Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
File: a1Y13TgCFaA8kwfaViBsVms4o88.mft (raw, json)
Hash identifier: X2kup9trUkcTuB7ncwT2WFtNqEWTNkWISJlDS6fuxtY=
Subject key identifier: 7B:11:12:F5:B3:19:0E:DB:74:96:A0:96:BA:2D:B4:6A:D4:25:84:ED
Authority key identifier: 6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
Certificate issuer: /CN=6b5635dd380215a03c9307da56206c566b38a3cf
Certificate serial: 019D9A06DCB2B6B9660E4CC9B4AA29E1AD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
Manifest number: 15FD
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: 2RPY_DRtkYzxbp8ObFmZTuCpj7I.roa (hash: SWTV6VV0qDNDxzL8a/2qaSf2Dp7oqXVVz/XaDNhIJ2w=)
2: a1Y13TgCFaA8kwfaViBsVms4o88.crl (hash: Waw7puin1UmunM6Xsspm2QBbEczDV5LTR3iQZ9mcORM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:dc:b2:b6:b9:66:0e:4c:c9:b4:aa:29:e1:ad:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5635dd380215a03c9307da56206c566b38a3cf
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=7b1112f5b3190edb7496a096ba2db46ad42584ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f6:1d:40:f0:de:92:08:f9:8f:ab:fa:fb:35:
a2:fc:42:ec:78:35:9b:3d:3a:3a:31:eb:89:fb:aa:
e4:e4:08:48:80:4e:4c:38:76:22:f1:f0:5c:9a:04:
dd:cc:14:15:e2:b1:bf:7a:bd:03:d1:4a:3a:3a:41:
9c:8e:db:da:ab:0c:30:c3:01:a6:9c:b2:de:83:2d:
ec:58:10:be:89:b3:09:c6:dc:49:e2:a0:3a:57:75:
42:51:f4:b1:a4:b6:d2:0c:b0:62:6d:db:0b:9f:cd:
d9:f1:e1:18:08:a2:de:6a:2a:1d:ef:78:88:24:59:
39:dd:18:56:b8:d1:cb:71:01:78:09:e4:da:63:58:
ea:a5:0d:dc:3f:b2:84:b8:07:38:3a:47:99:a0:36:
52:22:09:1b:55:f2:91:ef:e1:6b:9e:20:be:09:fe:
c2:84:d0:a8:bc:7a:3f:d8:45:0d:fc:6b:28:87:2a:
2e:e8:82:e8:3f:10:d3:bd:c7:eb:4d:06:c6:3e:c4:
9e:e7:07:e6:9b:fe:69:69:bd:e6:24:4b:ae:a5:82:
7b:2c:99:36:ed:94:5e:a9:3f:cd:dd:a0:0a:e1:2c:
b3:de:b8:f0:16:ea:2e:ed:52:af:fb:13:4a:4f:0d:
3e:83:0d:8f:58:28:0a:c5:32:1a:62:06:a4:7e:20:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:12:F5:B3:19:0E:DB:74:96:A0:96:BA:2D:B4:6A:D4:25:84:ED
X509v3 Authority Key Identifier:
keyid:6B:56:35:DD:38:02:15:A0:3C:93:07:DA:56:20:6C:56:6B:38:A3:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1Y13TgCFaA8kwfaViBsVms4o88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ac1738-6c67-4204-8901-74748bc93bca/1/a1Y13TgCFaA8kwfaViBsVms4o88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:33:99:be:5a:bc:a9:ae:47:e4:93:27:15:0e:f9:04:48:be:
29:ea:69:77:9b:1a:4e:16:2f:51:26:da:24:a2:4b:3e:f5:40:
a5:68:48:dc:b2:ff:56:37:02:6a:92:06:06:21:2a:62:ad:09:
be:88:44:36:e3:64:8e:8e:bd:0e:19:3e:be:23:ee:53:f0:81:
48:56:2b:14:e4:4b:38:25:f9:19:18:e4:71:a7:65:b8:e9:02:
63:f6:31:39:56:6d:f3:51:90:9a:7b:f6:ef:5a:f0:bd:72:42:
5e:b7:c7:49:e3:71:26:10:e9:31:64:ad:19:53:f9:00:71:4f:
94:6f:cb:34:8c:28:05:2f:48:97:eb:9f:1e:58:76:25:23:2c:
08:a3:d7:43:89:8e:4d:0e:ea:8e:12:25:b5:eb:a0:ca:c9:fa:
03:b4:54:aa:25:00:ad:25:2f:be:1b:95:3b:be:6a:04:e7:66:
41:40:c3:45:72:c1:19:99:12:73:a4:25:de:4e:75:47:53:07:
bb:2e:25:5f:82:7e:0c:5a:ae:63:ce:13:40:d5:37:df:66:a2:
1f:4b:af:50:29:07:45:42:07:c0:4d:ba:fb:58:06:3b:3d:dd:
2d:b9:80:2d:d2:1e:ff:3c:f4:3d:f8:04:45:7a:aa:95:43:e6:
a5:52:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:00 2026 by rpki-client