Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
File: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft (raw, json)
Hash identifier: k/1hA8E0VJl2tbj6G97qyyIgMyoLRAHWKGQr0VwrzrU=
Subject key identifier: 3A:C8:26:10:70:AD:ED:4E:57:94:76:CA:72:F9:91:ED:D8:3F:EB:B1
Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
Certificate issuer: /CN=fa160e75add6ebf6f44581321477fab92d22e44f
Certificate serial: 019DA48A58BBAD47BBA80FF1104A7DE46F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
Manifest number: DA
Signing time: Sun 19 Apr 2026 07:00:23 +0000
Manifest this update: Sun 19 Apr 2026 07:00:23 +0000
Manifest next update: Mon 20 Apr 2026 07:00:23 +0000
Files and hashes: 1: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl (hash: TzyhOEBqnH22JM/dQ3E7j3ArafpV8g+e/ckyVG8uARM=)
2: thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (hash: 0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:58:bb:ad:47:bb:a8:0f:f1:10:4a:7d:e4:6f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f
Validity
Not Before: Apr 19 07:00:23 2026 GMT
Not After : Apr 20 07:00:23 2026 GMT
Subject: CN=3ac8261070aded4e579476ca72f991edd83febb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:fc:bc:73:11:cc:c4:9c:b2:96:aa:e4:9b:
c4:8e:3a:a2:33:b4:0b:2a:07:68:52:05:b0:43:8a:
cf:80:4e:ce:6f:44:4f:60:39:95:36:ab:a7:a3:70:
21:f5:6b:49:22:48:47:81:fc:0b:dd:35:ad:69:2b:
87:f8:90:f5:f9:85:af:00:bf:59:e1:a8:75:3d:db:
61:a7:b7:8a:ad:69:b1:b9:4f:d7:87:28:3e:96:dc:
7c:a1:61:61:6c:b4:96:fb:91:b4:ea:4c:7c:e3:96:
df:5c:e0:d8:b1:37:5d:8a:68:4f:53:4c:14:dc:f4:
5a:8b:46:f1:54:4a:00:32:cc:11:a5:c7:2f:02:15:
a0:4e:a2:b4:f2:bd:4e:d5:02:be:0b:3f:d5:6a:da:
f9:17:d2:11:21:3c:2f:d4:aa:15:99:33:18:fc:ad:
13:4d:21:44:43:51:e2:16:17:92:9f:3f:37:1d:89:
e7:6b:f8:f7:0b:89:62:17:c8:2a:03:c2:d5:4b:34:
21:e5:c8:9c:2f:c6:1d:82:51:cf:f7:05:65:5d:dc:
c9:be:ca:25:e6:6a:c1:9e:f3:b1:07:25:cc:72:80:
1a:52:ea:ff:eb:ed:a9:b2:d6:c2:fc:df:29:d3:a3:
53:ae:21:b8:8c:e2:fd:42:31:28:e2:6e:50:a2:5e:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C8:26:10:70:AD:ED:4E:57:94:76:CA:72:F9:91:ED:D8:3F:EB:B1
X509v3 Authority Key Identifier:
keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:d5:58:43:96:91:ae:50:90:70:6b:87:31:bc:bb:23:c6:dd:
81:cc:f7:e3:94:7f:c4:4a:de:df:d3:88:6a:ab:d2:25:68:45:
ed:e1:79:1d:c2:1b:87:30:de:89:b9:3b:cd:96:c5:c4:97:52:
9a:0a:0d:dd:b4:9f:c9:1f:fa:8d:90:61:82:50:81:71:b8:2d:
73:c2:42:fb:5b:0f:6a:fb:fc:ff:7e:b9:99:05:1d:9c:fb:3b:
95:30:24:48:8c:94:76:9f:b3:48:96:87:25:aa:e7:b9:15:a5:
e9:42:86:26:4c:09:10:b9:13:ac:fa:97:6f:94:99:9a:bd:84:
c1:45:b5:5e:a5:78:20:39:0f:71:5d:cd:60:55:16:b7:86:a1:
c9:bb:f5:61:50:7a:7a:8a:c9:1a:6c:e7:1a:09:60:ed:5b:61:
3a:c2:05:3f:90:79:ef:5f:23:02:e9:73:e3:c8:67:31:fa:00:
f7:55:cd:29:6f:4b:7b:e6:e2:4f:83:ee:c7:19:d2:86:f8:73:
eb:84:af:65:96:5b:d0:62:7c:c6:17:d1:c1:ac:63:ac:b9:15:
12:c2:15:3d:6f:3b:c3:b5:a8:cf:12:86:ce:26:1b:97:11:60:
28:64:a6:a6:09:72:a5:2e:81:58:1c:ea:53:d5:0d:bc:59:88:
40:bd:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:51:53 2026 by rpki-client