Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: YnyMadgBVmiwNagI0jNi849GHyxdfYC3kmB0ED5zar4=
Subject key identifier: 8C:EC:30:55:C3:AB:15:B6:8E:E5:19:52:C9:2C:34:92:93:AB:D2:FC
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019D99630B852AB52D25694A6AAD9E4C17EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 13E9
Signing time: Fri 17 Apr 2026 03:01:38 +0000
Manifest this update: Fri 17 Apr 2026 03:01:38 +0000
Manifest next update: Sat 18 Apr 2026 03:01:38 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: y9B9qzQZe4S8nmoe4zFskQSwVmUIvIYym1w5gsde050=)
2: eqCaauL__rhdQZW0YvZCBOthP9U.roa (hash: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:0b:85:2a:b5:2d:25:69:4a:6a:ad:9e:4c:17:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Apr 17 03:01:38 2026 GMT
Not After : Apr 18 03:01:38 2026 GMT
Subject: CN=8cec3055c3ab15b68ee51952c92c349293abd2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:cf:f7:3c:5e:02:53:ea:7a:a9:c6:fd:44:
d5:97:55:d9:98:a4:b2:c7:b3:f8:56:4f:53:8e:f3:
28:c9:1c:84:e3:6c:19:1b:d0:3b:c7:5f:a9:09:d7:
ae:72:36:85:35:37:16:d6:e8:7d:9f:68:6f:87:c2:
03:ce:1d:70:6c:7b:97:b5:e4:a5:db:ca:68:08:ce:
64:cf:93:42:50:f5:c9:4e:84:33:2b:ed:91:b2:90:
41:82:54:7d:03:b9:11:8d:95:05:f1:ef:bc:7e:2a:
02:e7:41:3f:80:63:11:bb:1c:e5:c4:aa:8d:f7:69:
c0:6d:9b:3d:de:71:fe:7b:0d:4a:35:e4:5e:ff:1e:
9d:00:9f:79:27:69:7f:39:da:21:a7:77:c1:fd:b9:
24:1c:61:b4:ed:5e:81:cf:11:8f:97:be:7f:25:19:
bb:dd:b1:6a:e6:55:7e:d4:3e:dc:a3:3f:bd:04:83:
39:19:a4:7e:b8:fa:b0:3c:70:dc:22:dc:83:01:7b:
7e:32:bf:6b:3f:4a:0b:1a:18:17:9d:97:69:78:f0:
81:7a:5f:59:aa:58:8a:fc:c0:f3:55:a0:7d:c4:58:
3a:ea:41:a7:56:9f:53:a4:df:27:50:ba:12:41:81:
11:38:fa:ff:d7:8d:4e:a4:cc:f6:6e:14:3e:c9:95:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:EC:30:55:C3:AB:15:B6:8E:E5:19:52:C9:2C:34:92:93:AB:D2:FC
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5a:ae:d1:fb:ff:e4:15:8b:17:26:37:cb:74:8c:3e:4d:bf:
55:83:b8:0d:09:cd:96:3d:2c:a0:fa:38:a2:22:6b:cc:1a:c4:
54:7d:c3:a8:9e:dc:04:11:22:61:6e:7e:af:20:77:c2:51:a1:
c5:4c:ef:48:4d:a6:e4:da:86:fc:00:a4:02:14:65:8b:f1:4e:
d0:9e:30:b7:dd:0d:fd:80:ca:3f:3f:1d:86:53:16:16:58:0b:
b1:bf:d3:66:50:1c:4c:01:7d:32:73:0b:9f:fa:74:61:9f:74:
10:5d:21:53:3e:66:6e:23:55:f7:d0:b1:6b:4d:7d:8a:37:dc:
e5:af:ed:21:35:b6:a5:4d:d3:19:32:cf:73:01:a8:b8:c3:d4:
0a:37:35:33:46:95:23:0d:fa:f3:ef:7e:51:76:59:f9:95:fa:
59:d8:5a:37:ea:11:dd:a9:3d:b4:ef:e5:81:9f:95:15:a6:b1:
ad:d7:ca:32:a5:2d:b6:73:b5:fb:75:c7:4b:6f:5f:00:74:57:
9e:b1:c2:63:e8:5f:45:5f:a5:9e:3a:d4:41:67:0f:85:ca:c9:
72:ae:61:7f:52:d9:0b:60:79:7d:dd:53:4c:25:85:be:fe:e3:
52:fe:8f:53:eb:fc:40:3b:fc:95:00:3b:5c:76:4c:83:8e:08:
a4:29:56:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:49 2026 by rpki-client