Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: 7gHTSRunUDPNXSOpxfpilLQaAd+SlxyB0vFiyIbTs/s=
Subject key identifier: F3:A3:D6:86:6E:CE:E7:1D:63:1F:AD:84:CD:D6:CB:E0:D8:0F:52:48
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019DA30ACEDCCF570B99229FD95428A699CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 00:01:27 +0000
Manifest this update: Sun 19 Apr 2026 00:01:27 +0000
Manifest next update: Mon 20 Apr 2026 00:01:27 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: Z0trNubGnmbaj33jayh50WqdiDNyUVklJxH3pg55lgI=)
2: 7uqMUTjf5_dRZtlY5W6uIyVJIBw.roa (hash: +PFpSUBUn21QY3VMxev9eNCTJ4x+TBdranLn3xHpsiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:ce:dc:cf:57:0b:99:22:9f:d9:54:28:a6:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Apr 19 00:01:27 2026 GMT
Not After : Apr 20 00:01:27 2026 GMT
Subject: CN=f3a3d6866ecee71d631fad84cdd6cbe0d80f5248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:34:79:5a:b6:30:28:d9:98:55:2c:ab:53:
e0:4b:8d:54:98:5f:3e:57:08:e2:d0:36:80:18:87:
02:d5:b3:95:f2:e5:48:8e:c3:30:26:d3:2c:65:67:
6b:08:12:34:e7:c8:c4:8e:7a:2d:53:4f:25:22:5e:
33:d5:a5:62:34:75:18:5f:10:90:c2:2d:89:0b:3d:
0c:27:d9:4d:f6:31:72:87:78:3c:5c:2b:b4:b9:03:
58:98:99:19:c7:98:9e:c8:20:09:cc:ce:7a:41:1b:
8b:22:35:9f:1a:a4:9d:6c:0a:41:10:6e:2e:72:6f:
5e:1d:57:2a:ee:5f:fc:1b:62:20:ff:8a:97:69:b8:
1f:88:e4:7f:82:53:67:b9:69:a8:f3:9b:ae:ac:97:
28:4a:08:f4:fc:dc:b0:82:34:52:5d:79:8d:fc:ee:
a7:56:52:2b:0f:29:ce:a5:e7:a3:32:2c:2b:73:d2:
13:e9:8e:5a:60:7e:ed:f0:a4:c0:ab:b4:91:96:49:
e8:8c:03:ba:7b:64:37:b2:f2:c9:b4:9a:66:2c:ec:
f5:9d:6a:56:09:c6:9a:87:82:64:06:51:bf:45:ab:
d7:45:06:50:d9:66:cd:be:01:d2:48:c2:30:67:b8:
c5:e3:8e:83:22:94:28:e1:ca:85:94:6a:f5:66:1a:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A3:D6:86:6E:CE:E7:1D:63:1F:AD:84:CD:D6:CB:E0:D8:0F:52:48
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c6:f9:c8:df:80:cb:11:0d:41:24:f7:5c:aa:8f:53:da:fa:
91:cc:87:7b:69:b5:f5:3f:58:a6:62:4d:2e:a7:75:3c:3f:77:
02:5f:ac:8c:44:2d:cf:98:20:52:03:4e:f9:d7:67:a5:9c:c3:
8f:da:78:2d:66:ef:45:d4:8f:2f:da:04:d6:80:b2:de:09:10:
51:8b:da:90:6a:a1:83:d3:11:42:f3:76:a6:ad:f7:f8:49:2c:
ee:8f:cc:77:ec:d6:de:c6:0e:a0:3f:1c:8e:21:de:4d:55:fe:
be:f8:e6:1e:b3:3f:6a:9f:ad:20:36:93:3c:fd:93:56:fc:97:
33:78:e8:27:7e:c2:ef:6c:d8:4e:ff:79:f6:4b:51:15:2f:57:
b5:2c:06:86:55:96:f2:2b:12:06:ff:d0:d6:ab:7e:7d:dc:ba:
64:2c:b9:f9:a7:7a:67:0c:43:c6:07:4a:c2:cb:87:ad:cc:a7:
4d:4f:bb:0e:22:cd:2f:4b:27:c6:80:55:fa:33:1d:81:26:86:
1d:94:8a:7c:ef:20:3e:46:71:bf:af:97:7e:11:ea:e2:4d:3d:
14:a5:76:90:14:fb:51:76:4c:73:fd:53:4a:76:9c:e5:82:06:
7d:ba:29:55:b4:d1:9e:0b:f2:1d:2b:93:e1:ed:df:cf:13:0f:
65:5f:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:44:33 2026 by rpki-client