Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: WLgU/B459KrxEkavQqzk4+Gmmwej+vNxgX9LewT1J84=
Subject key identifier: E0:93:35:40:21:0C:A2:B0:B2:71:A1:61:D8:83:D9:AE:4B:DE:07:F0
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019D98BDA4F3097F1BB323A07627EA409D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 12E1
Signing time: Fri 17 Apr 2026 00:00:58 +0000
Manifest this update: Fri 17 Apr 2026 00:00:58 +0000
Manifest next update: Sat 18 Apr 2026 00:00:58 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: InkqvHlUyRc71kMGHoLr8MNGGdZIkyyfK947yobzQBM=)
2: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (hash: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ=)
3: xf-aTqyee4-5n_wFSTTwEdk3iBw.roa (hash: cKVaVuPQMYJD5abCn4kyEfa85heIwymXK7WFmMsO+7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a4:f3:09:7f:1b:b3:23:a0:76:27:ea:40:9d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Apr 17 00:00:58 2026 GMT
Not After : Apr 18 00:00:58 2026 GMT
Subject: CN=e0933540210ca2b0b271a161d883d9ae4bde07f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:54:f4:e9:70:7c:cf:1d:1b:95:9f:9d:1d:
50:1d:a7:f8:4a:1f:d6:25:86:4a:2e:4d:48:ac:ad:
26:00:0d:99:d3:cd:ca:c2:60:9a:63:e5:31:b6:66:
59:98:36:57:56:2d:0b:f7:8c:e6:de:90:12:6a:6e:
c4:f1:e0:b0:6f:e9:11:40:1b:53:80:ed:ca:29:c1:
1e:5d:fd:a6:2b:c5:0b:9a:88:47:d4:6d:c7:7a:48:
bc:84:2a:29:5f:3e:03:1e:5e:8c:34:a8:5e:ad:f2:
76:d2:05:26:6e:d7:e7:67:41:a2:36:cd:de:be:2b:
1e:b5:18:06:79:e7:31:01:f4:0d:a2:58:17:e6:79:
62:5e:ed:fd:08:8a:32:5d:e5:85:21:fc:02:be:1a:
d9:81:15:6e:e0:4d:d2:aa:d1:b2:a7:62:f5:57:9b:
ce:a4:ee:e8:30:75:f2:98:48:7d:a2:64:55:43:d4:
b0:05:07:6f:3b:fb:69:fd:32:3a:e1:a6:a4:be:95:
dc:f8:a9:96:6c:ec:86:8b:49:92:e3:d8:99:ee:18:
b9:de:45:8a:48:1d:ab:f7:c8:ae:44:62:bb:66:61:
d7:db:e7:4a:1b:0e:0d:44:6d:d5:1f:50:3d:d0:07:
f1:d8:ba:f9:d5:32:73:21:ea:b5:07:7b:36:0d:65:
09:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:35:40:21:0C:A2:B0:B2:71:A1:61:D8:83:D9:AE:4B:DE:07:F0
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6f:12:51:af:78:48:a9:de:5e:9e:4c:e6:a0:cf:5f:65:21:
5c:b4:3f:d4:78:23:e3:a9:4e:38:8e:f0:16:b3:ed:d2:3d:7f:
f0:a9:81:98:71:21:53:99:35:b7:38:56:ab:40:98:08:c6:ea:
c8:3a:2a:ad:e1:86:e9:07:80:f9:0c:48:6e:51:07:dd:c5:e6:
aa:00:6e:ac:f9:19:74:84:e6:97:42:41:83:6d:18:2d:1b:5a:
9e:29:23:2c:45:45:b1:84:f5:3a:83:81:59:41:4a:18:56:c8:
7b:32:59:25:ee:03:3d:da:a1:16:48:7b:87:b9:06:e3:93:c6:
86:bc:2e:f1:92:20:46:00:9b:0d:73:2c:d8:cf:4b:7c:62:f4:
4d:18:22:70:14:d0:da:79:46:e0:40:e3:31:a8:bc:0a:70:d8:
93:9d:18:11:3e:40:86:82:14:35:a2:14:5f:cf:7e:d5:55:24:
a3:cf:90:73:a1:fb:a2:9f:66:0a:90:31:cf:9a:c8:cc:04:a4:
8d:84:7c:71:21:46:6b:62:d2:89:34:d8:f6:53:2f:f6:74:fe:
26:f8:f4:4f:a0:aa:0e:6a:a7:22:d7:ef:37:6d:9e:c6:bd:1e:
6e:6b:28:1a:78:76:9e:71:fb:da:9c:db:9f:d8:21:29:4f:57:
25:56:0b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:16 2026 by rpki-client