Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: nSvYvy2MwAs8mTLpYMFW9+ltvdC9ucBzY8lftEtBWUg=
Subject key identifier: 09:8E:23:E5:DD:98:F5:7E:7E:F3:D6:7A:D3:AE:BB:FA:EE:A4:3E:69
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 019D999976B849C32679B74E8E82EA1495E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 0848
Signing time: Fri 17 Apr 2026 04:01:04 +0000
Manifest this update: Fri 17 Apr 2026 04:01:04 +0000
Manifest next update: Sat 18 Apr 2026 04:01:04 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: QggYQ8H2eoW9UR3V7+Y5Pt68fcXJ0VHNFfbxlsan5AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:76:b8:49:c3:26:79:b7:4e:8e:82:ea:14:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Apr 17 04:01:04 2026 GMT
Not After : Apr 18 04:01:04 2026 GMT
Subject: CN=098e23e5dd98f57e7ef3d67ad3aebbfaeea43e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:c5:06:17:97:41:57:1c:c1:54:60:14:35:
10:15:9e:0e:7c:99:d1:2c:cd:3b:59:e4:fa:8e:a4:
fa:74:af:01:3c:2c:41:23:8b:a8:22:4d:8f:14:5c:
21:3d:79:c0:91:db:95:40:18:0f:ea:3d:62:12:56:
1f:2d:3f:28:2c:d3:14:f1:77:9a:9f:50:57:93:94:
75:69:f4:6c:57:be:66:30:7c:ad:26:5c:f3:26:79:
38:1a:dd:1f:30:ce:64:cb:69:bf:f8:26:dc:57:df:
6a:dc:e8:39:fd:a1:e7:db:ce:1a:e2:e1:92:65:5a:
48:a1:4a:66:d3:ba:16:0a:7f:bf:43:5a:46:85:41:
45:86:99:12:34:8e:21:e9:dd:26:31:4a:cd:35:a3:
03:00:c2:15:61:87:fe:57:66:08:58:99:bc:ae:5d:
89:9b:c2:a2:2f:de:eb:dd:64:43:3b:23:24:ed:29:
3d:90:8b:45:68:be:b0:26:0f:f5:44:60:3c:58:23:
17:fd:65:ac:58:eb:ef:3f:e3:c9:02:c4:53:1b:89:
7c:42:1a:7c:04:b9:4f:4d:d2:ca:c0:67:82:32:dd:
c5:2b:d1:46:ee:2c:00:3d:a8:ca:d7:01:a2:b7:42:
87:96:76:d4:81:3c:aa:b4:78:ae:d6:d3:59:0d:06:
6b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8E:23:E5:DD:98:F5:7E:7E:F3:D6:7A:D3:AE:BB:FA:EE:A4:3E:69
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:41:9e:18:ef:9d:bf:65:e8:8f:5c:b3:7a:76:e6:e3:be:cf:
f8:ad:45:33:4a:c5:3b:b6:57:bc:5f:47:0b:df:2f:b6:84:52:
30:1d:06:40:47:f1:9f:1c:38:22:c4:ca:70:55:8f:de:01:e6:
69:4f:f9:45:ad:86:90:32:18:1d:eb:a7:8e:e4:87:75:17:9c:
0d:6a:96:c0:33:a3:9e:d5:f3:a5:ec:04:b3:69:29:f5:03:c7:
b7:8b:c2:a9:78:58:11:de:6c:79:e4:30:f3:27:8d:28:ac:7c:
49:2a:d5:4b:ea:65:68:6f:56:e9:67:ec:76:cb:cc:95:19:5f:
2a:13:47:a4:5d:af:f5:82:10:4a:cb:ea:86:9c:f1:8b:f4:de:
c0:60:d2:47:dc:66:10:c9:4e:92:4a:a2:ee:f8:b1:a5:77:10:
1d:6f:7d:97:2d:f3:d2:5d:04:8d:5e:a9:e7:59:9b:94:b7:2b:
db:ae:07:e1:f3:c0:de:e2:a2:4c:c0:ba:1a:e3:38:31:e0:67:
4f:d2:56:5a:d5:ec:0d:7d:f9:38:9f:d9:a7:b9:2d:48:eb:2d:
1b:69:bf:9e:c3:b9:5a:14:71:9c:d1:a4:6d:b5:15:34:33:ce:
b0:00:a7:92:48:ed:20:4c:17:e6:a6:8b:fd:81:f3:ef:42:14:
80:42:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:15 2026 by rpki-client