Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: qR/7I6s+fEWG1p+farB/enbYUJAowqlcvgBOF/3Zrxw=
Subject key identifier: 4D:7B:DC:FA:CD:B2:07:95:38:1B:E8:64:D8:5D:C4:39:93:4E:4C:BF
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 019D9A74ABD7A9221B7D59B16EA76B842A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 0DAA
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: ihxuoAcGH8x/oXh/u9DFlNPQZkz6P2DzX8U/qPxu84E=)
2: m2WjaGlBAPztzFvBOucPXcVz1A8.roa (hash: 8IEpJ0cdndWX7mjoIio/qLWep6snHpr/fCFNjySaEQc=)
3: xjDEGzwGWC32KNbYgkAYk69skio.roa (hash: k8gKJxzXreZ0dQt23gwa3WP6vJjAJk09SNp21SFCKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ab:d7:a9:22:1b:7d:59:b1:6e:a7:6b:84:2a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=4d7bdcfacdb20795381be864d85dc439934e4cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:e2:8e:13:a6:16:86:31:2c:63:e1:19:d2:
4a:e5:f7:d4:b6:de:76:fe:6a:9e:dc:06:88:bf:19:
d1:b7:ff:5f:69:dc:cf:67:13:0f:8e:1d:2f:84:34:
73:85:e3:4e:a5:53:b5:69:13:9d:09:d7:1c:d4:17:
6d:66:94:a7:07:ec:9c:69:70:34:52:f3:83:58:c1:
da:92:9b:af:67:6e:a7:f9:42:e9:13:de:f4:2f:c9:
36:60:48:b2:5c:75:de:47:35:cd:61:31:f6:92:cb:
d7:8b:01:7e:e3:0b:4d:ad:20:c3:ae:90:e7:19:91:
36:ca:87:35:b0:75:81:2a:e0:91:74:23:ed:72:f1:
e3:e9:4b:05:a2:3f:77:45:63:4a:22:db:cd:47:68:
bd:09:a8:1f:d2:31:9d:e2:36:ca:95:b9:ff:0e:e1:
14:cb:a0:e7:f0:b6:ba:a6:52:34:72:fe:5b:a9:4a:
db:9e:04:38:8f:4a:45:43:da:d0:fc:45:d6:71:d2:
28:be:b3:b3:aa:f3:15:8d:48:ad:86:27:d9:93:b4:
d1:1b:b1:e8:5a:19:ab:76:4b:fb:10:1f:7f:ed:1e:
24:c2:ba:74:29:7b:48:17:06:37:8b:18:eb:85:11:
24:08:ff:18:81:c6:db:94:1c:13:7b:15:d7:51:e4:
a4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7B:DC:FA:CD:B2:07:95:38:1B:E8:64:D8:5D:C4:39:93:4E:4C:BF
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c4:6c:39:25:75:00:bf:c9:bc:0d:88:02:94:c4:32:33:b0:
08:bf:87:a9:2a:7d:d7:b4:21:16:26:fb:d2:99:01:4a:8d:a4:
25:32:0d:0b:d8:33:23:91:53:ff:27:d2:8d:fe:89:d8:c6:27:
91:ba:4c:0d:8e:53:80:9a:17:fb:28:a4:87:af:72:49:68:d1:
88:bb:73:a2:c6:5d:71:dc:c6:fd:b7:a9:4e:9e:18:24:ec:28:
eb:f4:46:ad:69:3c:e3:81:22:ed:8b:19:aa:f0:3a:7e:09:f9:
e8:14:24:bb:1f:91:e8:46:4f:f0:c7:99:f7:d6:8a:f6:76:f7:
df:c5:33:33:a7:09:fe:88:9a:18:94:81:e4:35:ab:92:33:90:
70:33:79:55:ac:88:11:2a:c5:1d:cf:64:1f:a2:f3:df:de:2f:
86:1f:51:46:75:df:f7:32:d4:85:95:e2:0e:cf:ab:eb:c3:b9:
ce:a7:e0:82:1e:6d:aa:f7:70:8f:49:77:63:06:aa:e6:61:8c:
a2:83:4e:d6:95:6e:a4:be:77:3d:d8:08:ac:72:40:cb:cc:2e:
10:e3:64:96:50:20:9f:d6:07:1c:9f:0e:67:b2:35:b3:fb:90:
c8:c2:e4:2f:f7:0a:b1:3c:17:db:42:56:f6:ae:f3:eb:51:f8:
a8:7d:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:00 2026 by rpki-client