Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier: h8jS+TEh3i0WW8uU7xereFzV6r8+jTiuXDklO9ckYJE=
Subject key identifier: 1B:D4:EF:8D:B3:C7:B5:6F:BB:A7:55:CD:43:B6:B1:6A:3A:63:AF:45
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial: 019D9B50BED259B6B3FFC1560E6FA1F1063E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number: 091C
Signing time: Fri 17 Apr 2026 12:00:53 +0000
Manifest this update: Fri 17 Apr 2026 12:00:53 +0000
Manifest next update: Sat 18 Apr 2026 12:00:53 +0000
Files and hashes: 1: IHQGYZycBDyAVTPAum8XIrj47kQ.roa (hash: S11IX6oJmfauUmzmopL+w4IEvy2f52JVhN8t0Q5+tAM=)
2: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: 4BHCSarJgTomwXUbgc1vP6VXf0pvrOeOf/v73e+h6Cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:be:d2:59:b6:b3:ff:c1:56:0e:6f:a1:f1:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Validity
Not Before: Apr 17 12:00:53 2026 GMT
Not After : Apr 18 12:00:53 2026 GMT
Subject: CN=1bd4ef8db3c7b56fbba755cd43b6b16a3a63af45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:37:a7:a3:19:a8:c3:da:cf:5e:d9:b4:d4:
ce:23:60:a6:d8:77:4b:af:b2:59:3d:45:0a:c4:d5:
94:b1:b0:98:d0:b6:64:24:71:52:7c:28:4b:7f:f5:
40:37:82:5c:0a:50:83:a6:7c:1b:45:32:65:a4:7c:
4d:25:c2:22:e8:8b:db:a6:f1:dc:6e:78:8e:51:b8:
24:47:aa:f5:f5:fa:7d:f6:b9:01:77:4e:f8:12:ee:
63:72:a0:0e:0a:16:5c:00:ed:95:22:19:5a:61:59:
f1:e5:6a:2d:23:be:14:23:b0:36:e3:f2:85:ab:32:
cd:ee:3f:2a:bf:3f:0f:07:d8:c7:43:dc:e9:2a:a0:
20:77:8c:ec:be:d5:bf:48:13:31:a9:c2:56:d3:8a:
80:32:19:e4:09:c5:19:f5:20:33:cc:f6:8c:3b:b3:
88:40:7c:3a:2e:49:00:49:9b:3f:73:0d:32:9d:9c:
ea:54:2c:b9:e0:f0:84:a0:8e:a0:7b:19:a7:db:4c:
f0:5c:af:4a:28:b4:50:00:32:97:46:3f:d9:74:19:
84:81:d9:b3:69:cf:a0:2f:3c:14:50:2d:1f:a1:7a:
cb:52:2a:17:9a:f5:7b:6b:2f:a1:7c:cd:5f:02:fc:
bd:00:77:83:a7:08:34:5a:11:26:6c:b9:ed:80:8b:
84:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D4:EF:8D:B3:C7:B5:6F:BB:A7:55:CD:43:B6:B1:6A:3A:63:AF:45
X509v3 Authority Key Identifier:
keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d1:a4:f5:1c:02:e4:27:6a:08:b3:09:c5:64:f3:b0:80:85:
65:9d:e4:ff:ec:87:50:d1:38:ad:ab:44:b9:c0:89:17:f3:e2:
12:1b:dc:ad:39:56:5e:0e:29:2d:b9:e4:a3:77:9d:3e:a7:93:
23:60:7f:74:95:1e:9c:38:76:35:3d:e6:dc:2f:a6:6d:e8:e4:
5e:23:71:21:77:b3:07:5b:21:4b:b9:ae:bf:18:47:a3:ab:0d:
db:c2:89:54:12:57:29:1e:9e:1a:ca:cd:86:bc:a7:e2:e2:18:
23:62:a9:a2:49:f9:90:c1:81:47:41:77:3d:a9:d1:11:69:e8:
ce:fb:5d:4f:1f:9d:63:2a:ca:1e:22:31:3f:03:7f:f3:b2:76:
02:07:0b:17:98:60:b6:67:01:7e:72:b3:f9:d0:0c:62:65:d0:
6a:6a:fd:8f:a7:c3:d8:ab:3a:c1:fe:da:ee:e9:4f:77:64:5c:
97:29:8b:27:0c:46:fe:e9:42:7f:40:4b:9d:ef:1a:5d:b7:8e:
36:16:18:25:f7:74:00:08:89:8e:43:a6:cb:0b:4e:b6:a6:fe:
85:0b:39:d4:07:f6:86:5b:b6:60:83:be:11:ef:d6:8e:fd:a1:
1a:e7:53:92:54:50:14:86:e7:7b:59:a9:77:85:14:84:f9:fa:
35:a1:c8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:17 2026 by rpki-client