Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier: 8eK6D2x5MtiIsohX3+tLgTvmjWTxPOgY56bCALgHML4=
Subject key identifier: DC:E3:91:F2:E6:D1:BA:7A:FD:50:D7:87:8E:6C:C9:8A:60:93:F4:41
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial: 019DA5D4C58E7C4BA00EFF40DE2A79376683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number: 040C
Signing time: Sun 19 Apr 2026 13:01:17 +0000
Manifest this update: Sun 19 Apr 2026 13:01:17 +0000
Manifest next update: Mon 20 Apr 2026 13:01:17 +0000
Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: pgVEQLGQzFPbwMW2B+jNYlGdte1UmA0nGiIhtCao3+U=)
2: HORWGw6AaqSSM12H6ipwx55-oWY.roa (hash: G83S9Vamz90/aaDzeWNDK3Mb1c9FRLQyr+F0Xgj6z8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:d4:c5:8e:7c:4b:a0:0e:ff:40:de:2a:79:37:66:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Validity
Not Before: Apr 19 13:01:17 2026 GMT
Not After : Apr 20 13:01:17 2026 GMT
Subject: CN=dce391f2e6d1ba7afd50d7878e6cc98a6093f441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c8:c9:8e:bf:53:aa:85:19:7e:03:c5:24:43:
30:6e:a1:d5:6a:fe:cf:54:42:c5:c7:d0:d1:8c:f8:
ef:ab:3f:4e:67:29:6c:63:33:d5:06:22:94:3d:37:
d2:a4:d6:51:45:2c:37:53:66:7a:ee:a5:e5:43:9e:
92:70:17:3c:70:22:13:11:a4:e7:8a:e4:6a:5f:10:
10:77:62:3c:b8:ef:9f:e0:72:42:d3:9a:1e:e3:7f:
0a:dd:21:2f:ba:2d:3b:45:42:59:78:f2:ee:ad:52:
8c:d3:0e:14:b3:10:f9:e7:7c:9f:89:61:b8:74:4a:
3b:0d:74:71:43:68:d2:ed:61:9f:22:61:58:ac:85:
4c:bf:b4:dc:ed:74:94:72:7f:05:e0:64:ca:eb:03:
89:07:32:1d:ba:05:31:f4:e8:9c:58:a0:a5:f1:c0:
a2:fc:b5:f5:08:9a:0f:e0:84:66:ae:65:64:30:79:
d2:9c:74:98:06:52:82:d2:c4:5c:68:bf:06:17:03:
3b:c2:af:82:b6:7e:ad:2d:a5:7c:76:98:6b:5c:dd:
3e:d6:90:b3:34:dd:5e:03:b7:81:8a:d1:79:a8:74:
b2:47:a7:d8:3d:1d:58:01:5a:01:dc:ef:36:7a:a4:
cd:2c:14:0a:da:9d:e8:af:0c:a1:48:06:36:c5:fb:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:91:F2:E6:D1:BA:7A:FD:50:D7:87:8E:6C:C9:8A:60:93:F4:41
X509v3 Authority Key Identifier:
keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:70:48:88:a5:c7:6b:6c:7a:f3:91:cb:64:e6:a7:4b:33:64:
f6:a3:35:cf:b6:4e:e3:28:2b:44:1b:5b:0c:e6:7d:ec:e0:76:
a5:3f:80:cb:d3:c6:41:6b:34:2c:bb:eb:a7:cd:6a:56:76:fa:
dd:8a:07:67:7c:80:88:cc:d1:50:6e:66:84:f7:20:30:fc:d8:
bf:fd:4e:e2:c8:53:4f:ff:f5:51:89:de:ad:16:bd:65:e5:b3:
09:e8:3d:98:6d:f0:2b:11:e6:06:e9:b2:34:fa:81:cc:4a:6f:
ef:db:d8:d3:84:5e:83:2c:3d:36:a7:9f:da:0f:6d:9b:8a:e1:
e8:dd:36:4c:ce:90:af:a0:2d:64:07:1f:b1:82:f9:10:7f:95:
ec:d5:15:0c:7d:94:da:43:28:f4:f7:ce:e0:9f:06:0e:8b:e1:
79:0e:6f:ba:06:87:7c:4a:e3:7b:f0:ef:3c:76:2c:c3:fb:18:
56:c7:b8:08:8f:5a:30:f4:59:f2:90:ab:2a:a2:52:95:92:2e:
57:5d:1f:2c:dd:a7:6b:06:4a:12:3a:4e:4d:1d:f9:e6:c1:0e:
64:93:82:17:ef:db:31:0a:e1:47:f6:3e:91:7b:c4:1c:c0:2a:
6e:75:26:d4:62:0e:c4:f4:e4:bf:8e:f2:e9:2f:e9:16:f4:48:
0e:8c:8e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:08:45 2026 by rpki-client