Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json)
Hash identifier: dUtAtpQWFDs81zJW6Dqf2WpP2Y8oF43oYVr+GwZJZvQ=
Subject key identifier: F7:47:5D:4C:6D:25:67:0F:4C:B1:11:37:E3:B1:E1:DF:34:11:CA:65
Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Certificate serial: 019D98BDB91191A80B261BBCDF78120A5043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:01:03 +0000
Manifest this update: Fri 17 Apr 2026 00:01:03 +0000
Manifest next update: Sat 18 Apr 2026 00:01:03 +0000
Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: FR87YrkVqX8dCsJl0OxzzSE2Gnh+KO3crYFPGFT+tYE=)
2: KJO5SafutHdx989Y4beR-MDi2-w.roa (hash: DcoFrISYVHpYfF3qhUpQz0nKOtSKRePG4GmzBfnkvzE=)
3: aoIheKr9cfwdkfPnA8io2rwnzUU.roa (hash: bd8EK0ErpEEUoneRY3CDUEglnwrfEtlsUHg/CzYtrqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:b9:11:91:a8:0b:26:1b:bc:df:78:12:0a:50:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156
Validity
Not Before: Apr 17 00:01:03 2026 GMT
Not After : Apr 18 00:01:03 2026 GMT
Subject: CN=f7475d4c6d25670f4cb11137e3b1e1df3411ca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:de:03:ef:bc:8e:16:fb:30:cd:6c:53:c4:
b9:34:6b:db:7a:35:d0:c3:29:15:4f:bb:cc:62:e8:
c8:54:c0:bb:38:ca:dc:fa:8b:92:e3:fa:b5:82:46:
46:30:c1:eb:93:a2:89:b4:6b:d3:35:21:86:28:e3:
7a:1a:62:43:7d:de:f3:2d:1d:4c:6c:dc:c3:e3:82:
4b:b7:b2:97:fd:af:df:a9:32:15:6d:ee:73:f4:48:
6c:34:35:23:17:5a:05:78:db:db:33:88:dd:67:6d:
3e:d7:ee:86:09:dc:cb:fb:d4:2c:29:23:fc:b9:fc:
d7:65:de:90:e9:cf:61:7a:dd:f6:45:dd:58:f7:f8:
4e:32:ff:1c:5e:9e:79:a4:3d:d6:94:44:a4:64:52:
f3:d1:12:ca:e4:12:9e:41:1e:47:92:81:e8:f3:1d:
1c:bc:ea:e4:a7:1b:85:be:8c:cc:17:4f:79:ba:53:
87:01:96:8c:a5:4f:12:75:29:06:18:44:06:42:f0:
d6:b0:8c:8a:f6:88:fe:2d:ef:b5:ac:06:f2:33:f6:
2e:90:bb:82:dc:c9:ac:5b:bf:31:af:16:58:2e:68:
f3:a0:f8:9e:1e:e5:74:3a:4f:f8:65:71:6a:7c:d5:
97:46:9f:87:59:c1:95:ca:63:9f:c7:57:64:69:62:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:47:5D:4C:6D:25:67:0F:4C:B1:11:37:E3:B1:E1:DF:34:11:CA:65
X509v3 Authority Key Identifier:
keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:b5:0c:b8:8c:be:3a:82:47:f2:f1:63:bb:f7:24:9a:95:
be:9f:de:13:96:a2:3b:9c:73:c5:a3:16:c8:c2:f3:d6:44:a0:
25:1f:af:9c:07:78:e6:33:d5:38:4f:b9:56:00:cf:fa:ae:85:
ef:78:4e:85:95:ba:0a:90:9b:3a:d6:8a:08:02:75:d9:e2:34:
b3:56:b3:fc:25:e7:e9:8f:f4:86:a8:9f:53:61:93:ec:a9:d0:
2b:51:cb:8a:96:78:32:51:4d:a3:90:24:ab:86:0e:cc:e7:15:
52:f0:04:22:30:c4:45:72:a7:d6:64:a6:73:43:0e:a4:ac:c2:
cb:dd:47:76:d1:02:37:b1:a6:6e:8e:85:e0:23:d9:3f:d5:47:
fd:19:92:5f:9e:20:8e:89:21:81:03:60:65:36:6f:4a:40:d2:
d9:11:0c:82:11:19:19:4f:d4:58:db:ff:31:25:87:e7:b6:c6:
fb:59:bb:82:0e:35:5b:84:93:a0:30:72:cb:83:c2:1b:cf:2b:
ca:3b:ce:82:73:05:90:13:29:be:79:87:06:c0:f3:9c:cb:4d:
1b:0b:62:fc:06:32:4e:d8:50:ed:2d:50:6e:67:b9:ff:15:19:
d1:42:f4:51:c1:f4:ab:84:d2:f4:ea:21:38:1e:22:52:21:79:
05:7e:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:30 2026 by rpki-client