:7b:7c:73:
55:45:cc:a8:31:d5:ce:9b:2f:4c:ac:d6:96:1f:68:
9f:a4:9b:4c:d6:44:18:d7:bd:f6:70:ad:d9:7e:5e:
bb:67:13:86:98:38:29:78:1a:71:43:54:68:73:53:
8b:8f:e5:e7:70:e0:ec:96:cb:9e:37:2f:bb:0c:d2:
22:33:db:af:1f:17:fa:a2:98:7e:b9:9c:12:61:fa:
b5:44:9a:54:20:45:16:2f:24:4d:5c:83:a5:45:1e:
ce:b8:72:02:fa:21:ed:35:09:71:2a:76:75:3b:c9:
30:46:a9:14:af:83:2a:01:4e:fa:b1:3e:e5:8c:77:
4c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B4:BC:26:FD:F8:03:53:3E:C8:10:82:39:C7:B7:CD:96:CE:05:FA
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:6a:68:b1:e0:7f:87:90:67:6a:29:7c:f8:4d:ef:99:b3:
ef:7e:1d:58:30:44:a4:8a:93:52:39:29:41:47:d5:5a:de:b8:
5b:1c:ba:da:f5:04:f0:3d:fb:76:0b:75:10:40:bd:33:e2:43:
e3:4c:3d:9b:1f:bb:30:94:b2:a8:a0:20:6d:a4:e8:20:db:e2:
f2:47:33:f7:8e:7a:46:23:6b:6c:ab:87:10:b7:71:56:4a:dd:
0c:3d:85:ee:35:88:fe:6f:aa:c1:7e:3a:8b:61:97:13:62:3d:
55:02:a2:02:9a:74:25:19:64:da:23:25:36:7a:6f:45:3f:74:
05:de:2b:04:6d:e6:87:d5:e0:6c:48:4a:64:b3:bc:99:53:6b:
60:c1:ab:c1:20:f4:c8:7e:e3:14:64:71:25:22:b4:f7:42:c6:
41:4b:24:33:a7:b1:c8:be:0d:6e:93:d3:41:3f:73:cb:ed:ca:
e9:c9:c2:f5:9d:6c:77:68:ae:77:29:ea:0b:b4:e4:e4:ac:cb:
54:62:db:f6:c2:b0:54:4e:25:5c:47:30:ef:3f:71:46:e4:fc:
9a:36:b6:f4:cb:59:f7:80:13:68:b0:c5:9f:0d:00:2b:a2:09:
cc:67:54:91:00:f9:4a:2c:24:c3:43:91:53:bb:92:31:2a:0b:
c8:4b:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:13 2026 by rpki-client