Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier: RbN6+R1g6FPyywsz8olwWAQ/quh3x2ZhGtw+FlOF7OY=
Subject key identifier: FE:E0:BD:FD:0C:A9:4D:B2:90:46:72:70:4E:C7:B7:6E:4A:A0:88:7D
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial: 019DA4536B3BC9A2B464054D03FC26275D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number: 10C2
Signing time: Sun 19 Apr 2026 06:00:23 +0000
Manifest this update: Sun 19 Apr 2026 06:00:23 +0000
Manifest next update: Mon 20 Apr 2026 06:00:23 +0000
Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: pggpM8NDQavXCnxCmZ5nU4Iqs5wXgMDIXQDMQ0+xVhQ=)
2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:6b:3b:c9:a2:b4:64:05:4d:03:fc:26:27:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Validity
Not Before: Apr 19 06:00:23 2026 GMT
Not After : Apr 20 06:00:23 2026 GMT
Subject: CN=fee0bdfd0ca94db2904672704ec7b76e4aa0887d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:92:3a:54:a6:af:dc:48:b1:ea:d1:ea:7e:
83:3c:51:7b:f4:01:92:fe:f4:cb:fe:6c:23:1c:25:
38:b2:3e:95:9a:f4:83:ab:b6:90:90:0f:06:4c:c1:
87:5f:69:d9:6f:7c:0d:bc:f4:ca:0f:2d:1a:02:78:
35:67:91:00:a9:ff:f5:cc:7c:50:34:8c:ea:a0:28:
d4:f5:7b:bb:d2:69:fe:66:80:23:a1:c5:45:d7:29:
a4:9f:df:77:03:fc:f8:72:ea:86:a3:44:b3:49:d0:
69:76:64:6f:c9:47:62:f1:cb:ea:7f:7b:bf:4f:90:
39:ac:20:77:8f:cc:fb:ef:0f:c7:5d:33:20:0e:19:
4a:6d:bb:cb:c1:fe:98:e6:ff:1d:e0:47:e7:17:fd:
22:db:95:01:2d:d2:87:42:59:14:c8:f2:d6:34:c8:
e1:9c:31:12:ae:49:fc:be:2e:71:1a:3b:1f:56:92:
83:54:a5:0f:fe:80:ca:b6:12:c5:09:d6:14:48:8b:
8b:c6:43:c1:a4:92:6e:5a:3f:ce:22:99:7f:bc:a2:
b5:64:87:99:79:76:d4:a7:0e:05:05:30:b3:85:cf:
26:6f:ef:60:46:fa:b4:8d:0e:a9:ee:11:c6:5d:61:
45:e5:0c:35:ae:b6:4e:6c:41:ee:05:82:7c:02:25:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E0:BD:FD:0C:A9:4D:B2:90:46:72:70:4E:C7:B7:6E:4A:A0:88:7D
X509v3 Authority Key Identifier:
keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:0b:a4:c8:58:15:b0:0e:f9:5c:4c:27:50:44:b2:2c:1c:
ec:44:76:1a:e5:11:f0:21:1b:65:b5:3d:1b:c2:e0:8a:93:01:
5c:57:85:d2:7b:f3:80:a0:ab:21:46:c9:02:af:7b:35:75:61:
02:6d:f0:87:1c:0d:08:16:ca:ec:4c:fc:bb:3b:b2:0a:0e:c3:
05:58:69:71:f0:ef:9f:9c:d5:5f:85:7b:58:74:44:e5:54:9a:
b7:13:60:1d:bd:78:d9:b9:ad:a1:db:12:2d:7f:a3:c7:63:af:
de:24:44:b5:0d:5d:48:99:ee:de:09:a0:bc:fe:72:e6:19:7e:
39:65:30:3c:a5:2c:a1:d7:53:79:53:e9:5d:da:6a:6b:bc:18:
cf:c8:c6:4b:5e:33:79:14:c5:ad:0c:bf:f5:bc:5d:dc:17:08:
0b:d9:01:67:30:e4:62:c2:44:d4:a0:d1:c4:87:c5:e1:9d:54:
2f:a3:b2:de:0d:bd:c0:3c:f1:c1:a3:3f:d7:44:e2:bf:94:60:
6d:f6:be:47:73:a9:ea:2c:05:01:16:d2:73:dd:53:03:77:18:
cd:e3:a9:00:51:c5:f5:7a:a7:4f:f8:38:14:21:d9:8f:26:fb:
a7:03:5c:d4:cb:ad:4b:c2:d7:03:c0:c6:28:4f:45:12:95:0d:
d4:85:fd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:20 2026 by rpki-client