Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: btUBIM4AvKBMrfHugygOyPiehTVu9Ca1AMW1uOQwN7E=
Subject key identifier: D2:04:CE:70:6F:2F:17:DA:C6:E2:8D:3D:F8:C1:33:06:D4:AC:63:30
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 019D9A3E545339BA763A918B455E9DE110D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 04D7
Signing time: Fri 17 Apr 2026 07:01:09 +0000
Manifest this update: Fri 17 Apr 2026 07:01:09 +0000
Manifest next update: Sat 18 Apr 2026 07:01:09 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: C560K5DdhOumRSl7UqVPKR6QoyB2tyvQ4PeO3gFM2GU=)
2: PchT168ujFib-nY79tBpP-zJgdY.roa (hash: X54RZoJH7rp6pAWMbh3u6FOekQubaYZ6ugL/JB3twaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:54:53:39:ba:76:3a:91:8b:45:5e:9d:e1:10:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Apr 17 07:01:09 2026 GMT
Not After : Apr 18 07:01:09 2026 GMT
Subject: CN=d204ce706f2f17dac6e28d3df8c13306d4ac6330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ee:fd:b8:53:20:a1:68:2c:4d:70:81:1b:d4:
6c:af:44:11:aa:be:de:c6:d9:40:c4:98:89:59:b3:
c0:ed:03:46:c2:93:b5:ad:b9:6d:5d:b5:2d:f7:3b:
10:bf:59:92:59:36:ea:65:c8:79:6e:8c:5f:5c:d2:
94:69:ea:b2:77:c7:9b:94:00:d5:d9:8f:c7:38:8b:
3d:cc:c1:5f:fb:b2:b5:e4:9a:21:52:07:5d:dd:21:
ab:76:f1:0b:3e:79:99:ed:78:53:eb:66:11:c2:be:
4e:9f:1a:53:8a:8a:74:50:e7:f6:0b:e7:aa:f0:61:
04:db:9d:ea:f3:61:ee:8b:39:c2:f8:06:5d:5f:b3:
9d:77:6d:4d:49:66:2b:7c:9c:a3:b6:4f:50:23:1f:
33:c1:e3:52:dd:85:a5:1a:61:cb:64:4d:b9:3b:6e:
fd:57:e6:10:29:7a:4d:dd:dc:11:26:a6:11:59:d2:
26:8f:e7:f1:a7:f8:c9:50:b5:d6:ef:5d:ef:89:d6:
7e:29:3a:79:da:25:13:77:42:c4:e7:fd:9d:19:0f:
2d:e4:a4:c8:ab:6b:be:d2:5c:cb:54:c6:6d:2a:ac:
9c:30:1f:7e:8c:15:74:3d:37:9a:37:f6:93:65:6f:
94:55:77:06:00:32:d5:d7:4c:2d:47:f6:e4:83:46:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:CE:70:6F:2F:17:DA:C6:E2:8D:3D:F8:C1:33:06:D4:AC:63:30
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f3:12:b1:b5:81:ce:6d:c5:55:f7:0e:52:ca:cc:56:7f:ac:
45:32:76:82:3e:b3:4e:1c:8b:06:b6:5d:a4:ea:7d:51:9e:2c:
75:26:53:60:f3:35:71:2a:99:95:6a:f8:70:be:33:01:d9:82:
c1:21:ec:16:03:e8:53:81:57:62:7d:7d:24:49:d7:cc:e5:5e:
79:8d:8e:37:33:14:25:77:51:db:c6:cc:f6:af:a7:ea:a6:6d:
65:c9:11:6f:3b:c9:dd:c3:ba:fa:86:a4:d8:b2:fa:1c:68:ae:
f7:8d:e2:a1:35:7d:75:be:ed:03:f8:4c:c2:d1:fc:23:47:13:
a3:6d:43:0b:4d:d1:3a:25:fd:11:0e:d1:ee:e6:71:74:66:60:
52:33:f6:fd:3b:95:35:de:97:ac:8c:00:97:cb:1e:be:55:8a:
c2:1e:2e:ce:d2:fe:2c:ed:01:f3:f3:95:73:27:81:36:a3:17:
27:da:cf:d0:77:70:56:82:53:fe:33:f8:23:d6:a3:5c:7b:88:
1e:c5:80:a0:8b:78:06:4c:0b:c4:cf:a7:56:c5:46:47:a0:d8:
c2:da:f5:bf:8b:bc:ee:53:b6:85:d5:d2:05:c2:0d:1b:4f:89:
70:5a:d6:cd:33:b6:5b:5f:26:da:49:c2:44:9a:b6:44:7c:f5:
0b:46:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:55 2026 by rpki-client