Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File: 1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier: 0o04Peq8HTQ+cGYzjMq4RkIs1woykpPN/jPCLjm5ThM=
Subject key identifier: 11:2F:0E:46:4D:33:04:5E:5F:8D:4F:B1:F1:34:CD:0A:36:74:15:AD
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer: /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial: 019D9A74CF58584EE72BD25810F367376F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number: 1881
Signing time: Fri 17 Apr 2026 08:00:39 +0000
Manifest this update: Fri 17 Apr 2026 08:00:39 +0000
Manifest next update: Sat 18 Apr 2026 08:00:39 +0000
Files and hashes: 1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: xM3uscTmnceL9s6vUCJVXzZTJaDSgc4kuK4A+sFMPXQ=)
2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:cf:58:58:4e:e7:2b:d2:58:10:f3:67:37:6f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
Validity
Not Before: Apr 17 08:00:39 2026 GMT
Not After : Apr 18 08:00:39 2026 GMT
Subject: CN=112f0e464d33045e5f8d4fb1f134cd0a367415ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:08:7b:ad:84:8c:b5:d2:c0:97:ad:90:bb:
24:37:b2:61:6b:cc:1e:9b:f7:0e:42:5d:a0:bb:b9:
76:71:23:b5:5d:0a:11:74:a5:59:c8:76:f5:65:2f:
25:3a:26:96:95:d5:fe:b7:75:cd:a5:8d:46:0f:00:
78:76:8b:9d:3e:f6:7d:63:14:45:4a:1e:9b:1d:1e:
9c:2d:f3:a9:9c:3f:c9:83:71:2b:81:9e:dc:50:e1:
7e:01:f9:08:1b:5b:a9:8d:89:d7:5d:d8:48:85:46:
a2:66:82:be:4c:67:21:a9:2a:a3:fb:18:04:49:54:
ee:30:87:76:dc:b3:40:6d:ec:a1:7f:92:41:62:6d:
e6:97:1a:ee:61:51:51:ef:5d:99:fd:df:fd:a5:66:
5c:94:e3:7e:e7:94:ab:10:56:0a:23:e2:fb:56:9e:
79:c0:f1:08:98:f8:63:31:b7:82:a3:9c:22:b5:71:
d9:78:86:3a:4e:02:01:4a:7f:69:67:8d:07:1e:77:
91:54:e8:0e:81:29:35:d9:bd:70:90:b6:d3:3a:4d:
1c:de:94:b7:79:55:82:fd:e8:61:18:26:10:f6:d0:
59:79:57:e8:b3:f5:01:30:64:0d:d1:1f:b7:86:aa:
50:bb:95:6d:fb:c7:8f:b8:17:3d:b2:fd:e5:18:a2:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:0E:46:4D:33:04:5E:5F:8D:4F:B1:F1:34:CD:0A:36:74:15:AD
X509v3 Authority Key Identifier:
keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:df:d6:15:2f:be:30:c3:a7:07:17:90:c9:fa:a2:22:26:d6:
b8:ca:2c:45:e3:c9:ed:5b:45:56:9a:10:4b:ac:c6:b1:a4:b5:
df:2b:50:9b:10:01:7d:ef:a8:f9:4b:66:83:27:31:11:e5:fb:
bf:85:de:a3:97:be:a5:69:2c:bd:9f:d4:18:1b:17:be:a1:4b:
fb:03:c7:31:01:c5:85:68:91:3f:69:3b:3d:72:25:df:64:bb:
cb:38:ac:36:94:3b:49:68:86:20:94:25:75:37:dc:fa:c1:18:
34:69:17:ff:3f:e8:44:46:53:c9:f1:44:fe:9b:12:01:c6:e6:
69:c3:f1:68:f2:ae:96:cd:f7:ab:e5:b7:04:e8:4d:72:06:e5:
c8:f6:a7:7d:f5:74:eb:e4:4b:fc:20:8b:ed:f5:f5:2b:bf:b1:
89:e7:c1:c1:5c:90:d6:8a:9b:1d:e9:86:b1:26:d1:2b:c7:2a:
98:c4:05:0f:3e:b0:0a:dc:8b:d8:0a:3a:26:2b:05:c4:e6:63:
94:e6:fc:96:4b:b2:63:08:18:86:18:ab:37:52:f5:f4:13:62:
16:45:83:6a:5a:0f:d7:81:7c:12:24:fc:d9:1b:44:f5:ab:a5:
05:56:c6:df:ec:27:8c:b1:7d:4f:a4:ec:05:56:bd:f0:3d:1b:
85:89:ff:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:03 2026 by rpki-client