Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: F1uUqJADwGKu9+g9toz8FrGQN39T3fe9RcHsZf+N+F8=
Subject key identifier: 98:EA:AD:C2:29:85:CC:88:49:B5:BA:26:D3:B9:FC:2C:EA:BC:CB:87
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 019DA59D617F7AB470B4E076C5B164439AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 017E
Signing time: Sun 19 Apr 2026 12:00:47 +0000
Manifest this update: Sun 19 Apr 2026 12:00:47 +0000
Manifest next update: Mon 20 Apr 2026 12:00:47 +0000
Files and hashes: 1: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: 2JOebLMjNhf/wxfN0vkBEuvcVqfBQKbDS+BazO1Ryjc=)
2: vWSFnkCnudPRUzfioP_sQ99MW24.roa (hash: fa/7H1d1MQOMBd0ZSP/HYbqe7w6JGnLpzf7w6NJUnOE=)
3: xE1mwTKzQDbk79YJ7PIMthkjSqo.asa (hash: YyhspqR7mOuHCVepylY/A74k3bsEO/zYUAHhZJuP0qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:61:7f:7a:b4:70:b4:e0:76:c5:b1:64:43:9a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Apr 19 12:00:47 2026 GMT
Not After : Apr 20 12:00:47 2026 GMT
Subject: CN=98eaadc22985cc8849b5ba26d3b9fc2ceabccb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:14:ee:a9:15:f3:88:c4:21:50:4c:50:a6:25:
c9:7a:cd:4d:ef:79:e5:13:d0:01:ed:49:c5:ad:8e:
db:5b:ae:f7:24:c4:a0:6e:13:74:2a:97:cb:6d:9d:
0e:5a:c6:08:d9:47:98:51:2c:b6:52:a1:d4:18:b2:
35:0c:38:e1:9a:db:5d:7c:3e:c9:74:68:71:af:b5:
a6:d7:be:0d:6d:e1:cf:45:c5:dd:df:36:0e:6a:f8:
62:3f:bf:a2:2b:90:4c:6f:c3:b9:63:b8:77:2d:17:
69:17:b6:c3:73:f9:a0:4e:ae:b2:6b:1e:ba:bb:3e:
f0:ee:ce:4f:34:28:e7:b5:d3:6c:cb:4e:9e:c2:9f:
cc:41:47:69:b6:6a:3c:4e:02:15:b6:6a:75:13:42:
78:bc:a7:db:ba:6a:78:65:71:01:03:b7:b1:85:34:
c9:a7:ad:e5:da:88:e3:94:0b:00:bd:ca:a6:6a:23:
80:e4:e5:e2:64:76:50:96:59:83:c8:f7:79:70:d9:
b9:d1:e4:f1:4d:93:58:e0:0c:b3:08:f3:57:7c:87:
15:03:d1:37:e4:ac:da:d0:80:e4:a6:ce:7e:9b:50:
2c:5f:9f:49:d4:b4:82:18:6c:c1:c0:96:a2:ef:9d:
c0:b9:c0:30:18:93:c8:83:1a:ca:1d:b6:b8:6e:f2:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EA:AD:C2:29:85:CC:88:49:B5:BA:26:D3:B9:FC:2C:EA:BC:CB:87
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e1:bd:dd:1f:c7:c8:16:9f:5d:33:1c:be:c0:1a:ef:de:14:
a1:9e:1f:e1:70:1e:dc:92:2f:74:6b:ca:ef:24:48:1e:d6:ee:
34:f7:f5:4e:32:7f:dd:d0:1b:4c:42:bc:bb:3f:de:62:39:b1:
a1:33:17:40:2b:02:f5:16:31:a5:25:91:d2:4a:eb:b2:27:88:
34:1f:b0:73:f1:3d:4d:bb:0a:a8:e7:84:91:32:9c:01:cb:b2:
83:29:03:01:52:65:95:1a:98:a6:c4:39:e0:d7:dc:17:49:83:
ca:4b:09:25:d0:59:34:33:e0:fa:4f:c4:5b:44:16:58:a0:df:
6a:c9:ce:45:6d:af:8d:97:c9:b7:8b:2f:2f:69:38:e9:97:2c:
3b:12:f5:52:56:4b:9b:65:6d:3a:87:3a:f6:d6:63:02:da:8e:
e3:a6:34:44:c9:28:b0:07:e2:15:a6:88:20:27:6a:0a:63:b5:
d4:0c:bc:20:67:6b:7f:8c:f2:ea:96:7e:b0:5f:cb:bc:1e:2f:
f0:fb:f9:63:fc:31:3a:cc:b1:d6:ee:cc:45:f3:90:3b:df:9d:
86:9f:ed:80:02:30:99:04:df:67:49:cf:6c:e9:2a:6a:34:36:
a0:45:8f:cf:f0:27:66:df:46:6e:79:f7:03:ee:a1:29:2d:03:
5d:cb:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:11:31 2026 by rpki-client