Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier: glOfXhsTFP4sB47fbSKmCuUpZrH7L1dHFyXbvPJuo7Q=
Subject key identifier: 56:1A:60:07:AD:FB:DA:CE:52:15:DA:24:06:A2:67:8F:14:4A:8A:4A
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial: 019DA34170C849A04BA4BF85AB7C8BEFF3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number: 01CF
Signing time: Sun 19 Apr 2026 01:01:08 +0000
Manifest this update: Sun 19 Apr 2026 01:01:08 +0000
Manifest next update: Mon 20 Apr 2026 01:01:08 +0000
Files and hashes: 1: 2GIqOre8aovyQcr1e-R8g-dbRi4.roa (hash: 4xC7s77noCbz+G4tY4JMBYQVDuhDu5K8B/uxESDNLmE=)
2: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
3: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: DLPluxl4SIpbfL6YbIi2syb3GgpSqYlMh5OCvUSVtAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:70:c8:49:a0:4b:a4:bf:85:ab:7c:8b:ef:f3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Validity
Not Before: Apr 19 01:01:08 2026 GMT
Not After : Apr 20 01:01:08 2026 GMT
Subject: CN=561a6007adfbdace5215da2406a2678f144a8a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:c5:a9:e8:9c:c8:c8:fa:7a:d8:66:71:44:
22:d6:7c:73:db:db:35:a9:16:3f:25:2b:57:82:8d:
bd:5b:21:85:e9:bc:93:f2:8c:af:e0:40:9c:ac:b5:
37:ad:5e:17:fe:e1:64:98:da:6a:46:60:2d:99:6e:
e0:1c:91:85:83:c5:b7:15:48:ff:7b:d1:cd:c7:ae:
e8:20:a3:0a:72:1f:fc:e8:0d:94:96:7e:7c:ce:4a:
82:8d:dc:c0:3d:d7:e4:45:a2:d8:2b:43:1c:45:92:
80:6c:c2:60:d6:87:7e:9d:e1:47:d0:d4:4b:95:40:
30:e0:53:e2:44:f8:e1:00:75:54:19:6b:c2:f1:80:
59:94:74:33:de:41:eb:07:12:e0:4f:de:b3:ae:15:
0c:98:11:28:3f:fc:ca:f2:a4:8c:85:a8:79:73:fe:
b3:b9:23:96:e8:14:58:59:a8:01:96:46:d3:f4:c0:
5e:1c:eb:14:4c:2a:21:98:e4:7c:99:51:4e:ad:7e:
0b:d6:df:ba:d8:43:7d:d7:ba:ca:69:13:0c:74:89:
ce:dd:c5:66:c4:c6:99:51:b2:57:76:10:47:de:92:
b4:58:10:9d:ff:a3:4a:e5:8f:ca:23:60:ac:32:26:
41:af:88:ca:3c:f4:f5:1b:b2:82:6d:60:73:f5:04:
01:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1A:60:07:AD:FB:DA:CE:52:15:DA:24:06:A2:67:8F:14:4A:8A:4A
X509v3 Authority Key Identifier:
keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:18:e3:29:ab:1d:db:b1:03:10:37:21:96:2f:21:53:ed:1e:
15:09:c3:5e:86:c7:86:f4:ae:22:a7:23:5c:19:78:08:ee:4e:
9a:3d:c6:cc:c3:f8:cd:ce:1c:97:25:c9:64:66:0e:cd:bc:eb:
c4:56:7a:1e:68:59:df:e4:fc:ba:04:ba:54:1b:ed:91:a9:a6:
3d:8a:56:40:fa:60:46:52:a8:1e:5f:47:f3:0b:39:35:7d:b1:
56:2c:92:a3:24:08:42:62:36:07:0f:d6:21:aa:2b:b1:75:1a:
3d:14:3b:ba:e8:2d:9e:04:59:b3:06:26:7e:78:15:c5:03:d7:
b0:89:0f:7b:a4:aa:f5:31:dd:aa:63:ec:ea:f0:24:9c:df:4f:
27:1a:a8:e1:60:0b:16:a5:5e:1c:cc:54:82:8c:14:86:48:63:
40:7b:ec:3a:ac:9a:9b:d5:09:b5:3f:e1:8f:20:17:0f:25:ca:
83:4a:be:73:5b:c1:f1:1e:7d:2d:d1:13:30:03:65:56:e1:ba:
c8:5c:85:eb:c3:9b:79:b0:85:83:94:ca:b5:a5:5b:8a:9a:93:
33:dc:79:54:36:bf:6c:62:13:52:a7:b9:5e:71:ec:59:49:e8:
29:63:2c:35:8b:5b:02:bc:5f:15:cf:09:3d:19:e9:36:3d:89:
69:13:d1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:27 2026 by rpki-client