Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: eOTfbQ7cPXlM2ORvwnqYZU0sryhMoKNYGSnIpjdf/Gk=
Subject key identifier: D9:E9:8F:3F:9F:CF:1E:18:B6:CA:94:6B:FB:28:33:5B:07:66:FF:1B
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019D98BD8D17FB9690B5843664FBBBDF47F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 1129
Signing time: Fri 17 Apr 2026 00:00:52 +0000
Manifest this update: Fri 17 Apr 2026 00:00:52 +0000
Manifest next update: Sat 18 Apr 2026 00:00:52 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: ICXcVEjH0w8XyjbrETp9REy7IuLHplLFIhXKsKKmQm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:8d:17:fb:96:90:b5:84:36:64:fb:bb:df:47:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Apr 17 00:00:52 2026 GMT
Not After : Apr 18 00:00:52 2026 GMT
Subject: CN=d9e98f3f9fcf1e18b6ca946bfb28335b0766ff1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:9a:ae:db:35:ca:80:8e:21:37:a7:f1:ca:
e7:9a:d0:32:1d:80:3c:ec:97:92:a4:34:09:dc:55:
1b:62:8b:eb:5b:e7:a8:80:bc:eb:7a:35:88:fb:dd:
a8:5f:a9:87:f7:10:27:06:48:84:10:28:41:47:58:
61:9b:55:78:fa:02:c8:60:ad:1e:60:a4:58:cc:2f:
02:eb:60:35:75:01:f1:f1:51:de:01:21:83:92:8c:
bd:fd:a4:d4:8e:3c:91:e4:d7:8f:b3:bf:ad:80:6a:
0f:4f:c3:68:b6:3c:e1:27:0b:e4:f0:3f:0c:41:b3:
bb:30:73:4e:7d:97:33:b2:fa:ac:6d:d4:4f:e7:28:
be:c6:f1:7a:95:2c:c3:c0:99:cf:be:b9:b9:6c:c3:
96:1e:e1:be:be:a4:d8:99:19:d7:ad:b7:ad:80:78:
aa:80:b0:f4:3c:f5:c6:fb:fd:c3:f8:5a:02:51:53:
d5:c8:68:ac:8a:c4:d3:1e:dc:b8:7d:1b:17:6a:df:
13:be:2e:1e:45:5e:d2:a5:e9:72:d5:d9:de:75:2f:
e1:02:13:85:2b:b9:0b:d7:05:b0:ba:8e:db:5b:c7:
f7:e4:07:62:22:f9:e8:55:6c:05:6b:9a:2b:9c:1d:
aa:86:28:59:10:22:f2:00:a2:a9:ca:0f:f7:90:68:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E9:8F:3F:9F:CF:1E:18:B6:CA:94:6B:FB:28:33:5B:07:66:FF:1B
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e0:23:8b:d3:d5:53:84:8d:85:28:5f:aa:19:6a:e4:c4:98:
e5:7a:78:3c:ea:3b:4b:07:59:bf:6d:b1:cf:51:5c:64:4b:f7:
5d:00:de:ef:ef:81:ba:1e:48:19:b9:cd:14:cb:f8:9a:3d:72:
dc:b3:a3:2a:34:fc:58:44:ae:de:d1:87:7c:2e:9c:24:82:8b:
eb:64:9d:9d:51:88:7a:e3:dd:af:42:f3:bb:ca:4d:b2:2a:61:
1a:b2:09:aa:af:14:c6:51:b9:bb:60:2b:40:fa:3e:0c:a2:68:
82:76:11:5b:f7:d8:55:d2:6e:75:6c:b3:bb:b8:c4:4e:63:38:
e6:5c:df:06:0a:2b:31:99:4f:b4:2f:65:78:85:0e:39:ed:80:
32:48:02:8d:0a:25:67:fe:c3:27:76:3d:70:d8:eb:d5:9b:e4:
a5:ce:15:5f:e5:b8:c0:3f:cc:6d:3b:6d:c4:af:9e:b1:72:58:
7d:59:69:94:bd:9a:83:21:5e:7a:ac:0b:d6:29:ab:61:7b:98:
db:6f:62:77:05:d8:04:6e:df:ac:d8:b3:04:ed:14:09:a0:88:
11:e6:ea:bb:44:f2:80:78:31:de:7f:87:be:ee:fb:d1:eb:4c:
8a:2c:de:ea:2f:6b:8d:ce:27:b3:52:83:7b:ec:d1:19:d8:72:
2f:d4:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:04 2026 by rpki-client