Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
File: v1M926H4p23i70lx_NUvlEHOCYk.mft (raw, json)
Hash identifier: 0cFQ8a41eUcjzl6BEeV6wwk6LXpufmnTjvLV22rzz2A=
Subject key identifier: DE:E2:A4:2B:FB:37:06:13:4D:63:26:57:81:EE:67:01:AC:8A:7F:A2
Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Certificate serial: 019D9A06D688AE7644A09AC7832FCA1E495E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
Manifest number: 12FD
Signing time: Fri 17 Apr 2026 06:00:32 +0000
Manifest this update: Fri 17 Apr 2026 06:00:32 +0000
Manifest next update: Sat 18 Apr 2026 06:00:32 +0000
Files and hashes: 1: 2Wp3YnKolCKlk8ttOD4thTqnK8s.roa (hash: AqwDEsgdXjCQtmMemZbnyoQLvLWRfHb/l/ITgYIXcT0=)
2: v1M926H4p23i70lx_NUvlEHOCYk.crl (hash: QpJ6wQEKFdfCJX31fxDnjdQ5d4UakboYkUrIC9AdqV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d6:88:ae:76:44:a0:9a:c7:83:2f:ca:1e:49:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989
Validity
Not Before: Apr 17 06:00:32 2026 GMT
Not After : Apr 18 06:00:32 2026 GMT
Subject: CN=dee2a42bfb3706134d63265781ee6701ac8a7fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:25:d8:d1:80:bb:81:33:cd:98:d8:30:a2:
a1:61:26:63:44:32:4a:49:5e:1f:80:25:12:81:ac:
5a:6d:a9:cd:4b:bd:ae:ce:f9:08:ca:a1:c6:fd:13:
16:9c:9c:d8:ae:51:fa:99:11:04:ad:80:09:d8:11:
6a:b3:4e:3c:e4:92:2c:86:04:f4:4d:da:af:c5:31:
9d:59:91:19:53:f6:6d:62:54:0b:50:aa:5c:54:f1:
72:82:8d:d0:7e:87:f6:0c:b5:3c:1d:ad:e8:3d:e0:
8a:ae:a8:ee:63:36:4c:ba:a9:8a:c0:52:66:de:df:
81:4a:c1:93:63:f4:59:03:f6:ea:8f:a7:a2:3b:3c:
9a:2a:48:ec:1b:fc:a5:c9:4b:31:da:6e:e7:dd:62:
98:cd:1b:08:87:eb:89:35:1e:c2:af:e9:d9:30:f0:
61:bb:67:02:ea:c6:c8:5e:a0:45:cb:1b:76:b9:b9:
e5:0a:03:77:ef:bc:c8:95:6a:87:0a:0a:f1:71:a8:
6f:80:25:d9:78:59:f4:1d:de:9c:49:0d:9d:2a:96:
7b:d6:48:1f:b4:23:92:bb:0d:df:fe:08:b8:65:a0:
a9:9e:46:b8:15:4d:09:62:f1:25:63:48:78:69:0c:
e4:24:84:35:79:0a:18:ff:1f:a3:80:95:84:7d:be:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E2:A4:2B:FB:37:06:13:4D:63:26:57:81:EE:67:01:AC:8A:7F:A2
X509v3 Authority Key Identifier:
keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ad:4a:15:9b:18:6b:ae:1c:56:17:ef:13:d7:ae:b5:62:63:
35:03:46:d9:b1:2a:7a:50:1e:09:c1:82:06:90:ee:6d:26:2e:
a5:4d:02:ad:20:ed:1c:7d:c2:04:e2:cc:dc:67:4f:56:f7:b8:
85:4a:26:30:98:38:8b:41:49:e6:59:e9:62:3b:4b:3e:dd:29:
40:d0:08:64:58:56:5c:48:ba:3c:7f:74:94:8c:ed:64:8b:56:
1b:23:79:83:d3:01:82:5e:7f:1c:0d:e6:13:66:b8:f0:f5:a0:
c4:80:d8:de:ca:ce:e6:38:9d:a5:7a:89:fd:97:c0:1d:cd:8a:
68:23:f2:ea:84:b9:18:23:13:f9:34:30:f0:ba:70:78:a6:a8:
d8:5c:a9:ce:b1:2d:15:6e:f0:6c:1d:c1:6d:a9:10:5f:60:63:
d8:cf:5c:5d:f8:69:5e:8a:c6:ce:28:d2:a7:3c:ec:2c:9f:d1:
ce:17:da:6e:47:ea:d3:3b:fc:6d:f0:36:8b:ea:16:ab:1d:88:
bd:54:20:48:6e:e5:d2:e9:8a:a9:dc:78:3e:a7:4e:3b:bb:e6:
b9:66:61:91:f0:ef:56:0a:53:1f:b4:43:6c:b0:fe:ff:a9:26:
6f:d6:1e:c5:b4:22:9d:f9:95:1e:12:e1:7a:8b:70:a3:06:48:
d7:c3:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:06 2026 by rpki-client