Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: 6dXPD2GaD+5p6RdT0FdNGwS4K6kUrmDi3HD2NHG0wFc=
Subject key identifier: B3:36:C2:C9:A2:C9:52:32:EF:D5:46:39:B6:B1:3E:0C:31:1D:DD:DB
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019D9BBE26A83AAB028A5C5C878C0BC1D279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 1269
Signing time: Fri 17 Apr 2026 14:00:23 +0000
Manifest this update: Fri 17 Apr 2026 14:00:23 +0000
Manifest next update: Sat 18 Apr 2026 14:00:23 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: JNzVRXTRnBAZjPfaDYIl69gZJ+N35GDdtAaV2l3CIEs=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:26:a8:3a:ab:02:8a:5c:5c:87:8c:0b:c1:d2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Apr 17 14:00:23 2026 GMT
Not After : Apr 18 14:00:23 2026 GMT
Subject: CN=b336c2c9a2c95232efd54639b6b13e0c311ddddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:8a:8b:f4:59:f1:bc:d8:48:60:6f:c1:61:
5d:63:94:06:75:f1:8f:8c:04:ed:33:e7:5f:fd:f2:
25:c4:14:57:52:87:0c:e1:ce:5b:7d:b0:71:a0:79:
ad:17:0e:f2:cb:db:b7:29:50:67:90:3b:0f:12:6a:
84:87:7e:c3:0e:03:67:5c:a0:fb:21:5c:55:d4:3f:
b7:f9:1f:d2:3d:b3:a9:65:cb:81:04:2d:56:b0:d1:
1a:15:79:8c:a8:54:14:b3:cf:b0:05:4a:d0:13:fa:
7c:df:8b:e3:7e:ae:8c:3a:70:a3:dc:b3:a5:f8:88:
0e:22:7d:fc:02:97:7d:cd:8a:19:80:82:9e:74:68:
71:f1:56:fe:5b:98:a9:b2:fa:53:6f:65:cc:85:d7:
cc:1b:aa:c6:62:d7:af:b5:78:c8:be:e5:5a:e1:d1:
54:0d:1b:d0:da:bf:98:c3:c6:2d:a9:7a:b7:14:59:
6e:97:30:69:77:6d:23:16:cf:13:82:81:b6:01:0b:
9e:5f:22:63:fe:8e:09:70:ee:0c:2c:d4:04:16:83:
c8:39:3d:68:6a:c4:4d:86:00:b3:0a:ad:c0:73:1f:
a4:63:2d:77:af:89:f2:8e:8e:79:a0:6c:2a:47:14:
83:ea:b8:03:dd:f4:e2:48:73:52:c6:39:87:de:21:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:C2:C9:A2:C9:52:32:EF:D5:46:39:B6:B1:3E:0C:31:1D:DD:DB
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6c:64:1b:9e:e2:56:f2:24:7e:0e:c1:ea:b3:3e:b1:6e:8e:
bb:db:81:e3:25:27:cb:ce:1f:cb:59:c8:eb:c7:12:c0:26:8e:
e3:01:56:b1:a2:bc:66:c0:eb:6d:80:ec:4d:13:42:16:fc:a6:
e6:50:4b:e6:5e:0d:98:9f:6c:24:d8:52:0e:ee:2d:59:5c:04:
4f:61:95:1c:8c:4a:eb:32:3e:2f:df:e4:be:52:a7:8e:05:17:
2c:f4:15:51:9d:5c:22:85:3e:3d:bb:6d:02:e9:a9:0f:bd:7f:
ff:ba:4c:67:71:cc:8f:dd:61:b9:4c:02:cc:19:90:12:e2:3d:
1a:0a:ca:85:fe:61:1d:09:e8:25:fe:94:21:18:87:fb:04:35:
df:0a:fd:0c:56:9a:80:4b:c8:95:9d:4a:7f:ff:89:1e:1c:f0:
58:74:5b:18:0c:fd:2a:45:e9:52:a4:bc:d0:ef:1d:c7:76:d0:
c8:7c:af:c6:78:2c:ce:57:ba:2a:f4:4c:6a:9a:1b:82:38:31:
cf:86:ac:3b:e5:aa:4c:12:5e:89:bc:c2:a7:11:50:c9:f6:75:
bf:04:1f:33:47:95:19:dd:1b:4f:e7:80:b1:f2:67:4f:8c:17:
6b:10:4a:f1:7c:20:63:25:f5:d7:ad:05:91:62:a3:60:94:1a:
83:70:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:36 2026 by rpki-client