Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: CohhU250+indbuiQbUg6P9+T3qkE0bHly7nWqimauMs=
Subject key identifier: 20:41:FD:91:28:C0:EA:69:27:8D:0F:F5:A4:4B:15:D9:1A:C6:E6:51
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019D98F529CAC822E60541575A7036958F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0547
Signing time: Fri 17 Apr 2026 01:01:36 +0000
Manifest this update: Fri 17 Apr 2026 01:01:36 +0000
Manifest next update: Sat 18 Apr 2026 01:01:36 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: n0keZFGQlfgEJG1OXbwkxO9Vn/O7mDAkRmdJqbfheRM=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:29:ca:c8:22:e6:05:41:57:5a:70:36:95:8f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Apr 17 01:01:36 2026 GMT
Not After : Apr 18 01:01:36 2026 GMT
Subject: CN=2041fd9128c0ea69278d0ff5a44b15d91ac6e651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:d8:d9:e3:7f:2e:17:30:4b:11:a0:8f:71:
90:48:54:38:2a:8c:48:88:36:6d:0d:65:f8:5c:97:
3e:98:d4:33:de:02:38:f0:f4:53:14:7c:ea:b2:35:
35:97:72:0e:ad:dc:b5:86:e6:0c:33:ad:9b:f9:08:
f9:d5:10:42:c6:3b:89:15:1c:9a:af:7e:9e:42:a3:
1b:72:ca:7c:1c:fa:3d:60:75:9d:f7:16:a0:dd:45:
86:72:8c:f3:6b:ba:fb:1c:20:74:89:70:80:52:11:
6d:bd:78:1e:76:1e:8a:5d:cf:3d:50:18:57:39:b4:
31:00:70:52:cc:c4:f4:80:e3:32:c1:6f:34:d8:23:
ac:5a:f1:3c:18:9c:9c:d5:0d:cf:76:f3:2c:34:90:
4b:d2:d3:d2:1f:aa:33:46:32:81:25:2f:6d:bb:a6:
a1:dc:94:f0:09:a0:6a:e6:01:23:31:88:9d:77:82:
b0:82:c3:9f:f2:8d:6b:8d:64:e8:7e:fe:d7:e3:d0:
a0:5c:5c:2b:c5:20:7a:c8:86:57:3e:da:2b:09:12:
34:76:43:32:8e:42:bb:d3:f6:bb:30:9f:bf:e7:4c:
d4:a3:93:2c:48:a7:a8:9b:0f:ac:3f:a6:ed:88:70:
9a:6f:23:2b:f3:0d:e5:55:49:ab:17:c8:73:3b:8e:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:41:FD:91:28:C0:EA:69:27:8D:0F:F5:A4:4B:15:D9:1A:C6:E6:51
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:55:06:72:df:e6:8f:2a:c0:e4:37:8e:42:e0:d4:36:a4:e9:
a1:21:ff:56:5c:44:5b:db:69:f3:57:e7:7c:c5:7c:7f:88:3d:
24:b8:60:d3:d8:67:64:74:b2:02:b2:f3:bb:4e:7d:c3:0e:9b:
2f:da:d4:57:5f:e8:cf:8b:78:b0:01:4c:8e:d1:b6:21:de:31:
0f:1b:ea:ba:8e:f9:f9:a6:20:55:67:9b:c8:75:ea:9f:5f:6b:
95:50:ba:60:df:10:ac:94:c6:b0:d9:d0:f1:8b:c0:e0:e7:2c:
47:1e:cf:21:4e:50:33:c0:99:63:0b:46:13:58:22:6c:af:ac:
d6:27:4c:82:3d:eb:e9:c8:7e:e3:d2:8c:1c:50:15:37:8b:73:
f9:dd:f1:d7:84:ae:af:a7:72:f0:d4:a3:6d:03:b9:55:0f:cc:
9d:a9:96:d7:8d:2e:7b:35:4a:b8:2f:d6:71:30:30:55:04:55:
2f:b5:c8:9f:8e:6e:7c:60:66:ef:73:bf:a9:60:25:57:b9:50:
3e:ae:07:e5:a1:aa:14:2a:f7:c6:70:ec:ff:aa:3f:d1:64:bc:
77:86:5b:54:fe:73:04:4b:ec:5a:d6:33:f5:a5:7c:a0:07:65:
92:37:b6:fd:96:2b:7e:7b:ff:fa:55:35:97:f8:0d:d1:de:91:
9b:d5:ca:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:25 2026 by rpki-client