Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: 1/rbZF2UoLhLJHCeKBCCpWX/UOaLdbJMjuUJ4a4+Y88=
Subject key identifier: 37:0A:B9:24:BF:98:92:32:D1:FC:14:E6:5E:8A:A4:F3:28:F8:B3:24
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019D9998E3B365F8A1FC8CBF0AA30229DA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0923
Signing time: Fri 17 Apr 2026 04:00:26 +0000
Manifest this update: Fri 17 Apr 2026 04:00:26 +0000
Manifest next update: Sat 18 Apr 2026 04:00:26 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: 21bQ4CDxw2/EUu28b3uEep7ovlWC/kQSkYShw+/xfTg=)
2: Z-5kacRmlsjbypw_dPm2XOvUdzs.roa (hash: T7PFxDunRuitR6QYV9ySXslG8fmxs5dieU0URPzMTpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:e3:b3:65:f8:a1:fc:8c:bf:0a:a3:02:29:da:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Apr 17 04:00:26 2026 GMT
Not After : Apr 18 04:00:26 2026 GMT
Subject: CN=370ab924bf989232d1fc14e65e8aa4f328f8b324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:c7:dc:75:ba:6b:b7:21:80:18:ff:a2:b1:
f3:62:23:e8:e1:c1:96:bf:2a:24:9f:63:79:76:4f:
a8:8b:99:50:9a:ba:b3:8c:92:a0:b7:a6:9c:9d:9c:
8e:09:63:97:6f:b2:3b:35:6b:1a:ee:7f:de:4f:ca:
d9:c3:9b:68:04:29:96:b1:a3:70:0a:af:86:bf:9b:
27:97:ef:a4:01:2f:e4:9a:6d:26:65:be:ed:2c:97:
64:79:ba:fc:6a:ec:f3:2c:71:c6:f9:af:96:13:7c:
e1:4b:3d:97:c0:0a:de:ce:a4:3c:0c:19:6d:96:cd:
e1:76:12:54:1d:21:b5:c0:c3:ad:10:de:96:7e:0e:
24:1e:4b:2e:e1:ee:48:37:0d:6b:eb:a5:28:0c:31:
6c:72:73:de:6e:88:0e:e7:74:3e:00:cf:c6:10:6d:
cf:5e:18:a9:71:8b:86:70:fc:84:b8:36:12:85:d5:
6d:8b:77:2c:67:4f:22:73:e4:3c:fa:8f:de:78:df:
d0:b8:31:a1:52:81:15:8f:a2:ea:e7:14:23:5f:f0:
2a:3c:97:de:63:de:2e:39:53:4b:e0:7e:aa:ea:44:
cc:cb:c5:ba:17:f0:97:06:0c:99:89:74:ee:59:4b:
1b:84:68:7d:21:0e:cb:a8:59:5b:28:c3:7c:26:52:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0A:B9:24:BF:98:92:32:D1:FC:14:E6:5E:8A:A4:F3:28:F8:B3:24
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6b:c6:d6:c7:cc:5a:57:fe:00:6a:96:55:f5:80:dc:e2:72:
1e:64:81:c6:32:11:84:21:c0:78:0a:06:9f:32:37:90:c2:35:
b0:76:db:96:db:f7:b7:8b:2c:4e:38:ec:b9:7f:0f:5d:67:28:
40:6f:33:93:e2:ab:3f:ff:02:41:0b:7a:af:d8:cf:f1:a3:e9:
67:b6:3a:31:01:4b:16:ff:d2:54:15:31:aa:2a:2a:67:c8:5e:
ed:3b:72:35:f3:18:22:27:5f:2a:4d:62:5e:9b:4c:3d:2f:84:
29:7c:da:aa:bb:1e:e7:68:74:50:c3:ed:ef:f6:71:dd:62:4c:
1d:ec:d4:36:b2:b9:54:67:5a:0f:de:c8:91:6b:8b:28:33:b0:
62:a8:bf:12:f7:11:d3:64:55:cb:d4:2e:fd:d6:2f:c2:99:66:
25:4e:29:79:52:ab:26:c7:6d:4f:df:75:b5:fb:46:d1:e1:d2:
1b:08:97:68:85:cd:30:11:fd:ac:9c:52:3a:c6:24:8b:3a:60:
98:0f:e8:82:56:85:e2:2f:33:66:25:fb:6a:49:dd:ef:e2:73:
84:4b:2c:2f:82:15:c0:08:53:1f:d0:fa:f2:fb:d2:c2:57:28:
db:b4:e9:f1:30:32:8c:f7:aa:6c:df:bb:b2:cf:97:a2:6d:7a:
19:5e:c0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:41 2026 by rpki-client