Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: hkVv2AGDMIGFXudtvAZNJJ37VIi6WOzuR1VSutqcEs4=
Subject key identifier: 6C:BD:3F:C2:2E:11:A5:F9:8D:46:DE:A9:98:E4:24:13:94:5C:1E:5A
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 019DA3E6AFF21F997BB1617B83B1E55FAC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 04:01:37 +0000
Manifest this update: Sun 19 Apr 2026 04:01:37 +0000
Manifest next update: Mon 20 Apr 2026 04:01:37 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: 4MTIagSxDL1oawCzSoqcpUBnwbr+49CvK807tK5Ye0k=)
2: dMl0CEajkrxcgLNcfpnLA8OuL7A.roa (hash: CYX2WX+QfrhOpGiBFy1DWZkIM2JKpSw/oiXkQ7UpKFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:af:f2:1f:99:7b:b1:61:7b:83:b1:e5:5f:ac:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Apr 19 04:01:37 2026 GMT
Not After : Apr 20 04:01:37 2026 GMT
Subject: CN=6cbd3fc22e11a5f98d46dea998e42413945c1e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:7d:6e:7a:a5:b5:b3:97:04:44:11:1e:b4:
5a:35:16:71:14:79:f0:81:03:96:41:d2:05:8a:f3:
95:bc:9e:9a:72:07:63:fc:f2:54:a9:56:d7:5a:14:
0c:b0:3b:6c:c0:a8:29:4f:ae:d7:fa:56:4c:b4:71:
41:55:30:5a:11:5d:3c:f9:c5:a3:85:94:9f:2b:74:
bf:24:b3:8c:39:e5:cf:30:2b:61:5d:64:1a:6e:a4:
05:6f:61:df:2f:ba:e4:c4:67:90:50:70:f4:a0:00:
7b:3a:14:be:e9:c0:08:55:9b:2e:f6:6a:82:94:b7:
39:f5:c1:41:b2:d3:ec:02:b9:f4:4a:78:7d:ca:09:
a5:8f:cd:a1:f8:79:00:5b:84:a5:90:cf:e8:30:01:
e8:08:06:0c:8f:54:c1:2a:23:fb:57:d9:e5:e9:03:
d9:0a:c2:94:9e:15:13:58:f1:b7:36:97:99:a7:ad:
7d:e0:f6:02:8d:62:11:71:33:ed:81:44:2c:ca:87:
9d:5b:11:3b:dd:01:63:ac:ee:3b:11:7e:62:81:79:
32:cf:85:d8:be:2e:27:b8:43:ef:a4:38:f7:50:ec:
01:9b:0f:ef:8c:0d:13:ea:b4:b6:e1:40:19:64:f8:
5b:0f:94:aa:8e:37:cd:18:73:16:b4:e0:58:c0:3a:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BD:3F:C2:2E:11:A5:F9:8D:46:DE:A9:98:E4:24:13:94:5C:1E:5A
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:78:94:f4:d1:fc:28:e2:91:31:60:e3:fa:4d:fb:93:e6:75:
6f:1a:6b:0c:fa:45:ce:e2:73:c9:3a:bf:77:be:03:f0:14:ce:
37:58:b1:fe:17:ac:52:92:9b:0e:0b:54:a3:67:49:72:ff:a4:
0f:10:61:30:de:52:01:d8:19:2c:ec:6a:1c:62:f6:f9:59:2a:
99:c6:52:d3:41:4c:2f:26:1b:de:56:54:dc:84:81:e8:29:4b:
37:63:d6:2e:70:3f:a5:ab:21:43:64:22:a6:85:8b:8d:e8:81:
7a:e0:cc:ba:e5:84:85:32:2b:00:dd:2f:53:8c:14:aa:27:4f:
1b:60:12:b9:88:c9:f7:1f:f5:64:da:e2:98:13:f5:70:31:09:
1f:b1:9b:67:74:e0:d9:cb:e2:41:60:50:c7:a2:30:7a:54:55:
cb:87:24:18:84:b5:cf:03:64:0d:31:f2:48:5d:4e:6e:f2:94:
d3:8c:80:c0:aa:e2:8c:7f:4e:0f:bf:14:8b:f0:d8:2a:3d:c6:
9e:59:35:91:dd:37:1d:70:de:e1:47:b3:2b:af:83:41:f4:ec:
c5:d7:29:18:e1:05:c7:51:1c:db:0e:8f:55:8d:1f:a8:06:d7:
a2:d1:d1:a9:95:a7:70:10:cf:15:50:37:d9:96:b0:ea:d0:cc:
cc:0a:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:39 2026 by rpki-client