Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: ZLcoefk2XTFME9t1aAhN4h1bsgoaqWr12MBgbJPjucQ=
Subject key identifier: 5A:3F:1E:50:51:53:04:36:4A:1F:5D:69:B1:96:89:E2:1C:A0:E7:82
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 019D9A3E3550C494826E7347C38FF3D556E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 13F1
Signing time: Fri 17 Apr 2026 07:01:01 +0000
Manifest this update: Fri 17 Apr 2026 07:01:01 +0000
Manifest next update: Sat 18 Apr 2026 07:01:01 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: wLyvu+RUz0PImB1o8PhASx1YUTiH8i0wyi9vDYkesn8=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:59:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:35:50:c4:94:82:6e:73:47:c3:8f:f3:d5:56:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Apr 17 07:01:01 2026 GMT
Not After : Apr 18 07:01:01 2026 GMT
Subject: CN=5a3f1e50515304364a1f5d69b19689e21ca0e782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3a:dd:86:3e:ed:e2:dd:ca:7e:f0:ea:a0:4c:
86:c6:e6:66:96:a2:a9:f8:22:18:51:52:19:eb:a2:
a6:eb:b7:95:4d:42:cc:82:aa:10:76:1f:68:fe:ae:
93:c7:de:43:b9:13:cc:d5:c1:95:7c:cf:31:0d:b1:
53:18:4a:e3:e2:f3:c2:a5:88:17:70:3a:be:04:f9:
d6:43:c8:b0:ce:16:d3:91:90:77:88:fa:be:c8:0a:
e2:1c:c1:d4:f6:3e:3a:e7:79:9a:97:2a:d5:1f:fd:
2b:85:fd:58:a0:4b:a6:0b:5b:f4:a6:0a:cc:1b:ef:
2e:85:bb:56:7d:e9:a0:c1:d9:de:a5:17:5d:b9:35:
0c:f9:e1:63:62:21:90:f5:0c:99:16:47:5c:ef:ae:
2a:e0:7b:8a:48:ff:ad:7a:46:04:72:bb:87:41:82:
14:69:58:bf:88:d4:a0:ad:78:bf:f6:9f:7c:df:b6:
e4:37:75:17:72:59:8f:f8:15:be:0a:63:8e:20:a2:
c7:f0:6f:5f:cc:c8:61:b3:a2:48:57:89:1d:f3:58:
95:86:cb:de:51:f3:7c:a7:d5:9a:5a:9e:df:54:24:
53:18:16:9d:27:79:1d:1b:7d:29:3e:11:69:37:81:
42:38:4a:d7:dc:a6:b2:b9:57:3c:4f:02:46:e7:a2:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:1E:50:51:53:04:36:4A:1F:5D:69:B1:96:89:E2:1C:A0:E7:82
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1e:ff:f5:3f:13:8c:75:6d:73:2f:85:98:26:4f:d2:ea:1c:
22:ef:92:74:85:df:6d:05:a7:df:b6:26:e8:18:00:90:93:79:
25:bf:6c:af:f6:97:a6:18:83:8b:6c:71:60:f7:39:52:e4:13:
17:ae:3a:35:ce:e3:cd:2d:e0:4c:f8:7a:5c:66:4a:7e:a4:fd:
a7:7e:68:5f:0d:42:e7:4a:e3:91:89:72:78:2d:1b:35:f5:7b:
bb:b8:0c:8a:fe:4d:25:67:aa:7c:de:82:e8:bb:1e:a1:5e:2b:
98:0f:80:24:8b:98:e5:f8:2e:a7:d2:2e:5c:76:3c:b9:eb:80:
3e:c3:a2:a5:98:b8:a0:05:00:19:92:82:80:9d:a7:88:43:3b:
4c:c4:a3:46:84:38:cb:31:d4:07:d8:5c:ac:99:a0:46:75:2c:
99:bd:90:cc:c7:1f:ac:8d:1f:02:d4:89:26:68:84:22:a5:c2:
9c:4c:0f:af:19:21:88:c8:37:75:36:03:08:47:6d:02:3b:b5:
fa:8e:22:5c:fd:3c:62:6a:2b:80:8a:d9:15:73:1f:e5:a8:88:
de:cc:2f:98:a4:53:40:0a:63:6c:ac:24:87:8d:a0:d4:29:75:
6f:ec:2f:b9:e2:7e:6b:9e:f0:ac:36:4c:64:69:b5:84:c0:6b:
d6:65:6b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:09 2026 by rpki-client