Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: +aXDvzYSCUYNKgAhIsWO1AibTVFN7jJ9HxyAsik0CYM=
Subject key identifier: AA:3B:90:88:03:6C:6D:54:D7:F8:A5:1A:8D:A6:E8:29:50:90:86:39
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019D9B197F5C46C5C1F6A6CF021F05CA40B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 135A
Signing time: Fri 17 Apr 2026 11:00:32 +0000
Manifest this update: Fri 17 Apr 2026 11:00:32 +0000
Manifest next update: Sat 18 Apr 2026 11:00:32 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: u+Y6scVlL+0o3DYGY1wVHlCFn4slWB2mIs2n2dlg0Tg=)
2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:7f:5c:46:c5:c1:f6:a6:cf:02:1f:05:ca:40:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Apr 17 11:00:32 2026 GMT
Not After : Apr 18 11:00:32 2026 GMT
Subject: CN=aa3b9088036c6d54d7f8a51a8da6e82950908639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:51:60:88:ad:b0:05:53:48:be:12:5a:c9:
66:84:91:fd:2e:16:b8:5b:54:54:3d:ac:dc:fc:f6:
57:ce:4b:1b:af:4a:42:bc:2c:66:87:ab:78:95:e0:
61:1f:a5:48:45:54:0a:52:c1:08:5a:07:6b:5c:ff:
5b:39:8c:5d:dd:4b:39:c5:2b:a6:94:39:11:cf:6a:
52:5c:74:7c:90:c5:67:5d:6e:39:f3:89:3d:8f:5d:
2e:05:08:6e:8d:0f:91:70:d8:a1:93:7b:1c:a1:13:
2b:49:3e:05:d3:29:3c:ad:b9:22:89:3e:2a:05:45:
4a:86:cc:ad:e2:b7:38:6b:ba:e8:6b:a3:28:b5:94:
65:21:95:77:f8:0a:35:9a:89:4a:7f:77:f6:30:df:
84:cc:54:27:59:82:ad:5d:ec:37:ed:51:1f:12:8d:
85:fd:6d:a6:7f:1f:0e:61:01:59:4e:64:09:99:b5:
77:ed:5f:e0:2a:7f:50:67:46:2a:b8:15:73:5a:b7:
0a:df:6b:60:02:af:6c:9e:44:b9:8f:77:47:7e:d7:
ce:c0:05:57:5d:b8:68:05:e2:ee:13:17:f0:ef:6e:
7c:33:d2:28:b2:ee:be:08:cb:30:fb:80:e8:12:69:
b3:8d:34:5a:87:f4:1a:f0:19:dc:f3:e5:07:ad:0e:
fe:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3B:90:88:03:6C:6D:54:D7:F8:A5:1A:8D:A6:E8:29:50:90:86:39
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ee:6e:4e:1e:69:76:1f:70:6b:38:33:f5:1c:cf:d4:12:d6:
f4:6a:9f:3b:cb:75:7e:c4:f4:c2:e0:4b:2e:a7:14:01:c4:8e:
f7:63:04:5b:39:52:1d:6d:05:f1:4b:42:74:13:b5:2b:f1:e9:
54:0b:6e:4f:95:93:c9:6c:54:65:40:39:34:a0:90:76:28:4f:
6b:ad:1a:44:b5:ec:6b:31:88:1e:e1:e3:4a:66:08:ea:1b:95:
2a:36:48:09:91:9a:4a:29:16:ec:d3:43:65:b7:62:43:ae:9e:
4b:1d:0f:4c:90:b6:be:ce:65:a9:53:7f:9a:04:c6:74:22:e2:
c5:27:8d:5e:1d:e1:4e:30:22:c6:fe:42:15:a0:6d:de:56:9c:
3d:d2:3a:56:17:ee:e5:be:ee:66:69:84:dc:94:9f:bd:f5:9b:
80:1a:f1:64:cd:4e:89:13:0a:eb:b0:17:bf:a2:a8:2c:a8:15:
de:b1:a5:b3:37:6e:69:28:8b:61:04:df:49:8d:59:fc:06:51:
d3:a6:f7:82:0c:de:12:6e:9c:b4:07:ba:86:ec:48:c2:11:76:
b3:e7:91:5c:1a:54:4b:01:51:27:d2:2c:0c:ba:35:25:4e:13:
3b:36:6f:dd:53:5a:07:76:e4:8c:5a:1e:75:a4:9d:48:33:4d:
7f:09:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:21 2026 by rpki-client