Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: pEVpaXUwnFJfGjJqhTlyBnPR09YkkG9ydK8dHPR8fdM=
Subject key identifier: D0:E2:62:B3:CC:E3:4C:12:3E:64:6E:91:60:A7:37:31:E5:61:3E:D7
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019D98BDA1B62F413D7C680F696A5676B8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: ZSMDjX7wwQ4JLwHBQReGx9HUz59di/R9aUEecAjwzXs=)
2: N-LVGcOt1MezkkjodOon2CCwIQE.roa (hash: dnw95zCsk17+SCVYKoXvBd4Jkoy6x8AD/1mR659V304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a1:b6:2f:41:3d:7c:68:0f:69:6a:56:76:b8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=d0e262b3cce34c123e646e9160a73731e5613ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:a7:12:e6:68:0b:02:a5:b4:72:aa:61:ea:
8b:71:30:5f:f8:19:fb:e2:00:04:e3:f8:1f:d9:00:
f6:4c:a3:7f:53:cc:be:61:53:f4:38:14:be:e4:f1:
41:6f:f7:c0:e1:e8:7c:6d:04:32:b9:df:1a:07:98:
28:0f:7e:03:26:6e:6e:99:13:fb:6c:94:e5:d8:e9:
f7:4e:48:10:f2:93:c7:f9:a4:cc:06:12:54:7b:7f:
fd:4a:16:52:1b:e4:26:49:ba:6f:5e:9e:ea:48:b2:
1d:8d:9b:bd:88:9d:d1:61:04:43:4d:ab:fe:dd:2f:
cf:cd:4a:37:b9:8b:7d:b7:dd:7c:0e:99:75:d4:74:
99:b9:06:21:06:81:c9:38:46:2f:14:9c:cf:15:50:
fe:b2:7f:ef:a0:a2:e8:ea:4b:c9:56:2d:42:b7:3c:
72:8a:51:0d:5f:04:8a:15:17:c9:83:69:4f:26:1a:
c7:f4:33:44:1e:a7:f9:94:c9:36:f1:2f:a5:a1:fe:
58:5b:fe:32:61:29:74:1e:36:70:d4:52:3f:93:6a:
ec:fb:b2:ef:6f:46:b8:9e:19:c0:82:02:81:36:ae:
f0:ae:64:83:c6:53:f7:80:9a:08:b8:b7:ed:a6:30:
19:0b:50:19:fc:a6:d0:26:79:91:5f:4a:6f:30:4a:
e9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E2:62:B3:CC:E3:4C:12:3E:64:6E:91:60:A7:37:31:E5:61:3E:D7
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:07:a8:d3:f8:21:5e:87:c6:64:e6:c9:7f:28:2c:df:31:a4:
1e:4e:a2:c7:ff:0f:d0:3a:66:fa:56:c7:23:f6:b1:7d:72:ff:
92:96:be:60:a5:53:c5:11:8b:a2:fc:e8:38:86:49:02:9c:85:
5e:78:27:ac:3d:c3:ac:d1:a8:6f:0f:f7:72:7d:8b:39:f3:13:
17:e3:c3:1c:bd:c6:6a:4c:f3:16:3e:8b:2d:47:ff:1c:73:8e:
8e:6d:31:a1:d8:c2:1a:86:2c:c9:f7:1c:39:48:e6:b6:e5:2a:
99:c6:14:ad:df:72:01:97:f9:3c:79:56:37:16:7b:d4:ed:69:
d8:8c:22:b3:39:8a:30:16:52:b3:4a:a0:ea:d6:be:22:a6:fd:
04:04:5f:28:9e:6a:53:0d:1b:b2:36:51:78:bc:85:cb:3a:8a:
04:0b:1c:31:78:bd:a4:94:7e:7e:b0:95:af:3b:c3:68:bd:44:
b7:c6:9e:03:c2:84:2d:ec:14:23:28:6c:c8:0d:6a:1f:c0:b6:
86:ed:95:ba:ca:09:34:0b:02:23:4f:19:ea:e8:d3:a3:56:f4:
c0:4e:fa:50:8e:48:9d:7c:a2:6a:6a:b9:1a:4c:7d:a4:d5:a1:
4f:c3:ef:67:fe:35:f9:e2:d0:e8:46:32:9a:0f:e3:cb:76:f6:
b7:bc:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:37 2026 by rpki-client