Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
File: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft (raw, json)
Hash identifier: uHGflE5sdSnjbyj1LJh796VCW/BMq+7GQDKsnP/nY7A=
Subject key identifier: 15:D1:AD:04:F1:BB:5E:25:F1:17:00:5B:62:79:D4:40:8D:90:60:AE
Authority key identifier: FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
Certificate issuer: /CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Certificate serial: 019DA4C1F0870554D6855D880A9C0127B844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 08:01:06 +0000
Manifest this update: Sun 19 Apr 2026 08:01:06 +0000
Manifest next update: Mon 20 Apr 2026 08:01:06 +0000
Files and hashes: 1: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl (hash: g7T/SL0pbbMHQ07tS+pBjU6wOUEIohihGggu7FAhXr8=)
2: sjcD7P1b4OH3bAoChPJ2EGVO_80.roa (hash: 3ibINEJI2J0CI3oq9fJ1To5iRpHn9oYrPYwzYRGItP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:f0:87:05:54:d6:85:5d:88:0a:9c:01:27:b8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Validity
Not Before: Apr 19 08:01:06 2026 GMT
Not After : Apr 20 08:01:06 2026 GMT
Subject: CN=15d1ad04f1bb5e25f117005b6279d4408d9060ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:b4:c4:f5:b1:4a:45:6e:c5:2f:26:2e:44:
b1:5b:d8:a4:2c:4d:a2:8b:63:57:24:c1:b3:0b:89:
ff:e8:29:4e:ce:04:c7:61:9e:8f:48:d4:47:79:de:
57:a5:4e:d8:9b:91:b4:27:ac:c5:1a:52:8c:3d:30:
23:19:d8:57:7c:37:33:47:a5:3e:1e:d3:5b:01:b2:
4d:49:50:a5:17:06:82:99:97:f6:c5:2d:32:e0:e0:
fe:c7:38:87:2f:0c:9c:5f:93:d3:c3:44:80:cd:fd:
6e:e0:b3:1e:e6:6d:85:4f:2b:8e:94:db:4c:fa:5b:
74:f5:d5:14:fa:7f:a4:5c:b5:c7:73:da:2a:d8:c6:
11:99:ed:30:fe:f7:67:b9:e9:a2:e7:b0:b2:73:12:
24:be:d5:b2:d9:e4:16:cb:f0:74:24:b6:cb:76:e3:
5c:f7:4a:98:14:a5:ab:8f:d8:14:d0:e7:53:5c:a3:
2a:62:76:3d:4c:c5:0f:62:f0:ee:26:8c:23:0c:8c:
80:0b:f0:13:30:9d:7f:89:fb:63:46:a5:f3:a8:50:
a4:b5:15:7e:25:7d:de:28:d9:7a:eb:11:8f:95:56:
65:28:7c:39:40:88:b1:82:58:de:d5:e6:20:37:41:
5a:8a:ae:02:5c:7d:d2:1d:69:5b:a5:be:a5:11:ae:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D1:AD:04:F1:BB:5E:25:F1:17:00:5B:62:79:D4:40:8D:90:60:AE
X509v3 Authority Key Identifier:
keyid:FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bd:9b:54:09:cf:01:cd:e1:e9:7c:43:f0:6b:89:66:5d:1e:
3f:66:ea:e3:82:77:8f:e2:50:66:6c:c2:82:9c:50:e3:9f:fc:
5a:bf:ee:43:de:4d:46:10:43:fe:7b:cf:aa:9e:32:ee:d1:8a:
50:53:1a:72:f8:e5:7b:00:6f:66:f5:5c:15:bb:b7:aa:39:bb:
bf:1d:ad:c9:a5:8f:ac:e8:03:db:a0:41:ff:43:5c:1d:53:75:
59:ac:bc:e7:1c:3d:1f:49:35:02:6e:61:70:aa:3d:34:dd:15:
1d:14:31:ad:31:ce:1d:04:71:61:71:20:5a:1f:9a:c7:f5:fb:
16:c0:85:f7:31:4d:98:8d:fa:76:f2:c3:48:f1:05:b2:ce:5a:
bb:b4:22:1e:b3:fa:61:3a:cd:9e:12:53:fa:38:e8:8d:b9:42:
3f:68:80:c2:e1:34:c7:63:7d:cd:a5:ac:92:b3:90:28:08:d5:
8a:27:f9:71:0d:65:7e:6f:09:c1:40:f4:0d:36:5c:b7:44:5a:
bd:b2:fb:90:b9:05:0b:b8:07:d5:67:9e:62:91:aa:cc:02:e6:
da:51:82:fc:9a:e6:67:c0:fa:51:a5:1d:a8:3c:ce:5c:24:13:
6c:ac:8f:07:a1:e3:2a:6c:52:c8:f7:8f:bb:a8:ec:09:c6:d4:
d3:73:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:58:58 2026 by rpki-client