
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
File: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft (raw, json)
Hash identifier: EehGheSTFWcTN4hGomdq1GmIJxLmodusNe1yoHHyfD4=
Subject key identifier: 0F:70:32:3B:6C:01:DF:27:D2:5A:B4:A7:6B:8F:06:74:32:5A:66:2B
Authority key identifier: D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
Certificate issuer: /CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Certificate serial: 019DA4C1F3B34D95EDA113B7A76F8C5175C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
Manifest number: 18CC
Signing time: Sun 19 Apr 2026 08:01:07 +0000
Manifest this update: Sun 19 Apr 2026 08:01:07 +0000
Manifest next update: Mon 20 Apr 2026 08:01:07 +0000
Files and hashes: 1: 1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl (hash: 0fDPBrtaETimIh+PBxRgwVH+kgIr1uEDBT1SYPLmY2Q=)
2: WqEnKFzBfeJzGRg3q0xQA818br8.roa (hash: p62OMTqeflTKBBGHK0BkC6wtW0ZeWTlpmF+DHVQ50XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:f3:b3:4d:95:ed:a1:13:b7:a7:6f:8c:51:75:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c7c4eab5c07948cbf44a8a01c6a827fdae9341
Validity
Not Before: Apr 19 08:01:07 2026 GMT
Not After : Apr 20 08:01:07 2026 GMT
Subject: CN=0f70323b6c01df27d25ab4a76b8f0674325a662b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:96:64:fb:6a:fa:3e:60:70:aa:e7:9a:d5:b1:
da:bf:7f:85:e1:f3:67:64:45:13:a7:d4:44:1c:d9:
85:a8:75:51:96:11:48:ef:35:02:a5:b6:b8:12:35:
48:ca:bd:7b:e2:6c:cc:69:cd:6d:d0:ec:48:c0:3c:
87:1b:b2:18:fd:69:d7:95:19:21:9e:2e:f0:2e:6b:
e4:91:64:14:1b:72:bf:ed:d1:74:76:e7:91:98:0a:
98:54:63:07:96:88:f6:ce:2e:82:1a:08:38:3f:5c:
56:de:2d:8d:24:6c:ec:7e:a6:26:0f:fa:1f:4f:1b:
0c:95:be:a5:4b:b2:61:07:b1:e8:f1:f8:75:5a:b1:
36:04:1e:69:46:82:82:6b:c5:99:25:b8:d5:23:ab:
00:ea:37:8e:0a:22:62:ee:15:a6:07:bc:8b:53:37:
e3:1f:e7:fb:07:5c:65:a2:8d:f7:96:84:70:d3:a6:
68:e8:30:30:2f:95:3c:12:8f:8e:e6:93:e4:c0:76:
be:e7:1c:ad:1c:46:61:f1:5c:d5:9a:d3:69:08:61:
da:95:48:57:0b:16:49:1c:ef:46:4a:e9:55:ff:54:
22:70:2e:d9:e7:1e:36:53:73:34:9c:0c:4e:19:53:
9d:34:c2:97:c5:7c:43:0c:c2:6d:66:67:ff:ea:99:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:70:32:3B:6C:01:DF:27:D2:5A:B4:A7:6B:8F:06:74:32:5A:66:2B
X509v3 Authority Key Identifier:
keyid:D4:C7:C4:EA:B5:C0:79:48:CB:F4:4A:8A:01:C6:A8:27:FD:AE:93:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5863ea-419a-4c29-8e3e-8d525a563e61/1/1MfE6rXAeUjL9EqKAcaoJ_2uk0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c2:d5:7e:4f:af:74:be:a4:6b:4e:df:3d:80:70:db:0b:94:
2f:27:c3:03:45:99:00:35:56:36:f7:7c:6f:7c:b4:99:79:2c:
49:17:82:96:4a:c1:28:63:9f:94:f0:8b:61:12:be:cc:74:19:
38:39:69:92:6e:66:5d:cd:b3:4e:36:e6:d1:ff:35:dd:4e:62:
27:14:5d:b6:a5:a3:3d:68:37:fd:66:82:e2:0f:e8:8c:1f:b0:
e2:d9:c4:89:2b:43:fd:75:d0:eb:5d:97:69:bf:c4:24:60:02:
57:01:1d:9b:f1:18:51:5b:42:8e:7a:bc:c2:81:28:0e:0f:de:
6f:e1:41:49:75:31:57:fd:20:2d:8a:82:17:0b:24:9a:3f:50:
2d:a9:44:ca:a5:75:fa:60:06:1e:17:c6:9d:75:e1:27:c7:ef:
ca:9b:46:41:ab:81:2b:4a:43:f5:c5:5b:16:a3:1a:cb:dc:aa:
d5:d4:bf:16:d5:6b:59:9d:1e:cb:28:8c:c1:a1:5b:b3:40:dc:
26:13:ac:9c:3c:dd:5d:2c:3e:88:83:d0:9b:ef:b0:91:91:4e:
39:30:02:7b:ea:5e:0b:63:33:32:3c:11:e5:9a:aa:83:21:e6:
98:31:91:af:93:43:6b:b7:9a:c4:e6:ee:8c:8d:96:7f:5f:a0:
a4:cd:92:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:25 2026 by rpki-client