Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: Ur00bOqXci9hIqGHEit+difplWRa9DFTBvGs13h6IFc=
Subject key identifier: 39:7B:85:0E:CB:F6:31:B1:C0:A6:F8:32:12:55:AE:C8:92:58:7C:B3
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019D992B12944DC888A563F1AAD63D6505A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 1607
Signing time: Fri 17 Apr 2026 02:00:29 +0000
Manifest this update: Fri 17 Apr 2026 02:00:29 +0000
Manifest next update: Sat 18 Apr 2026 02:00:29 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: Fvj0If4/0XfewhSiw4/EB5zE4JE1997fKYWYCmrFlzc=)
2: HXOFYv-072FsOVg35mkckEgbyio.roa (hash: rr27UIRFNz1qEQQUakpKnuloBOEhVERRXmaajk2GDbc=)
3: iCcCouY1S-nB4LsSEbuN21LdER8.roa (hash: b4tzlX7SLxO9i1S2FBRMsymp/F3ncDEjzvJear130vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:12:94:4d:c8:88:a5:63:f1:aa:d6:3d:65:05:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Apr 17 02:00:29 2026 GMT
Not After : Apr 18 02:00:29 2026 GMT
Subject: CN=397b850ecbf631b1c0a6f8321255aec892587cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:f8:df:56:d1:fb:61:64:5b:55:d9:a0:d1:
20:a6:fc:d5:0d:d6:eb:30:58:05:19:35:6b:de:47:
15:b4:08:67:66:be:10:1b:89:33:d7:9c:2b:4f:dc:
2f:13:1e:89:3e:ab:06:24:9c:54:6c:4b:df:05:d3:
19:0c:a4:31:38:bb:b0:48:5e:b2:a8:a8:07:dd:c7:
19:3e:dc:6c:6f:fb:16:40:3c:22:d8:5f:63:31:18:
5e:f6:eb:5c:7d:9a:6b:46:da:d8:71:42:3c:c1:11:
92:5a:23:3b:69:1d:b8:ba:6c:50:1c:61:8d:0e:8c:
b6:c1:19:73:20:69:74:d5:ec:61:5b:be:16:c6:4b:
0e:56:e6:1a:90:f1:ce:32:34:3d:d6:05:ef:8b:0f:
a8:61:dc:26:55:40:d0:ad:14:a5:1d:16:7e:8a:4d:
f0:4b:2c:11:59:ab:b4:a9:2f:1d:59:9b:c2:8c:0f:
19:d7:f3:eb:25:b9:7f:bf:c4:9c:64:24:2f:79:ac:
ae:e2:bc:d4:74:ea:35:bc:aa:28:88:75:9d:5a:02:
4c:9e:e6:4f:24:ca:d3:f5:53:8e:e2:24:8d:cc:dd:
44:82:29:c9:24:27:fd:66:3e:9e:aa:42:d4:98:b8:
2e:a5:1b:93:33:40:ad:c1:7e:9a:63:78:a6:f0:81:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7B:85:0E:CB:F6:31:B1:C0:A6:F8:32:12:55:AE:C8:92:58:7C:B3
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4b:4b:b7:4f:3a:63:23:f5:f6:c6:c4:e1:ab:5a:1e:20:ae:
6a:78:ef:7d:bd:49:c6:8c:c2:9a:31:4f:18:e7:86:8c:bd:c5:
4d:2a:9a:e9:ab:10:66:4c:c3:7c:78:12:69:8d:e5:d0:f3:64:
15:0a:3b:9d:8a:c4:22:7e:73:3c:e6:e2:ea:a2:8b:64:2e:43:
34:38:55:a0:d7:86:17:0b:04:25:a2:86:20:26:34:ba:e3:d1:
67:35:24:ba:e4:1f:2d:a1:fb:95:dd:ae:a4:99:dc:95:87:a7:
3a:31:71:df:60:af:77:59:8a:79:c7:ef:58:0b:b0:b8:f8:dc:
3f:7b:93:80:c6:77:25:34:88:9c:f4:23:b0:c7:db:cc:f8:47:
1e:ef:4c:85:06:a3:60:e9:a4:68:01:b3:54:3a:2e:a7:e3:00:
8b:8f:55:18:ea:be:7f:49:94:b0:75:5d:bd:4d:6d:a4:09:17:
a9:91:00:49:ae:65:5d:69:44:c6:cc:a4:85:24:58:7b:9e:0a:
37:f7:ac:f7:b1:e8:0a:b4:83:29:83:94:5c:f3:c6:e2:60:76:
99:4f:7e:78:75:a1:7f:90:81:a6:2b:25:eb:7e:13:f1:61:57:
f2:2d:13:5c:6f:5b:3f:fb:ba:1f:f4:af:a2:92:97:c9:06:45:
23:7a:f2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:31 2026 by rpki-client