Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
File: 1-xqBDjqxlktE7LN3g0CyZtvaESY.mft (raw, json)
Hash identifier: GqUCq0xzSqIG0D+UsGfgFzpS6zaEvwZqViHTOwySsow=
Subject key identifier: C0:4E:48:E8:2F:24:A6:06:86:52:6B:25:CA:EB:59:F6:4B:28:CD:8C
Authority key identifier: FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
Certificate issuer: /CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Certificate serial: 019D9AAC196B83DACCCA5D108C6BE03CC847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 09:01:03 +0000
Manifest this update: Fri 17 Apr 2026 09:01:03 +0000
Manifest next update: Sat 18 Apr 2026 09:01:03 +0000
Files and hashes: 1: 1-xqBDjqxlktE7LN3g0CyZtvaESY.crl (hash: DV/AWGmE5gla73wBkCGV0cyvBNBL66/evZDY1eb3cOw=)
2: 5RoZVTfrYaJl3awhTUEWKmh-mjw.roa (hash: vLgOLE/P+EAVb2N+cRPxBkgd+Ontprhm/1obe74MJao=)
3: ToZEV5JGyeFOLj8ty2PbNgby5sE.roa (hash: DsdlMKnutBPPcHsH+/R1jP5sFhln6SW7LBjUC07NiYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:19:6b:83:da:cc:ca:5d:10:8c:6b:e0:3c:c8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a810e3ab1964b44ecb3778340b266dbda1126
Validity
Not Before: Apr 17 09:01:03 2026 GMT
Not After : Apr 18 09:01:03 2026 GMT
Subject: CN=c04e48e82f24a60686526b25caeb59f64b28cd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:6a:99:ee:c0:5a:0c:1e:e5:e9:9b:77:67:
08:b6:19:a3:5a:5c:af:0f:c8:23:bf:d7:27:8d:73:
ee:43:cf:ab:89:c3:7e:bc:47:33:83:67:14:a7:27:
10:7d:6a:ac:ee:70:4b:08:97:52:fc:78:a5:da:8a:
07:04:f8:e6:b2:a7:86:83:69:78:a3:02:e8:9a:38:
8c:20:93:b2:98:e9:05:8e:66:e9:17:18:d4:c4:38:
7c:37:2f:ce:58:b9:bc:3a:b3:56:13:04:db:6a:af:
e1:96:65:ca:a5:7e:bc:77:7b:1d:8b:31:a1:19:ef:
41:df:bd:31:a5:1f:ef:c1:f5:38:b7:bf:2d:25:83:
a7:9c:30:00:c4:16:a1:35:7e:4b:fc:ea:bf:7c:d8:
a7:02:28:3e:4f:ba:f2:90:b6:ce:43:0e:43:2b:47:
11:08:42:f6:e7:d9:02:27:bb:e5:34:17:a8:e8:3e:
3e:fa:b3:8f:21:74:17:57:02:bf:b2:c6:75:3a:1c:
de:54:d3:72:93:7d:00:4d:28:46:f2:cd:c7:46:aa:
28:60:71:ef:0e:33:c8:eb:a2:c5:77:5c:d0:65:66:
c9:50:c0:7b:f9:82:8e:e2:48:bd:0d:f9:4f:42:f2:
2d:12:68:35:13:0d:8e:6d:71:c9:f6:29:f1:94:12:
3f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4E:48:E8:2F:24:A6:06:86:52:6B:25:CA:EB:59:F6:4B:28:CD:8C
X509v3 Authority Key Identifier:
keyid:FB:1A:81:0E:3A:B1:96:4B:44:EC:B3:77:83:40:B2:66:DB:DA:11:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xqBDjqxlktE7LN3g0CyZtvaESY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9d606e-08a6-4f4a-b980-b5abf440e893/1/1-xqBDjqxlktE7LN3g0CyZtvaESY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:55:2c:13:25:7b:9a:5e:43:0a:b1:57:6a:89:f8:ed:e5:54:
aa:32:f9:97:7d:49:ec:17:0d:c9:90:2f:dc:d5:4b:e5:f6:57:
76:7a:dc:93:eb:7e:29:ee:2a:18:f7:67:1a:83:78:3b:bf:1b:
2e:0e:95:36:4d:30:6a:e5:28:ab:20:6a:d3:e8:65:7f:6b:ec:
f3:6a:66:cf:01:b9:b0:c9:a5:6d:65:07:2b:79:48:c9:19:59:
cc:43:fc:7a:7e:15:59:ec:d2:c4:23:33:99:bf:94:04:99:f7:
6a:8c:d9:37:af:c8:89:57:7c:fe:98:86:c1:ea:8b:fe:37:7c:
42:5f:27:b3:38:bd:5a:94:74:95:1b:97:0c:da:14:cf:99:fc:
32:c8:22:8e:7c:91:c9:41:1a:1b:60:de:98:40:57:74:74:0c:
d5:62:ec:89:14:85:9e:1c:b0:8a:21:1a:39:95:4e:6d:06:73:
94:2b:64:bf:e4:16:4c:fa:32:e8:c9:ec:a2:88:76:6f:49:28:
33:89:f0:7b:19:df:39:52:0d:04:11:be:e2:4e:b0:2c:e2:3f:
3f:b9:03:8f:02:91:9a:6c:a5:91:13:fa:8a:fb:1b:41:fb:5a:
1f:7f:c4:47:21:97:ea:76:82:61:83:55:2f:54:e4:3f:ad:3d:
40:34:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:49 2026 by rpki-client