
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: etGwGcmQHMxg/2mC4TQE/FOoEzpWRxSIyAegwTIGP8U=
Subject key identifier: 82:5A:04:6D:11:39:76:AA:4D:22:32:EA:42:37:2A:D9:7E:41:0B:21
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 019D992B42FC86321E00F9545AF0C36ECEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0881
Signing time: Fri 17 Apr 2026 02:00:42 +0000
Manifest this update: Fri 17 Apr 2026 02:00:42 +0000
Manifest next update: Sat 18 Apr 2026 02:00:42 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: JY3N+So8WqjKin6YM0sWusPdUC54vf0ilrgX5jMj1G8=)
2: 9GMkdyr4DbW0rD9GNXc5HYR9PeA.roa (hash: Kv7/JJMZellKaJMYAA/q400p0MFHvGxPXd6PvxQ7/kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:42:fc:86:32:1e:00:f9:54:5a:f0:c3:6e:ce:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Apr 17 02:00:42 2026 GMT
Not After : Apr 18 02:00:42 2026 GMT
Subject: CN=825a046d113976aa4d2232ea42372ad97e410b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:3a:8f:84:56:5f:09:9f:b4:d5:b0:59:f6:
31:96:a0:ec:bd:e9:88:f9:ce:e4:bf:e6:c0:62:31:
43:3a:07:8c:12:56:89:ce:41:3f:d3:76:08:4b:15:
3f:55:30:be:1c:84:57:b9:00:de:59:52:80:5a:8f:
e3:a2:57:3b:9d:ed:c6:56:0a:fe:95:ea:2b:e8:60:
d1:16:f5:c1:a3:6c:c3:91:66:d5:de:2c:07:b2:12:
89:05:e1:24:64:76:ba:02:f7:63:16:84:d0:9a:51:
ef:fa:a9:38:12:50:a7:48:5e:2c:31:69:89:f7:af:
68:8b:73:19:a9:65:87:58:8d:8e:f6:69:a9:26:37:
e5:76:15:78:b1:d6:2f:dd:62:0a:a3:08:0b:a1:75:
1e:ce:e8:97:18:bd:86:f9:8a:2c:74:f2:14:9d:98:
f4:5b:b9:83:f6:e9:64:89:b6:ea:d4:65:63:56:65:
07:c4:4c:bb:c9:07:b1:7a:ad:78:36:17:bf:72:ce:
19:ec:af:c3:98:20:a9:96:12:bc:63:6c:ec:bc:13:
47:c1:a8:71:c2:21:e6:58:44:65:8f:80:2d:6a:01:
a5:64:4b:0b:14:16:ef:01:6a:fa:3c:a9:ef:48:02:
2d:25:a0:b1:0f:63:db:34:fb:3a:bc:eb:63:80:fa:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:04:6D:11:39:76:AA:4D:22:32:EA:42:37:2A:D9:7E:41:0B:21
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:44:82:73:2c:82:6b:ed:d2:67:50:1e:1b:33:e1:51:c3:bf:
f0:4c:fe:64:e9:4e:6a:7a:06:95:3d:36:41:7e:c1:8a:28:c8:
af:8d:4f:d6:1b:43:49:13:d1:f2:25:e0:9d:78:03:12:26:28:
c3:da:64:51:ee:48:99:1d:8f:f0:2c:fd:95:c2:35:d1:ce:39:
ad:7c:07:bb:87:02:ce:c9:7a:46:ab:c9:b3:9e:4c:f8:1d:e5:
95:03:8e:07:ec:32:5b:07:70:b8:7d:f2:bd:91:39:c8:c4:79:
be:7f:f0:5e:48:55:1d:12:14:8d:ae:86:7b:65:5f:82:a5:bb:
66:d1:27:81:f1:da:98:17:99:ed:ec:d7:fd:a9:99:bc:2d:0c:
c6:31:8b:3a:f7:0d:f0:bd:f1:56:e2:e5:a1:17:d1:e1:77:8c:
9a:9c:f2:e9:32:aa:8d:48:44:12:eb:e0:e6:61:63:67:99:10:
a9:af:55:44:fe:50:e6:ce:8a:7c:b3:c0:9b:3c:cc:cf:97:86:
1c:ec:a1:12:49:4f:60:69:40:e8:b3:65:a6:9c:58:37:61:13:
e0:fe:c2:7f:cf:f1:62:1e:01:4f:86:8b:e0:e0:d2:d5:45:47:
e5:63:02:b2:51:2d:2c:14:32:b1:c4:c4:f8:89:57:66:09:b4:
5c:ad:0c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:04 2026 by rpki-client