Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft
File: 1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft (raw, json)
Hash identifier: N08mgtTVZMLetPQ8ilQy3NFS2JvKE6naFf3CjE9O/YE=
Subject key identifier: D8:BF:C7:B5:BE:E8:97:3A:2A:FA:E9:2E:B6:C5:15:87:39:7F:DB:32
Authority key identifier: F9:4F:D2:41:8E:7F:09:E0:1D:15:11:3F:FF:00:4E:05:5F:80:FC:5E
Certificate issuer: /CN=f94fd2418e7f09e01d15113fff004e055f80fc5e
Certificate serial: 019D97E287E7CC6D79E8DBC646FB6C8B94F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft
Manifest number: 0953
Signing time: Thu 16 Apr 2026 20:01:38 +0000
Manifest this update: Thu 16 Apr 2026 20:01:38 +0000
Manifest next update: Fri 17 Apr 2026 20:01:38 +0000
Files and hashes: 1: 1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl (hash: PJtBtNNQOXaoKqw+6eURcMZmNMMdAD+aiwn57kBwUhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:87:e7:cc:6d:79:e8:db:c6:46:fb:6c:8b:94:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94fd2418e7f09e01d15113fff004e055f80fc5e
Validity
Not Before: Apr 16 20:01:38 2026 GMT
Not After : Apr 17 20:01:38 2026 GMT
Subject: CN=d8bfc7b5bee8973a2afae92eb6c51587397fdb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:8f:e9:36:14:6c:c6:ae:2a:71:67:22:ab:
1a:2d:35:b8:85:76:1d:10:b1:83:de:0e:a7:19:e4:
eb:70:29:16:3e:00:76:6c:74:45:27:bb:da:e0:1d:
a4:05:63:db:93:cc:4c:85:1a:bd:c0:aa:15:02:e6:
c0:9e:a8:83:f7:1f:75:b8:1c:fa:08:34:7d:b8:db:
15:23:04:0c:3c:4f:d3:84:5f:ae:c2:1a:31:9c:b4:
83:d9:00:53:65:8c:8f:33:2e:ab:01:b7:b3:d3:57:
50:db:6a:9b:78:ff:47:52:58:3e:bf:52:47:cc:16:
7e:3e:9b:43:c6:51:c3:37:7b:d7:54:c4:40:96:af:
38:da:9e:47:7c:62:e1:19:5c:83:04:f9:81:ae:5b:
8b:5f:da:de:27:87:a9:75:07:e7:a5:50:31:2e:e3:
80:1d:b3:97:29:f3:6f:14:91:07:c4:33:63:8a:a4:
41:a0:1b:f4:70:d8:c8:87:18:bd:a5:fc:a6:69:89:
6b:2c:df:bf:6f:28:5a:82:3b:9b:2d:20:61:45:38:
85:78:04:bf:91:e2:17:48:70:a6:cf:88:89:4d:bd:
78:6b:0d:65:a5:b8:68:da:71:3a:26:95:87:e5:5d:
fc:e6:af:73:ae:19:db:17:59:e4:4e:03:2a:39:1d:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:C7:B5:BE:E8:97:3A:2A:FA:E9:2E:B6:C5:15:87:39:7F:DB:32
X509v3 Authority Key Identifier:
keyid:F9:4F:D2:41:8E:7F:09:E0:1D:15:11:3F:FF:00:4E:05:5F:80:FC:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U_SQY5_CeAdFRE__wBOBV-A_F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1ffbc3-498d-4700-9a5e-9170ee9a51e6/1/1-U_SQY5_CeAdFRE__wBOBV-A_F4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8e:5c:ea:11:0d:3b:01:aa:5b:27:8d:33:4f:45:9a:d5:25:
68:ad:25:e3:2f:12:9a:53:cf:4c:7a:b2:d9:84:bf:c6:6e:48:
5c:6d:02:a4:d0:3d:48:96:04:0e:ea:7a:7e:3a:e4:68:b0:fa:
26:cb:cc:8b:25:da:c9:32:16:e0:40:50:fa:5e:41:8d:8c:8c:
5a:2b:91:38:d0:eb:f1:37:6e:a3:ba:e2:fa:b8:d8:c9:da:fe:
15:43:b7:54:7b:11:db:99:7d:5d:18:53:39:27:ce:a1:97:cc:
9a:c9:a7:12:3f:04:e8:5c:a9:02:bf:62:a6:8d:10:fc:aa:ae:
71:48:05:f3:ef:15:e1:82:88:6d:6b:93:aa:81:18:ba:37:a5:
b6:a3:da:c7:14:02:9d:78:1a:03:a8:7a:d5:20:f0:75:26:4b:
b9:96:37:9b:95:a1:bf:1e:0d:7b:a4:d2:37:f7:85:57:c3:98:
58:00:d7:39:6c:bc:61:53:d9:d9:98:af:a9:b0:68:a5:6a:44:
db:b3:3a:9c:df:6f:3f:2e:2e:58:43:a8:c9:58:eb:87:0e:be:
24:54:c2:83:60:88:19:93:c4:b0:b1:f0:c7:85:82:29:9b:da:
8d:b8:8b:ef:6b:0b:73:3a:d9:57:38:9a:92:be:81:1f:97:c6:
63:24:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:01 2026 by rpki-client