Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: DqUFHlUTvavi+UbiQmnaTcAbfUyJRRDVWJcHmnulu7Q=
Subject key identifier: 04:E4:2E:B1:37:D2:45:D0:DD:31:2C:17:F5:51:40:3D:41:3E:DE:C9
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019D9CD1C0B6454A0FB8F6B95B934683C126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 1035
Signing time: Fri 17 Apr 2026 19:01:25 +0000
Manifest this update: Fri 17 Apr 2026 19:01:25 +0000
Manifest next update: Sat 18 Apr 2026 19:01:25 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: W+idwVOajMJZ+F5agfFztVjutSAAqclEakSruAtcZkU=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:c0:b6:45:4a:0f:b8:f6:b9:5b:93:46:83:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Apr 17 19:01:25 2026 GMT
Not After : Apr 18 19:01:25 2026 GMT
Subject: CN=04e42eb137d245d0dd312c17f551403d413edec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:5d:43:f5:d0:03:20:ae:ea:1a:9f:6c:ed:
23:70:49:ad:73:59:e9:f1:39:dd:f0:49:f0:96:f7:
e1:95:41:52:be:c6:58:0a:cd:02:03:4e:6a:2d:34:
62:d1:80:83:c0:f3:53:2e:96:77:65:2d:49:c0:6d:
18:23:e0:05:a7:c5:da:87:6a:20:75:c2:23:1d:da:
89:fd:f1:d5:b9:2a:4a:16:5a:a1:f9:a2:3c:09:d4:
15:1a:ea:28:16:cf:c5:33:df:3f:e1:80:fe:25:b2:
43:57:af:f2:d3:bd:82:bb:46:81:c0:f1:e1:08:00:
ea:c3:be:e5:88:48:61:b8:cb:b4:17:9c:00:00:0c:
1b:06:e3:71:db:9d:d1:5f:df:54:80:26:c0:44:7e:
4f:2f:1e:7a:8b:d9:67:35:19:e1:6b:38:19:0c:41:
67:dd:f6:cf:97:1b:fe:d8:72:70:dc:af:d7:b4:5c:
8a:f8:a8:56:24:42:a9:13:a5:22:35:77:04:9a:1a:
c3:55:09:f1:4c:4a:39:f3:fb:90:c2:bd:ba:77:94:
df:01:00:00:c9:70:f9:28:62:7c:30:0b:7a:13:77:
a7:7d:ec:26:17:6d:eb:0d:81:bd:38:86:1c:27:69:
2f:0c:2b:72:b1:e5:7d:d7:8e:af:3e:a7:be:73:82:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E4:2E:B1:37:D2:45:D0:DD:31:2C:17:F5:51:40:3D:41:3E:DE:C9
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:88:61:ac:b8:bf:d2:1a:b2:60:3f:4e:de:44:34:6e:a3:
c3:e6:ba:65:2c:cf:21:ae:fc:81:7c:62:e4:23:4c:4b:8a:99:
44:ee:19:e9:06:7c:a1:6d:b5:97:3d:8f:cc:01:8f:9a:58:42:
e4:2a:a8:a9:07:db:4e:d2:3e:f5:64:d7:a6:ee:06:b3:bd:7f:
df:65:3c:09:c3:fa:0b:f2:2b:e0:71:98:52:8b:7e:20:de:cc:
87:1c:ff:0c:75:2d:d4:24:88:37:0b:3d:21:70:a1:32:91:ce:
c7:0f:95:fa:e4:6f:5b:53:a8:3d:26:7e:80:76:bd:18:f2:9e:
04:e6:6b:3d:18:00:5c:85:60:82:9b:6c:ba:27:1e:14:2f:76:
d4:f0:db:ad:53:b4:c1:42:06:4a:6d:86:14:ad:6a:df:5d:81:
10:2a:d4:b7:2e:99:7d:ec:ee:68:f6:a8:6c:e8:a0:13:a9:49:
d7:27:06:d8:c2:56:c1:d5:2d:82:d5:3b:7e:47:c8:77:13:87:
bf:15:0b:ee:9d:62:54:f2:6a:65:0f:fc:55:a3:04:b2:39:86:
59:26:02:25:02:4f:56:61:82:40:b6:aa:71:5d:27:41:64:74:
98:22:5d:1b:fe:48:de:ef:69:c8:4f:5c:50:4c:96:e6:a6:65:
c8:e6:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:26:21 2026 by rpki-client