Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: I1W+iPJMCwu5SBJ+4m3JGMHIn9H+YtPokDwI3lah/SU=
Subject key identifier: D6:97:01:8D:6F:35:53:3D:F9:37:00:7F:9E:32:F1:5A:1A:3A:C4:46
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 019D985063CE56DE4C67D136B7543F5677ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0AF9
Signing time: Thu 16 Apr 2026 22:01:38 +0000
Manifest this update: Thu 16 Apr 2026 22:01:38 +0000
Manifest next update: Fri 17 Apr 2026 22:01:38 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: ciBDvRpnAu9ht4JdRsZsWu1kpFgR8vHbCKXViTWvoDk=)
2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:63:ce:56:de:4c:67:d1:36:b7:54:3f:56:77:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Apr 16 22:01:38 2026 GMT
Not After : Apr 17 22:01:38 2026 GMT
Subject: CN=d697018d6f35533df937007f9e32f15a1a3ac446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:08:8b:26:13:0f:a5:75:50:37:86:6a:20:
30:12:2e:21:62:cb:51:fb:10:86:77:29:42:e5:04:
b7:66:0d:27:03:c5:34:46:3d:6b:da:36:6a:af:26:
31:89:cb:bf:7f:6e:b0:b3:25:bf:b1:d4:ed:8c:4c:
b6:d7:b9:77:36:10:e9:39:e9:23:28:dc:a2:61:d0:
34:5a:3a:54:99:59:d0:3a:c6:93:0d:92:84:d6:79:
43:89:80:c4:4c:ab:74:04:76:b4:fc:52:e0:e6:ab:
55:a9:1c:93:c2:9f:a8:11:88:ae:44:d4:94:e4:6c:
77:92:15:89:70:e7:11:7b:43:eb:89:45:eb:5f:60:
55:f5:cb:6f:36:1f:f1:eb:72:21:a0:28:8d:c6:6e:
65:e7:a5:c9:7e:35:37:82:1f:41:1e:38:25:79:e2:
f6:bf:ea:72:f0:60:65:92:95:73:73:ef:4e:39:4f:
f9:ee:27:66:bf:ed:a0:19:ad:7d:9e:6e:ec:13:13:
c9:d1:36:c4:f5:55:43:f9:46:ad:bc:52:b7:b6:d4:
30:95:11:ef:b5:6f:bd:b9:2a:c0:b7:14:a1:dc:0a:
17:7c:69:e3:65:69:b8:c2:9b:0a:73:0e:de:70:af:
32:f5:85:68:26:a5:65:45:e0:8b:00:94:ba:cd:11:
55:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:01:8D:6F:35:53:3D:F9:37:00:7F:9E:32:F1:5A:1A:3A:C4:46
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:cf:6f:eb:d6:e0:14:aa:82:55:0e:82:88:66:96:d7:c2:e1:
0c:23:f5:d3:46:16:df:81:6e:42:a3:33:04:57:e9:2a:7e:e6:
bc:69:83:54:9c:f7:0c:b0:0d:c0:7a:62:1b:a0:78:f0:88:5f:
0a:1d:98:11:01:30:40:be:5a:86:e5:f5:11:04:1b:14:28:39:
09:4c:e8:14:a5:24:89:a2:9f:7a:ab:1c:4c:62:aa:c6:e1:c5:
cd:f9:62:02:6b:e6:58:5e:bc:82:e4:f4:8c:90:c3:70:0b:99:
32:0a:75:86:01:d1:4e:3b:b5:c0:99:ec:b8:a7:70:ad:8d:63:
c2:11:e5:39:59:90:3b:5c:82:05:6d:28:6e:ac:82:20:b9:70:
32:23:01:f8:81:90:76:0f:f0:aa:fc:04:eb:f3:91:b3:32:27:
aa:37:66:2f:45:68:06:d7:00:cf:33:d8:6d:af:56:2a:e7:bc:
49:31:ac:31:8d:3b:f7:1c:80:7d:50:85:90:d0:f7:54:71:4a:
40:21:b1:49:ad:53:4c:21:b7:b3:57:b6:3b:46:e1:00:95:da:
e3:c3:ef:7f:91:36:74:1c:4b:67:d1:16:ce:1a:09:ea:c2:7d:
e8:b9:34:b9:40:b8:f2:47:32:c2:68:7d:38:38:fd:ba:77:77:
8b:3b:04:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:37 2026 by rpki-client