Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: hsJORABN7fpo+grslV3xuSkvaoBOgJG/fxGoY1J0nmQ=
Subject key identifier: 41:17:A0:3C:96:21:AB:F9:AC:50:C3:40:30:8E:ED:1B:80:4C:B3:73
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 019D99D04446522092CA1DBBB44C66B7AF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0D01
Signing time: Fri 17 Apr 2026 05:00:56 +0000
Manifest this update: Fri 17 Apr 2026 05:00:56 +0000
Manifest next update: Sat 18 Apr 2026 05:00:56 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 3vpaeU+5Lvl9SRbEds1bSucOYNlvzi7p6FC7Wp3uLTY=)
2: bbNTfIJmhGsZ2V8DBjEahyC2lWE.roa (hash: /Eg3PukaE2y9AWWE2+6unARGBgb5uWfL7NaM72cQJhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:44:46:52:20:92:ca:1d:bb:b4:4c:66:b7:af:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Apr 17 05:00:56 2026 GMT
Not After : Apr 18 05:00:56 2026 GMT
Subject: CN=4117a03c9621abf9ac50c340308eed1b804cb373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:ee:ac:c7:9a:86:23:c6:8d:0f:82:fa:1e:
bf:b6:08:b3:26:37:0f:66:39:f1:dd:5b:e0:c0:e0:
5f:b1:71:96:e3:18:ac:e9:1b:9d:a4:8a:3c:a5:1c:
ce:f7:19:a1:f8:4c:9e:c8:33:0b:b1:53:9c:98:aa:
98:61:f6:b9:42:47:ef:de:5e:7f:d2:7b:49:2f:08:
f5:66:fa:1e:3e:ce:a0:e6:8d:a7:2a:71:e2:d3:49:
99:8e:75:8b:99:98:d6:d1:be:33:36:f9:d0:66:b2:
0a:ae:67:7e:ea:f5:d8:f2:38:6e:d1:0b:5e:60:06:
5d:34:0c:20:40:7c:36:1d:6a:ca:0c:16:34:d3:dc:
58:cd:2a:a7:0d:5a:31:76:57:56:38:71:5a:90:dd:
f7:a0:25:a9:02:9a:f7:21:a3:fc:62:13:65:36:98:
4c:31:bc:57:7b:a6:0b:08:9e:50:15:ae:89:56:50:
51:e8:61:b6:04:6d:98:e1:31:59:4e:ba:6c:9c:00:
01:39:4d:f8:92:0c:9b:eb:a8:de:0a:a4:67:d1:7e:
d9:f6:e9:7b:75:c4:9a:01:12:b0:ea:56:b0:c1:d1:
e9:5b:59:db:16:f4:bc:71:7b:87:f0:60:19:8b:fe:
74:20:f1:64:91:e2:2a:3a:ad:5d:38:79:91:f0:db:
5b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:17:A0:3C:96:21:AB:F9:AC:50:C3:40:30:8E:ED:1B:80:4C:B3:73
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:d1:6c:6e:bb:37:a3:91:20:ce:31:75:bd:d3:b4:26:a4:6a:
7e:2d:c8:e7:73:d6:1a:fb:1b:20:9b:bf:14:df:bb:f9:f5:b1:
f1:fe:93:e1:d8:0e:d1:11:2b:ef:71:4d:b2:5e:83:94:eb:78:
8a:be:82:93:70:5d:7e:03:63:b9:31:2d:9e:96:4f:5f:14:29:
c0:47:e9:a5:53:d8:c9:98:26:4a:fd:8a:df:16:9f:56:68:c4:
6d:1f:1b:c0:dd:99:a1:01:0c:60:ac:92:56:a0:5c:bb:61:b1:
09:da:38:1a:9a:21:2e:2b:9a:e8:32:7d:42:9f:03:43:a0:46:
33:65:42:93:3e:ae:24:c9:da:ef:ca:c2:cc:5c:1b:fd:59:46:
13:c6:31:ca:a6:fd:80:a6:85:c9:24:c8:9b:4b:3f:da:22:9f:
49:59:4d:fd:6a:e6:e7:60:98:a7:e8:47:7c:37:3d:4f:5f:d0:
6c:cd:db:1b:42:b9:a1:07:a3:97:53:0e:cc:1d:3e:35:e0:8e:
ad:0f:c4:3e:5f:54:de:76:17:a6:44:5f:e3:2c:77:9e:d2:8f:
3b:59:de:ff:97:4e:8f:b3:7f:f9:26:ff:ec:64:87:03:a9:37:
ba:e0:e7:dd:4a:e9:4c:86:35:b3:2b:d4:f8:0f:51:d7:02:f0:
34:2b:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:18:39 2026 by rpki-client