Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: bnbNIaNDPqStxqx6X55pV2xgklMcverVZfWSB00vhjI=
Subject key identifier: CB:C7:F1:54:84:BC:7C:AA:56:0D:A5:90:3A:31:BF:1B:F9:BC:6D:C9
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019DA29C834CD3AEA6A12CA5F3926D3C7F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 04BC
Signing time: Sat 18 Apr 2026 22:00:59 +0000
Manifest this update: Sat 18 Apr 2026 22:00:59 +0000
Manifest next update: Sun 19 Apr 2026 22:00:59 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: sP8YYeiMetQ04tZNoFX/CiyMjyjNwFLG3eN/ipJ+R5Y=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:83:4c:d3:ae:a6:a1:2c:a5:f3:92:6d:3c:7f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Apr 18 22:00:59 2026 GMT
Not After : Apr 19 22:00:59 2026 GMT
Subject: CN=cbc7f15484bc7caa560da5903a31bf1bf9bc6dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:f9:ef:66:c4:0e:10:1c:ef:1b:e1:62:53:
76:1f:07:16:8e:81:12:ec:c9:4b:d3:ae:ed:36:58:
95:3a:ab:9b:fd:17:bb:6e:0a:61:a4:96:24:d4:44:
0e:d5:0e:4e:9b:9f:05:2b:9e:fd:b6:8a:da:24:2b:
59:a3:08:6b:34:39:0c:46:a3:7b:67:d7:fa:9d:28:
9b:72:25:bb:7b:f9:94:f5:b7:24:d1:a3:ec:3e:a7:
71:45:c5:4f:78:0a:f0:0b:ef:ad:ff:c4:7c:ac:07:
8b:41:9f:bd:5c:96:9f:4a:f7:78:9f:53:d4:a7:c6:
af:7c:46:ee:5e:c1:f9:9e:68:82:12:bb:46:90:31:
86:57:01:6d:e4:3e:74:7c:60:8b:62:1e:18:50:6d:
4e:37:a4:70:b2:14:53:9f:8c:c7:6d:7e:b1:58:f6:
4f:13:d0:3f:fd:0b:05:f4:36:41:4f:12:00:61:de:
bf:27:5d:16:6c:72:0c:35:33:fd:22:95:7c:0c:0a:
5b:2f:20:52:20:e4:eb:24:1f:db:ef:56:27:9d:ce:
ff:d8:9f:90:b8:43:3e:59:99:c8:d3:b8:3b:c1:8f:
7c:a7:45:0f:4e:f5:2e:2a:f8:68:09:a5:87:1a:be:
74:80:23:08:e8:f1:4d:c0:c3:29:fe:09:23:cb:1d:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C7:F1:54:84:BC:7C:AA:56:0D:A5:90:3A:31:BF:1B:F9:BC:6D:C9
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a2:3b:de:12:23:ea:af:fa:91:ed:15:2f:ba:91:93:68:42:
3b:33:c9:f2:f5:f8:e4:e0:05:8b:fe:ab:cd:90:f2:4d:f0:c9:
be:e8:ae:c8:18:4d:6f:61:ae:15:80:4d:0b:e1:49:58:0a:b6:
6b:be:c5:be:9c:63:19:03:3a:a2:f1:4a:b1:f8:9f:ad:b6:40:
9a:50:b8:d2:80:30:ef:89:4e:6c:f1:05:b0:15:7c:53:fa:02:
c6:7e:59:81:39:d5:ad:d1:00:4f:b0:a9:86:dc:41:3e:6c:1d:
0f:2e:b3:6a:66:6d:2e:b4:4e:ef:12:7f:82:a5:c8:e0:f9:a0:
7d:49:54:15:bc:3c:f9:db:99:26:13:e7:ae:48:18:91:5b:3a:
11:02:b5:60:41:96:0a:21:ad:8a:6c:aa:44:64:56:89:2c:0f:
be:79:bd:d0:d8:57:ba:a2:61:3d:5f:df:4e:65:0b:04:da:f8:
52:9b:70:d4:c2:16:1d:ba:50:c5:53:d4:74:8c:4f:65:b7:cf:
21:1f:43:d5:f2:8a:23:6c:dd:67:8f:ed:7d:67:9c:94:b0:85:
9f:69:97:d9:18:de:41:3b:4e:67:b4:c8:20:5e:36:ff:58:2f:
84:6b:da:49:64:c4:f6:5c:0d:fb:c0:a1:2a:df:5f:42:7d:1d:
9c:94:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:05 2026 by rpki-client