Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: nGqgOD0S2SdizWBusiUExz+YkWtDb57TGqVGtY37XBg=
Subject key identifier: 94:4F:0F:90:2B:5B:1A:3A:4D:6B:6A:4F:CF:20:78:51:F6:20:D5:C6
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019D9BF53CBC070A22D570FA36AB7D896ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 02CE
Signing time: Fri 17 Apr 2026 15:00:33 +0000
Manifest this update: Fri 17 Apr 2026 15:00:33 +0000
Manifest next update: Sat 18 Apr 2026 15:00:33 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: RqVmvgHq+gLRpGUhniaZ5gZPMibQNLf7KWzHsII30/s=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:3c:bc:07:0a:22:d5:70:fa:36:ab:7d:89:6a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Apr 17 15:00:33 2026 GMT
Not After : Apr 18 15:00:33 2026 GMT
Subject: CN=944f0f902b5b1a3a4d6b6a4fcf207851f620d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:ad:b6:6d:57:83:59:60:b7:7d:ef:2a:8b:
cb:60:8d:b3:a4:ce:68:17:91:74:4d:af:14:a4:28:
ad:5e:f5:8d:84:7a:b2:cc:1e:67:72:cf:a0:70:12:
09:8b:4d:1b:2c:d6:83:fd:0e:5b:fb:aa:d5:d9:ec:
6e:c0:6a:ed:37:75:fd:ba:54:82:a6:da:8d:28:36:
27:68:62:03:cc:81:ac:c0:40:6c:29:a5:9c:50:9e:
26:1b:ec:32:66:06:4f:31:31:b4:c0:30:59:be:82:
a5:0b:83:ff:9f:f4:b4:b0:4f:3a:06:40:6a:93:cf:
5e:ac:c0:17:8d:74:58:f7:f4:b5:1f:ac:21:95:47:
5c:b3:13:ee:e8:2f:69:0b:30:b7:95:3e:08:ce:8d:
69:25:2a:67:48:29:25:03:64:b6:60:d7:70:c6:27:
4c:1a:14:ac:90:cf:4b:ab:69:31:ef:96:b8:86:ac:
67:07:98:6c:cf:1e:6a:26:8f:c5:cc:ca:b0:5e:30:
4d:b5:8f:a0:69:89:ae:cc:2f:c6:43:8b:75:f9:6b:
73:e1:3a:dd:46:96:6e:5d:b3:72:70:81:32:12:42:
5f:2e:d3:83:27:5f:f7:74:9e:8c:0d:58:a0:74:da:
48:c3:65:13:25:ae:dc:e8:2b:7f:8f:7d:a6:ae:61:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4F:0F:90:2B:5B:1A:3A:4D:6B:6A:4F:CF:20:78:51:F6:20:D5:C6
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:49:5b:04:a3:f1:fb:d8:b1:29:46:2c:85:8b:c6:48:ce:63:
16:39:85:41:8e:9e:d7:d5:21:82:1b:58:ca:6d:2f:16:88:ae:
6d:d6:36:f8:66:de:41:21:52:29:ee:f3:8f:ee:80:e9:9b:21:
d8:df:64:31:45:6e:76:cf:6f:c7:b8:bc:3e:d0:3a:a6:33:a5:
a4:c7:bf:fb:b8:43:7a:03:54:28:e1:c0:49:61:c9:0c:9c:f7:
4a:6e:2b:df:81:0c:6e:84:85:ad:3d:6b:92:d9:4f:5c:b2:6e:
78:38:a2:ac:58:49:93:04:51:43:4e:fa:04:07:b0:78:c5:07:
4f:e4:23:77:06:3a:bb:28:40:f6:3e:a9:cc:27:44:67:e5:6b:
22:fa:30:f8:9a:41:b0:bb:af:91:0a:6a:2d:25:3a:45:1a:6b:
77:70:46:d8:86:7a:5e:ec:b8:d6:13:b1:e7:cc:ea:b6:e7:b9:
d3:28:30:76:9e:93:01:bc:8c:39:0b:fb:ad:8f:4e:a2:71:b7:
bc:8f:31:fb:a8:81:ef:36:d0:8a:85:f4:ca:54:f4:dd:85:11:
b7:be:e2:b2:5d:f9:a9:ee:77:7b:88:a0:73:fa:8e:ae:4c:60:
d3:ce:23:fe:f8:cc:44:09:b9:ba:79:5c:f7:73:fe:45:f7:55:
04:d7:e9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:15:12 2026 by rpki-client