Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier: fn6wOiykyEh4RThWLuX5+DQlIs1cOv51eTRLKmaBFCM=
Subject key identifier: BB:14:8D:08:03:1F:0A:33:EC:1E:78:F3:BE:1A:72:B0:69:08:31:AA
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 019D9A3EAF64E521FB96BB5B05D4EE789A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number: 1555
Signing time: Fri 17 Apr 2026 07:01:32 +0000
Manifest this update: Fri 17 Apr 2026 07:01:32 +0000
Manifest next update: Sat 18 Apr 2026 07:01:32 +0000
Files and hashes: 1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: cT79dO1RCRelDn3c4ebCjJgsYe1VyGhI5GL5hNYIFYM=)
2: fzdQ-DiiI7ywifu_IGVttENLXng.roa (hash: NRsukZR0ciYndHqAYYe2J/xe0I537gyb7NRFYGMJuBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:af:64:e5:21:fb:96:bb:5b:05:d4:ee:78:9a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Apr 17 07:01:32 2026 GMT
Not After : Apr 18 07:01:32 2026 GMT
Subject: CN=bb148d08031f0a33ec1e78f3be1a72b0690831aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:20:b4:66:08:f6:48:50:64:2f:cf:c1:15:58:
2b:7e:4b:78:03:85:3e:8f:6f:1b:28:ee:6f:24:26:
ac:30:db:0f:44:a3:41:bf:08:c5:cf:dd:3a:3b:a2:
e2:ba:6f:ca:10:37:84:03:45:c3:df:d9:da:59:b5:
01:0e:09:93:98:7b:64:61:75:99:f5:7c:ee:d3:aa:
63:39:20:ba:bb:d1:fa:ec:ae:44:9d:a1:61:cd:47:
ff:c0:ae:f4:45:7b:fd:7a:a2:33:58:90:c2:8f:0b:
45:2a:1d:66:7b:80:5a:15:08:4d:77:b5:39:13:bc:
97:b7:66:da:c3:ec:a9:6b:5c:f3:41:8f:c5:f8:4b:
37:19:cb:4a:b8:02:92:74:ca:64:65:b7:04:d1:e0:
d7:5d:95:d4:e7:9c:b7:ed:ab:c8:84:74:9f:b6:38:
60:49:98:33:e7:3e:d0:47:5f:8e:c0:51:ba:d9:38:
d0:82:ae:d0:70:77:bd:6f:04:95:9c:d2:6a:41:b3:
f1:86:c1:af:a6:a7:d0:47:ac:6c:1c:2e:db:04:5a:
99:0c:c3:f4:2a:fb:27:14:76:8e:e3:b7:2a:e4:07:
b8:b0:36:8b:4f:c2:ca:15:46:31:a6:2f:f5:e7:41:
1b:11:00:6f:fb:33:14:e9:40:22:0e:a3:d1:ca:c6:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:8D:08:03:1F:0A:33:EC:1E:78:F3:BE:1A:72:B0:69:08:31:AA
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d0:9a:59:18:52:db:17:6e:69:ea:6a:c1:66:ac:7d:22:d0:
84:5e:a0:fa:42:f1:2b:fe:7c:c7:10:5c:61:16:24:c0:93:0f:
56:5b:6c:b3:89:77:d7:7b:34:0b:35:03:f8:94:35:81:18:24:
33:8e:b9:f7:e6:0a:4f:d1:6f:8b:70:a6:7a:3e:e8:9f:10:89:
aa:ac:75:5c:91:cc:70:63:8e:8e:83:d3:19:a3:d0:c7:82:20:
0c:b0:c2:93:fa:30:3f:7c:dd:c0:bd:e1:c0:c4:19:c5:f8:8c:
25:43:4a:b3:37:36:89:98:f7:08:96:30:80:80:4e:d9:87:01:
b1:47:ef:3c:a1:73:97:ae:99:9f:6d:bf:ab:f5:be:e7:54:86:
b1:d3:86:f8:97:91:f7:b7:a8:6c:7b:c1:4c:b5:30:26:62:3b:
14:2c:86:89:a8:ca:67:70:8b:31:fe:22:d8:41:1f:f9:2b:d1:
f0:9d:11:86:8b:03:73:e2:81:b4:af:d1:c2:07:23:2a:31:e3:
71:d9:81:83:c6:0b:04:87:ba:39:c1:e1:ac:c1:8f:ac:6f:cb:
16:e4:69:e2:56:6f:3a:4c:68:04:4f:87:8e:16:e5:79:27:0e:
98:bf:4a:9c:e6:94:dd:4a:3e:5d:4c:69:f2:ff:46:fb:72:c2:
30:d1:fe:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:02 2026 by rpki-client