Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier: ykn4MJKFSJhzwp1g06x8K1uHaQcV+CpS8ZOcChsBFc4=
Subject key identifier: 8B:AC:E9:17:63:25:F1:44:62:02:F9:ED:F4:AE:45:2B:78:0D:B3:0D
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 019D9BBE3DA98203705CD50F3235CACF3FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number: 02A6
Signing time: Fri 17 Apr 2026 14:00:29 +0000
Manifest this update: Fri 17 Apr 2026 14:00:29 +0000
Manifest next update: Sat 18 Apr 2026 14:00:29 +0000
Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: 2qQ4pwpuklt5q6xsnCflDNJAPm+Gc79BEzXjoHw3bPQ=)
2: k3OU5IbsL93-_3lodtzKMZ_irSg.roa (hash: N0y0RdnbxB4G2UQPBSuq2ffyQtcz3uGKqNQzZ4Z0Sic=)
3: rxT-eoR75onud9U3--RgqGGLVNo.asa (hash: fP2TlKEDg1oZrwu3TKIn5MO/RcxmBw/JPEOwqIIPtTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:3d:a9:82:03:70:5c:d5:0f:32:35:ca:cf:3f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Apr 17 14:00:29 2026 GMT
Not After : Apr 18 14:00:29 2026 GMT
Subject: CN=8bace9176325f1446202f9edf4ae452b780db30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:81:ce:cb:36:39:7e:8c:ad:62:08:9c:66:
aa:d2:39:a1:63:a2:3b:dd:cb:eb:37:5d:bc:f7:3c:
72:bb:4e:41:0f:b7:f6:9e:2d:0a:9b:58:4e:7c:31:
78:bf:84:77:ed:3e:09:da:26:9f:73:76:c6:ab:d7:
86:7f:d9:81:14:c5:5f:a3:32:0b:df:62:51:c0:e4:
55:13:57:b5:03:18:a7:5d:5e:38:d1:69:39:a5:2b:
6c:4c:de:0f:61:a0:3a:37:43:fc:82:5c:5e:12:f6:
f3:2d:bd:cf:24:dd:6a:15:40:aa:ae:db:df:36:da:
8d:99:60:49:ad:0a:01:54:dc:6c:fc:9d:a5:77:d1:
fe:5e:f0:ad:7e:fa:96:4e:ae:f4:5e:af:c5:ca:d3:
f5:e2:f9:72:6a:21:3f:08:4f:4c:6b:a9:92:30:c1:
e7:43:4b:d7:1b:9f:fd:12:78:09:c9:3f:fc:5f:2a:
45:bf:d7:dc:f7:cf:dc:b2:6f:ea:2a:a4:87:2e:3a:
00:4c:56:1e:00:9c:0f:aa:b9:ef:b8:64:8c:63:7a:
c6:8c:23:85:79:b7:09:6d:5b:c8:85:7a:dc:e6:02:
6c:72:52:a4:e1:7c:61:f6:1e:f8:a2:67:8b:07:93:
43:db:1e:f5:76:5c:6f:4c:2f:b6:ca:f3:25:77:26:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AC:E9:17:63:25:F1:44:62:02:F9:ED:F4:AE:45:2B:78:0D:B3:0D
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f7:dc:a7:44:dc:bf:d0:a0:9b:c6:f3:31:84:69:f2:9d:c9:
79:a4:13:d2:9a:1e:3a:05:a3:90:d1:90:cd:83:0b:5c:c6:86:
9e:dd:0f:c9:1f:95:07:27:ab:bc:50:a6:7d:13:64:25:c0:af:
e3:6b:27:58:1a:6c:68:0b:18:de:bc:ab:68:73:0d:00:0e:d7:
a6:0d:23:c7:c3:c7:b9:28:d9:ab:cc:51:de:60:f6:bc:60:12:
99:ed:9b:75:5a:33:9c:68:0e:f3:9a:67:7f:0a:f1:42:80:ac:
46:75:4c:57:97:fe:fa:7e:2f:22:73:7e:2a:2c:2a:b0:7d:92:
8b:81:71:27:95:85:c2:22:fd:0e:83:ba:1a:eb:2f:50:e5:e9:
9c:b8:fe:5b:4f:01:46:96:db:be:4f:51:f6:fe:fe:1a:e1:59:
bd:91:9e:8f:f5:fe:cf:9d:9d:91:a2:c0:7e:1c:f8:30:fe:9c:
ee:ed:e7:20:55:c5:6e:d4:13:2c:d8:d3:5a:3e:ed:0e:4a:1a:
83:dc:fd:02:8b:1e:98:c7:c8:34:a1:63:3b:2c:b4:75:47:76:
f7:59:69:2d:6a:cc:8c:b1:32:80:60:35:bd:2e:11:d3:94:c1:
ad:c8:60:ef:47:03:0e:e9:2e:4b:74:1b:a1:1e:7f:71:a6:81:
04:9e:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:42 2026 by rpki-client