Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: 5HV2SdF5oCOBf3xMLGdxk/X4mppu7H4F4a1/XVVEdQA=
Subject key identifier: 68:ED:4F:CA:22:AA:E6:BF:6A:91:79:E5:BE:15:8E:78:45:3C:ED:DB
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 019DA3E6B31D8E744E7CDE87634A90D87D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 18C9
Signing time: Sun 19 Apr 2026 04:01:38 +0000
Manifest this update: Sun 19 Apr 2026 04:01:38 +0000
Manifest next update: Mon 20 Apr 2026 04:01:38 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: PdHdc73rCFFXPfGvZmC2wVVJUpj+OApHGmr2j6GCHAc=)
2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:b3:1d:8e:74:4e:7c:de:87:63:4a:90:d8:7d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Apr 19 04:01:38 2026 GMT
Not After : Apr 20 04:01:38 2026 GMT
Subject: CN=68ed4fca22aae6bf6a9179e5be158e78453ceddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:dd:33:1a:47:37:c0:87:c0:6f:1c:6f:b4:
a8:94:64:3b:e5:e7:43:cb:2b:cd:fc:e3:6f:b5:38:
0f:13:a8:bf:7f:1b:b3:d1:1a:50:35:26:93:37:d4:
41:73:e5:4e:e2:77:41:70:29:21:ac:f7:0c:c2:a6:
d1:c2:d4:b9:a9:44:66:64:78:2f:21:ab:59:b1:cb:
42:a1:f2:0a:97:1a:5c:0d:17:3a:06:7a:76:1d:bc:
b8:68:d1:ae:a5:50:3f:67:d7:65:67:a7:25:c1:0f:
b0:06:af:0b:96:6e:7e:4c:65:57:f3:e4:14:ee:28:
1e:d9:80:fc:45:fa:88:17:df:1c:83:4b:ce:9d:76:
05:a5:8f:96:b5:de:59:d4:5c:62:94:e9:26:50:6e:
c5:bd:d5:b5:d7:14:12:51:77:8d:2a:7a:f3:28:b2:
5a:32:90:25:ae:14:df:c1:5d:54:24:a8:ab:80:b4:
f0:8f:b4:41:c7:42:13:6a:6b:73:47:aa:c7:12:a1:
a9:c0:bc:9c:9f:69:87:bb:f5:94:35:8f:c0:34:2d:
b8:58:f5:81:72:69:80:29:96:e1:ee:34:23:2b:90:
a3:42:f2:a8:5b:6f:27:4e:56:39:44:d1:f1:f1:c9:
00:be:42:43:2d:d0:4c:ed:6f:47:72:1f:e8:e2:2d:
cb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:4F:CA:22:AA:E6:BF:6A:91:79:E5:BE:15:8E:78:45:3C:ED:DB
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:e3:1d:fb:15:66:28:a7:36:67:f1:90:02:56:02:83:32:
ca:00:01:fe:fb:c1:1d:9d:01:19:4b:71:3d:0b:3c:18:e1:96:
a4:c1:cf:84:7f:e7:db:c3:e6:de:02:45:47:15:0b:bc:62:87:
44:d0:56:01:c5:6b:ac:d0:06:9d:be:5a:27:c6:81:77:af:28:
1d:37:2d:35:b9:e8:7a:9c:6e:a2:93:36:48:4a:df:a3:af:db:
03:f1:38:f6:f5:a5:ea:db:53:1e:f2:e0:79:70:e2:f6:63:d6:
69:73:19:be:c5:c7:d8:02:19:e4:47:4a:1a:fe:c7:39:a1:72:
4e:96:bf:bc:a2:84:2a:6c:58:a8:63:10:f2:a2:ab:67:0b:69:
87:34:bb:af:fb:ce:27:63:71:ff:9f:46:2a:83:d1:33:86:9e:
35:16:d1:4a:ee:0a:7c:2d:a4:50:22:5c:6b:75:1b:08:b3:f0:
d2:f5:f0:40:2b:78:da:33:17:bc:a4:13:aa:3a:66:3a:1c:ff:
43:c0:7d:65:6d:8d:58:51:35:ab:b2:52:9f:49:d8:84:74:79:
12:2c:79:b4:b7:dd:c7:da:36:45:f9:b7:b0:2b:42:cc:fd:05:
85:72:71:77:22:9a:33:65:0d:01:38:2d:41:7f:ef:48:5e:b5:
82:9f:88:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:54 2026 by rpki-client