Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: XpeDEZRRAlqKVmNsQsetHRn563VS50lXTyEa6yPFDKg=
Subject key identifier: B3:A6:2C:AC:25:CE:2D:E4:CF:8E:90:E0:93:68:FC:5F:22:0A:94:14
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 019D97AAE78B91CCBCAB5655C88650E0516C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0B2B
Signing time: Thu 16 Apr 2026 19:00:53 +0000
Manifest this update: Thu 16 Apr 2026 19:00:53 +0000
Manifest next update: Fri 17 Apr 2026 19:00:53 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: phG0goXTQDpoRsWAQigfydX/CkncUKgq2u3DbYt3dUo=)
2: zYE8FUPFtiLYSakQbWMYmGaB8Dk.roa (hash: e4WusMf1jCNYs3vcwJpmwZbgUW6eoVWnObCKagC+ZGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:e7:8b:91:cc:bc:ab:56:55:c8:86:50:e0:51:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Apr 16 19:00:53 2026 GMT
Not After : Apr 17 19:00:53 2026 GMT
Subject: CN=b3a62cac25ce2de4cf8e90e09368fc5f220a9414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:f0:6c:50:05:46:4b:19:fa:4f:4c:aa:fe:
b9:50:51:43:8e:6d:71:be:c3:af:9a:d6:ce:eb:f7:
2f:c6:39:2f:6e:98:1a:6d:db:23:ce:41:ae:d5:ea:
fe:72:67:7c:47:18:1c:79:28:33:b9:1d:b1:a7:dd:
b6:bb:3a:8c:d4:fd:6e:b3:1f:da:45:bd:f3:0e:b0:
d0:b8:00:82:5e:77:5c:c0:0a:8f:c2:6a:78:53:47:
0d:d4:8d:65:ac:4d:50:b4:a2:ae:2d:1c:78:d5:87:
40:f9:c1:76:63:93:19:18:33:ae:5c:fe:0d:f0:e5:
42:af:76:e7:40:c4:e2:98:43:85:04:f7:cc:4a:6e:
6f:6f:3e:d1:1d:36:d0:3d:0d:02:8f:48:d7:3e:92:
a3:70:9e:bf:a2:b1:82:b1:d9:af:bf:31:ec:fe:c7:
53:87:e6:a7:aa:f4:57:47:b1:35:7d:8f:96:da:30:
df:b9:2e:b6:a7:5e:ad:1a:82:3f:8c:fb:75:5c:64:
45:7f:f0:ed:1e:73:fd:09:fc:8f:e4:41:bb:d1:d7:
44:67:aa:75:93:9d:4b:11:5f:d3:98:3e:a7:88:cf:
40:3e:4a:9f:87:7f:d3:18:71:17:9c:d3:36:9f:b4:
3f:03:37:69:19:1a:34:66:39:a2:f9:c1:54:88:7f:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A6:2C:AC:25:CE:2D:E4:CF:8E:90:E0:93:68:FC:5F:22:0A:94:14
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:67:88:26:9c:e7:1d:71:1b:5f:b3:51:a1:12:90:53:c3:59:
ca:6b:c5:ba:c7:f4:64:d7:2c:88:f9:08:1b:a7:c1:d2:21:54:
b6:a9:d9:80:b6:80:61:00:58:e7:7b:b2:38:1f:2b:5a:e1:65:
ee:ff:d9:8d:61:fd:e9:c6:f7:49:01:c2:30:d0:96:a8:5b:85:
0f:01:48:d8:a8:84:93:71:d7:a9:3e:79:29:0e:a9:8e:b2:a6:
7a:4c:52:64:11:e2:ba:1b:b2:19:d7:b9:54:85:c3:46:b7:c4:
38:19:37:34:ab:db:ab:30:95:23:70:1b:fb:c8:78:17:e5:72:
ac:7c:49:cb:f9:10:e0:71:82:07:76:4c:8a:8a:79:bb:86:52:
be:6b:dd:d5:9c:87:61:3d:68:9a:d9:a5:04:95:89:d6:2b:91:
9b:e7:c3:25:b0:73:47:07:f5:ec:05:49:14:74:fe:f7:17:2f:
a7:0b:cf:36:2d:e7:52:f0:b4:06:70:1a:81:28:d7:8b:72:10:
ba:63:19:62:3e:82:29:27:e1:52:05:92:5a:13:74:1a:f9:29:
38:58:84:19:2a:e1:e3:7a:74:97:95:3d:05:dd:86:a8:40:a2:
64:dd:eb:05:c1:ee:2c:a9:29:d2:ac:e8:2c:72:31:45:d3:84:
ff:eb:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:26 2026 by rpki-client