Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: d36m2AGb4pvj3uJfLoPGnq8E4lA/I183Kfu1/NbVYrk=
Subject key identifier: 64:A3:21:1E:AB:1A:EB:46:99:F4:92:6C:B6:E9:20:58:14:6D:A9:C1
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 019D99D04E4C28FF32860695C0046A3203D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 1794
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: qe8h//ngI4dCOlIocmM8cG2ycLcMGxIwx8HKgocZ9V8=)
2: JcapaBByGfg1r869CgLSe-5w-C0.roa (hash: U5B93AFtlrsiQ6jcGPHG5OSN9KDq19UojlE1/dcuDeI=)
3: fzAeGKhcQK73_8kUi9aPu-hO7GM.roa (hash: nriJ4MQ+9xZdYNUaYHTilz4XR7McFd/ntd369VK1PM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4e:4c:28:ff:32:86:06:95:c0:04:6a:32:03:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=64a3211eab1aeb4699f4926cb6e92058146da9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:9d:e8:7c:0f:8f:7d:e9:2b:4e:e7:43:b8:
43:24:6c:04:48:d3:50:30:be:09:fa:9a:40:4f:16:
b3:24:47:3b:dc:c0:7b:11:94:ef:4f:99:eb:5b:5f:
89:ab:a4:33:1b:fa:e9:f9:29:77:e8:ce:aa:4a:66:
38:be:ef:35:81:ae:ea:3f:a7:2e:89:a5:48:98:5d:
ec:ef:c3:4a:a0:42:c0:8c:0c:1c:8e:30:f6:33:5a:
4f:22:4c:38:12:64:0c:16:56:b3:ef:7d:a1:b0:9b:
a5:87:1c:cf:3a:2d:9a:e5:25:ee:9b:64:2e:f4:c8:
35:f0:75:32:7d:56:c3:1b:d9:e0:a2:16:61:68:c6:
40:6c:3c:28:98:e5:06:f4:35:6c:64:7c:6a:ca:0e:
99:48:70:dd:04:b8:2b:d8:5f:df:61:f7:bf:80:7b:
4f:82:7c:d8:51:82:2c:04:25:58:77:26:cc:98:b3:
3d:18:5d:52:4a:dd:be:77:43:5c:dc:80:d8:3c:8e:
e0:75:9c:97:7c:7e:d4:2f:ae:dd:58:b4:7d:06:68:
d7:44:44:d6:b0:56:e5:f2:85:5f:05:88:0a:6a:cf:
e0:6a:ac:6a:bf:e1:53:f9:bd:73:b1:8c:0e:08:66:
e1:ac:87:b6:f2:38:6d:93:01:0d:2e:b7:fe:8f:87:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A3:21:1E:AB:1A:EB:46:99:F4:92:6C:B6:E9:20:58:14:6D:A9:C1
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:dc:9d:d0:f0:8c:19:0d:1f:9f:78:cd:ee:b2:27:01:45:d4:
75:d2:94:98:a2:9d:c8:60:54:f7:5c:d1:4b:14:60:03:da:63:
46:70:9b:89:ab:fd:e5:31:1c:f2:34:07:83:9c:fa:f6:b6:bf:
46:b8:24:25:ef:ba:be:7b:de:cc:1a:e7:4e:44:81:15:be:ce:
6e:56:fb:fd:66:07:88:f9:e1:1a:a5:fb:b0:e5:ff:2d:d7:e4:
3b:a0:50:a8:8a:cc:ed:2d:21:91:f9:d1:b5:91:3e:35:f0:91:
68:8f:7d:b3:0c:7a:ff:73:df:00:ac:30:32:cb:08:fd:26:8d:
eb:c6:25:76:bb:64:51:3e:49:73:a8:3a:ab:c7:ae:6d:dc:1e:
80:ff:0d:58:0b:da:8f:43:e4:0d:7b:16:a4:26:04:26:3b:90:
74:2d:c9:b4:89:f6:e2:e3:99:5b:38:26:3f:15:55:35:56:cb:
90:f6:a8:02:6d:b7:4b:98:18:fa:cf:22:c2:df:4d:fd:d0:22:
48:7a:f8:dc:eb:71:fa:a1:4b:9f:20:9c:cf:71:86:0c:0e:9c:
5c:25:d0:85:5a:99:b1:15:a6:05:d8:3e:c7:df:fd:d8:45:fc:
cc:a3:08:e6:20:c1:fe:f6:df:b3:da:08:63:8d:02:31:5b:09:
83:32:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:55 2026 by rpki-client