Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: bi1To6VvUjV37q+HRwv3UXZkCMcYWFpPecRwZzqEaTQ=
Subject key identifier: 05:27:8B:4F:98:9E:ED:4D:3E:88:D7:59:88:9E:BC:F6:B1:0D:B4:BD
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019D992B5090CF5CC5BA31C52C3E99D8BAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 1276
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: wcEYVexrewe7EaE/UIXEaz26SnepTkbRh6+hmul4nks=)
2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:50:90:cf:5c:c5:ba:31:c5:2c:3e:99:d8:ba:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=05278b4f989eed4d3e88d759889ebcf6b10db4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:89:1d:2e:19:fd:51:6b:e8:fc:77:59:a5:
98:e5:6e:e7:82:9e:9d:97:c8:fe:1a:e8:60:b7:ee:
e2:f1:a6:6c:3c:90:52:c5:58:9d:ee:bc:60:be:57:
f9:63:fc:84:c0:c5:94:fd:23:e9:0e:f9:07:1a:52:
bc:90:23:2a:11:14:9f:93:0a:00:bb:91:73:0d:06:
75:fc:bc:b4:5c:60:08:98:52:bf:c5:b7:ce:2e:47:
b3:07:0a:a3:11:92:87:62:28:3d:7a:2c:5d:0a:10:
9e:b2:46:33:8d:90:ab:1e:2e:53:d1:a1:77:b7:1e:
8d:47:b7:d1:9e:5e:33:5a:84:6d:07:70:82:6a:a4:
c9:66:8c:e8:f1:65:17:b5:c3:4e:a2:20:f5:a2:f5:
d9:25:dd:c0:5e:52:8c:d7:e5:8c:a0:0f:e0:bf:65:
c2:1a:67:6b:46:88:b9:1c:5a:a3:5d:d6:69:c7:65:
2e:95:01:6e:40:df:c2:b8:08:23:19:ed:73:96:21:
c0:90:50:89:fa:22:66:e5:b6:ed:ec:2d:9d:d6:b3:
0d:a9:5f:ad:89:1d:62:30:18:87:b7:7d:14:cd:cd:
4d:eb:3a:a5:4c:1f:2a:df:ce:bf:12:13:b9:08:af:
67:84:63:27:24:82:ca:1e:40:45:6d:7d:9f:f0:e7:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:27:8B:4F:98:9E:ED:4D:3E:88:D7:59:88:9E:BC:F6:B1:0D:B4:BD
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:78:2d:f4:49:ce:0e:2f:d5:f6:ea:c8:ca:c8:38:ce:00:9e:
be:1a:5e:32:04:0a:fe:a5:52:72:9f:80:50:18:41:51:6d:1c:
b0:4f:fc:bb:27:9e:bd:5f:19:a6:4c:62:fb:f7:66:6b:ca:77:
8e:2e:16:5d:55:e9:06:6a:3d:4c:24:fb:e3:ee:71:60:b4:37:
65:76:f0:6d:47:2b:4c:62:26:88:0a:6e:65:de:05:fa:da:93:
0c:f5:52:09:03:36:a6:3b:4c:43:97:25:d4:8e:4b:7e:f0:58:
e0:ab:26:96:64:a3:76:70:ec:90:b9:52:21:fb:7c:01:6d:77:
82:92:1e:dd:3e:24:3e:9e:74:1b:d2:68:03:e9:6b:5b:a1:8b:
2e:71:cb:7e:bb:26:b4:92:8e:db:d3:81:f9:cb:24:72:18:b3:
f5:78:19:9a:73:1e:87:22:d2:9c:cf:08:b4:4c:cd:b5:b9:de:
bf:3f:b8:3c:87:7d:4a:06:e7:b5:ff:03:39:f9:32:3f:f3:33:
15:48:41:bf:61:d7:9d:8e:5d:3f:1a:5a:c2:57:7b:aa:3d:2b:
28:55:16:0d:dc:b6:19:6d:90:23:4a:c6:db:70:af:50:56:56:
86:97:46:a1:ed:5a:96:37:bf:3d:aa:89:df:45:45:8e:3a:ae:
be:0b:fb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:32 2026 by rpki-client