Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File: F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier: tr3VM8llKVXivxcOKQWp4CcCK5UiiySbOP/QUzpNilI=
Subject key identifier: 8F:15:D9:37:AF:20:51:89:A9:05:11:28:93:D5:D8:67:AE:E5:A0:91
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial: 019DA3E69C63E5BE6429D67B82AA654FC0B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number: 14D4
Signing time: Sun 19 Apr 2026 04:01:32 +0000
Manifest this update: Sun 19 Apr 2026 04:01:32 +0000
Manifest next update: Mon 20 Apr 2026 04:01:32 +0000
Files and hashes: 1: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: 4KAEcf1NTCjOcYdx4BV7rLfxnA0I1aMP38ihskaoUHo=)
2: eG3Ghd4QY251cC0oyrBwUOx4vJU.roa (hash: uu184Za6cbaBnX1S2FGNXjt2OHJZDRN2y2HwY8usDSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:9c:63:e5:be:64:29:d6:7b:82:aa:65:4f:c0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
Validity
Not Before: Apr 19 04:01:32 2026 GMT
Not After : Apr 20 04:01:32 2026 GMT
Subject: CN=8f15d937af205189a905112893d5d867aee5a091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:fd:53:70:48:4f:16:8e:f0:f9:35:fe:2b:
73:a0:4c:e9:13:7e:b3:a2:c1:1d:70:31:bf:b9:83:
36:1c:ff:a2:72:2c:e5:c7:6d:f9:19:ea:26:52:6d:
7d:40:5f:c2:bd:45:33:38:38:6e:49:40:6f:89:0d:
2a:3c:cf:f0:f1:1d:a7:83:36:e3:d3:9d:de:6f:cc:
c5:f9:fc:7b:89:d2:fd:38:47:4c:0e:0f:ed:5e:85:
81:82:09:28:e1:a7:e7:fd:19:50:a7:f2:b7:7f:a5:
10:24:73:0c:0d:8f:6d:af:59:2a:fd:77:4a:ae:f9:
58:f1:6b:53:69:a6:dd:0f:9e:ee:0a:77:a1:01:97:
c0:10:da:1e:bb:9f:68:79:77:c1:51:4c:22:32:a1:
2d:5e:8f:ee:4f:af:57:7b:dc:c7:95:80:bc:88:da:
05:03:87:bc:84:97:86:4b:99:61:0c:da:48:05:4f:
ee:6e:3e:96:69:0e:f4:db:4e:27:d1:32:ac:3a:57:
9c:83:0e:6d:ae:26:aa:4e:80:3d:12:7a:30:61:9c:
8c:e7:f1:0e:f8:5f:06:b9:2d:5f:ad:53:ba:2c:cf:
ad:82:04:f7:cb:e4:2d:49:1e:11:a5:a2:05:f1:ac:
0f:4f:bd:0e:02:7f:94:6a:cc:a5:97:f7:01:59:92:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:D9:37:AF:20:51:89:A9:05:11:28:93:D5:D8:67:AE:E5:A0:91
X509v3 Authority Key Identifier:
keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:72:57:2a:e5:0e:8a:65:05:cc:df:d8:02:95:65:ba:c1:24:
93:2a:30:4f:4d:8c:54:a8:c4:32:10:8c:d1:41:07:cb:ae:a8:
a6:09:e9:77:66:d7:bf:9f:dd:7c:47:40:c8:f2:eb:89:dc:66:
ef:25:82:9f:cd:47:59:c7:5f:73:c6:b2:c1:f3:1f:35:39:ae:
b7:de:f3:04:ec:14:6f:e4:11:02:64:c5:5b:00:40:84:03:c4:
3f:68:14:71:51:43:02:dd:5f:a3:85:2d:d4:f7:b3:5e:96:44:
1c:96:f3:9e:cf:f4:00:2c:cc:d8:eb:ed:91:df:4b:3e:de:a4:
b4:f7:0b:37:f5:5f:42:4c:3a:37:67:79:91:23:a3:fc:f3:40:
c6:9e:f8:ba:24:65:09:34:0f:9f:16:1c:9b:1d:99:fc:3a:ac:
c1:b0:34:36:77:85:3d:62:61:89:67:39:3c:a6:e9:e7:63:ad:
9f:11:ea:84:04:89:0c:f3:0f:6d:6d:ad:3e:25:33:c3:35:53:
10:c1:14:4b:3f:fe:cb:13:79:09:8f:6c:bc:b6:80:4a:0d:43:
a5:50:03:d2:e9:f2:cf:d4:31:a5:fc:ae:54:3f:8b:a0:3a:48:
6a:48:1b:68:e1:20:a0:26:2c:33:07:ab:7c:4f:50:e5:99:52:
8b:49:b5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:33 2026 by rpki-client