Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
File: 1oFRD_A-lUZKxySioFlNpAfwWwc.mft (raw, json)
Hash identifier: vdzkVd36RvxYaE9kGVwhEWdkdbY2reBTwWtGNg24u9M=
Subject key identifier: D8:A4:06:63:56:C6:CB:87:D6:73:4A:2C:FC:E8:EA:63:30:21:A6:B0
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Certificate issuer: /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial: 019DA2D334AF4F7245A57693C4A0FE83AC41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
Manifest number: 2F
Signing time: Sat 18 Apr 2026 23:00:43 +0000
Manifest this update: Sat 18 Apr 2026 23:00:43 +0000
Manifest next update: Sun 19 Apr 2026 23:00:43 +0000
Files and hashes: 1: 1oFRD_A-lUZKxySioFlNpAfwWwc.crl (hash: P5JhIvXoZp5FXnz/oNFHe9B30gz8msddxnIFlpi3Q48=)
2: _rBdv8MR9CvtKpBAk1ya2EZx1BU.asa (hash: 15bX9d3Zxz011uBisah//kOmw3F4olKW35kry5sNKSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:34:af:4f:72:45:a5:76:93:c4:a0:fe:83:ac:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
Validity
Not Before: Apr 18 23:00:43 2026 GMT
Not After : Apr 19 23:00:43 2026 GMT
Subject: CN=d8a4066356c6cb87d6734a2cfce8ea633021a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:38:77:12:cb:03:9a:fa:fe:b7:5c:fe:3c:
bd:30:36:1c:94:5a:e0:16:59:f3:79:d7:74:0e:3f:
0e:b0:0e:28:82:d1:8b:6c:ab:9f:8a:5b:84:08:3f:
fb:68:57:cc:09:47:b8:75:08:cd:d8:0c:ed:c4:79:
50:89:e4:13:4d:ef:df:37:8a:74:2f:72:35:b6:23:
65:d8:55:27:5a:dc:dd:d3:17:90:11:13:d8:7f:af:
be:24:67:7f:7d:48:89:fb:78:e8:fe:a8:61:76:63:
16:53:73:d4:5a:4e:37:a7:ce:4a:ad:e4:9e:11:71:
6b:82:47:8b:9a:40:09:ae:a9:bd:fe:76:5a:ef:63:
67:42:30:f9:29:bb:a4:6d:0c:7c:d9:70:27:a0:b3:
e9:a7:cd:45:96:36:ea:2b:53:9d:4e:2a:35:bb:c4:
50:6c:6c:16:bf:03:4c:88:aa:db:e4:ab:9a:46:30:
5b:f7:34:8c:27:02:b2:97:8f:db:73:e6:a2:5c:0a:
a2:fb:ff:92:68:02:6b:71:ab:f9:da:2e:e6:0b:62:
bb:f9:f0:8c:05:e5:73:49:0c:c6:f0:29:0b:67:11:
d0:80:b8:c4:06:b0:a9:f9:55:65:57:89:f3:27:9d:
ad:7f:ff:dd:dd:e3:ad:f9:7e:e5:c0:41:4c:f3:e0:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:06:63:56:C6:CB:87:D6:73:4A:2C:FC:E8:EA:63:30:21:A6:B0
X509v3 Authority Key Identifier:
keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5f:43:fc:49:31:ec:6b:2c:52:9a:db:c2:32:ce:8d:ff:29:
77:3f:22:6e:f8:4b:0e:56:74:17:f0:f1:65:f6:9f:d0:3e:e7:
bf:25:07:32:bf:8a:5a:3c:99:24:1b:ab:dc:16:03:bd:8e:ab:
89:63:81:50:ff:fb:85:b8:24:9a:29:f9:46:0e:08:5c:b9:61:
c8:e5:ae:60:01:67:79:86:48:6d:0e:b1:e5:92:c6:9b:6b:91:
ec:7a:eb:73:ff:b4:d6:30:3c:b6:c9:a1:86:bf:d7:67:72:63:
d3:1c:2c:a5:bb:a9:48:52:51:cc:63:46:c5:ee:70:01:c0:3f:
35:ea:a9:6b:29:30:22:61:8e:44:8f:3c:45:2a:93:02:b8:a8:
8c:37:47:1e:37:af:54:f4:02:6d:32:cd:40:80:b4:0a:cb:17:
3c:df:c5:78:72:e9:0c:4a:6f:26:ae:0b:6b:b1:35:9b:31:93:
07:3f:c8:cb:1f:94:80:d8:84:95:01:ca:12:c1:73:aa:4a:86:
0e:ff:b2:59:80:ed:e7:6f:71:5e:b3:f5:be:a2:9e:24:0a:cd:
e1:35:20:10:31:d8:1c:6b:7a:85:80:b0:2b:35:d8:c3:6e:10:
70:12:57:01:7a:2b:00:81:a4:23:22:90:bd:d7:45:15:f2:3a:
15:59:8d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:17 2026 by rpki-client