Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: 1B09JUovrkq32+Jn5ukBaVJD9Ql7AwenWChnF2ZqOPA=
Subject key identifier: 58:EF:3A:0B:7F:7C:10:1A:BC:67:13:64:1D:B1:54:67:16:15:DF:C7
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019DA2D3070B736286C1DFD5F8429437B094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1859
Signing time: Sat 18 Apr 2026 23:00:32 +0000
Manifest this update: Sat 18 Apr 2026 23:00:32 +0000
Manifest next update: Sun 19 Apr 2026 23:00:32 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: kj9oVzeKI7WcX9pdpxDJBhlfjowQrE2BbdTyp7ZXQtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:07:0b:73:62:86:c1:df:d5:f8:42:94:37:b0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Apr 18 23:00:32 2026 GMT
Not After : Apr 19 23:00:32 2026 GMT
Subject: CN=58ef3a0b7f7c101abc6713641db154671615dfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:25:84:53:f9:79:bd:96:07:7e:15:66:59:75:
0f:29:b9:3b:23:4e:28:1c:74:56:0b:64:02:af:90:
cb:8d:8b:2e:24:ef:01:af:3e:65:5f:bd:99:84:21:
e9:10:5f:df:67:3c:96:cf:ea:32:ab:aa:5d:ad:be:
30:3f:4c:ff:6c:c5:46:5e:98:9f:42:4d:2e:d6:06:
e3:f9:4a:7f:d5:0b:83:1c:fa:a0:d7:79:8e:cf:7c:
29:7f:05:62:55:7b:40:ca:39:77:08:75:6d:f5:07:
76:9c:b7:0d:df:d9:25:29:41:53:20:7c:1b:ac:6b:
bd:82:7f:b7:02:88:05:39:76:af:b9:4a:2b:41:93:
47:9b:14:80:63:f3:be:b9:32:4d:08:61:d6:34:e8:
fc:e1:52:93:83:06:97:b6:ec:cd:fa:c1:9a:8f:93:
cd:c5:e7:5b:80:a1:18:74:b2:66:e4:3a:58:2c:39:
5a:20:85:a7:00:c4:29:a6:46:d4:b5:47:2a:17:86:
6d:4c:99:63:57:75:70:5f:3e:ca:e0:5a:56:27:83:
2b:11:7f:2e:5f:41:a5:25:e0:50:6b:82:77:c4:be:
23:8c:76:f1:82:ec:b4:cc:4b:73:16:39:a0:18:29:
cc:d7:5b:9a:46:2c:54:e2:25:0d:66:72:b0:24:7f:
d8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EF:3A:0B:7F:7C:10:1A:BC:67:13:64:1D:B1:54:67:16:15:DF:C7
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:68:df:43:1f:15:d6:10:cc:14:7f:94:1a:31:f8:d6:72:b3:
f0:25:cd:24:d5:fb:37:a6:c2:c0:39:03:0e:54:fe:9f:e6:5e:
40:23:de:2a:45:ce:65:7b:01:0d:f5:37:4a:f6:08:13:25:ad:
f9:cb:81:fd:3e:dd:f6:9e:07:76:8e:bc:72:29:88:b3:df:95:
ec:cb:92:66:f2:83:08:3d:85:6f:74:08:f7:b1:ef:9a:bf:af:
eb:ff:76:37:f6:a7:85:3e:fb:d3:9f:bc:bd:17:c1:2d:2d:80:
07:89:3d:b8:d5:30:70:6e:a1:04:10:68:0f:47:c3:54:74:e0:
91:58:1b:5f:ac:5a:bf:6b:33:4f:fa:2f:94:52:20:6e:44:81:
fb:4e:99:f2:be:16:7d:5c:42:d8:7b:ce:c0:c1:d5:47:7d:bb:
14:13:6a:55:bb:bd:a6:8a:2b:9c:7b:cb:cc:0f:aa:57:61:64:
40:4c:92:f1:24:21:62:66:68:dc:60:a9:16:6a:a1:d0:35:bb:
ab:ce:aa:2e:29:29:a0:dd:ba:56:8c:d8:e9:8c:28:08:3a:19:
72:22:38:4a:7b:a2:b2:8c:5e:7c:c4:8f:5c:c7:65:29:1d:73:
95:4c:fe:80:db:bc:f2:a7:7f:33:8c:43:85:4f:96:22:c8:f0:
3a:79:e8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:44:17 2026 by rpki-client