Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
File: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft (raw, json)
Hash identifier: vn2YC91Sa27He5Ojm05v3Z48uhCzz2eOYc+e67LrMNU=
Subject key identifier: 2A:4A:13:C1:DC:B8:1D:BC:3C:E1:1C:A9:15:8E:61:B9:1A:19:DC:47
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Certificate issuer: /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial: 019DA378822E7A69C083B70C5D41953592CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
Manifest number: 0BD7
Signing time: Sun 19 Apr 2026 02:01:16 +0000
Manifest this update: Sun 19 Apr 2026 02:01:16 +0000
Manifest next update: Mon 20 Apr 2026 02:01:16 +0000
Files and hashes: 1: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl (hash: GZNjj1wSGLj+g7KSTC5smaN+oxuakhi5Lvp/EMhXz2Q=)
2: 9yzkMZa76suy_xBf-fnkwVSYimM.roa (hash: i3WGO4QDKM02YiC5j5wc43Wp3vFSY3zhmPS5smAe9dE=)
3: F0uaFyEwMtXKV0pSh35XdcCZhN4.roa (hash: mHxAFmcEXu/yVB/slBokI1yXK42U9FtshPQzKmef+ZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:82:2e:7a:69:c0:83:b7:0c:5d:41:95:35:92:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Validity
Not Before: Apr 19 02:01:16 2026 GMT
Not After : Apr 20 02:01:16 2026 GMT
Subject: CN=2a4a13c1dcb81dbc3ce11ca9158e61b91a19dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:45:9a:49:45:5a:39:0b:94:3e:69:29:45:
05:22:aa:a6:a4:d6:55:4b:b9:1e:0d:2b:4c:dd:84:
bd:b8:13:bd:f0:8b:64:4f:ad:f6:76:d3:22:8e:bc:
42:0b:71:fc:94:b1:b3:c4:1a:9e:30:7b:03:0b:74:
8b:ad:c4:d2:05:7f:4d:e1:b1:de:e4:1f:9f:a4:97:
98:d7:83:e0:af:b9:0b:7d:27:7e:db:d2:64:f7:bd:
aa:05:58:27:d1:af:dd:0f:f1:14:eb:42:29:d1:5d:
cb:28:74:27:51:ca:9b:5d:da:db:f7:43:57:07:3e:
8e:24:f2:e4:9e:68:57:9b:5d:33:78:81:2c:b9:7e:
39:ff:70:c0:0e:cc:3d:d3:dd:fd:2b:3a:0e:e1:22:
c7:cc:93:4d:87:d8:9e:55:52:cf:19:e8:ba:a5:ac:
ec:10:9a:09:22:89:f9:d2:db:80:f1:b8:5a:30:48:
9f:4e:3c:c5:41:1d:9b:29:0b:ef:54:f3:b4:57:f8:
35:ca:00:ec:47:3e:a3:c2:2c:c1:e6:38:94:9c:9c:
d6:57:b7:e6:c3:1f:b2:de:12:27:d7:4f:c5:1c:3c:
53:da:82:d3:04:c3:b9:63:85:b3:b5:73:7e:97:1f:
f7:f0:a6:2a:e5:d8:99:a7:29:4f:8e:51:d8:62:cd:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4A:13:C1:DC:B8:1D:BC:3C:E1:1C:A9:15:8E:61:B9:1A:19:DC:47
X509v3 Authority Key Identifier:
keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:2e:46:75:aa:02:a3:87:e0:59:ee:0c:f0:7c:ed:1d:dd:22:
fe:56:78:f5:b0:9b:08:67:4f:0a:4f:93:b7:2d:da:5a:9d:b8:
9b:97:db:a5:e6:90:73:37:5e:4e:43:59:07:8e:c9:94:f2:a1:
d6:85:00:ab:cd:1f:c8:b5:94:43:a6:5e:a8:1f:16:40:cb:39:
97:1e:b9:f0:20:3e:be:65:e9:53:64:ef:c9:2c:96:18:08:87:
2a:61:7e:c2:b2:7d:c5:56:61:e2:5b:c3:ca:38:ce:b3:1b:54:
8b:93:7f:33:e1:6f:96:57:60:7f:3d:0c:c8:2d:9c:31:21:59:
7e:e5:90:8f:ae:1e:42:2a:3f:46:db:7d:f1:5c:43:ce:a8:78:
cd:47:6d:07:79:e6:9a:a7:27:1d:eb:33:73:ea:f2:4f:04:99:
d9:bf:81:51:08:c5:3a:d1:36:bc:8e:ac:34:cc:cc:76:f2:2c:
96:47:df:ae:ce:49:31:fa:07:23:3a:49:ce:ba:21:5c:8c:ff:
ea:4c:c4:1e:6f:d6:38:fa:25:a0:dd:ab:39:1e:ff:17:cf:5f:
4f:fa:1e:7b:24:ac:5e:e9:2d:1f:b0:e3:dd:1e:84:00:06:11:
bb:f0:50:b0:d5:62:92:15:55:44:34:e1:e9:4d:ba:68:fc:90:
20:f1:9d:39
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2jeIIuemnAg7cMXUGVNZLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNzU4ZmJkNjJjNmVhYmFhM2M5ODc1MzA1ZjIwNzgwNWUz
N2NkY2IwHhcNMjYwNDE5MDIwMTE2WhcNMjYwNDIwMDIwMTE2WjAzMTEwLwYDVQQD
EygyYTRhMTNjMWRjYjgxZGJjM2NlMTFjYTkxNThlNjFiOTFhMTlkYzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycFFmklFWjkLlD5pKUUFIqqmpNZV
S7keDStM3YS9uBO98ItkT632dtMijrxCC3H8lLGzxBqeMHsDC3SLrcTSBX9N4bHe
5B+fpJeY14Pgr7kLfSd+29Jk972qBVgn0a/dD/EU60Ip0V3LKHQnUcqbXdrb90NX
Bz6OJPLknmhXm10zeIEsuX45/3DADsw90939KzoO4SLHzJNNh9ieVVLPGei6pazs
EJoJIon50tuA8bhaMEifTjzFQR2bKQvvVPO0V/g1ygDsRz6jwizB5jiUnJzWV7fm
wx+y3hIn10/FHDxT2oLTBMO5Y4WztXN+lx/38KYq5diZpylPjlHYYs2xewIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCpKE8HcuB28POEcqRWOYbkaGdxHMB8GA1UdIwQY
MBaAFPp1j71ixuq6o8mHUwXyB4BeN83LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uV1B2V0xHNnJxanlZZFRCZklIZ0Y0M3pjcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNDZhNGNmLWJlNmYtNDA3Ny04ZDRj
LWJjYTRjYjUxYTczOS8xLzEtbldQdldMRzZycWp5WWRUQmZJSGdGNDN6Y3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VkLzQ2YTRjZi1iZTZmLTQwNzctOGQ0Yy1iY2E0Y2I1MWE3
MzkvMS8xLW5XUHZXTEc2cnFqeVlkVEJmSUhnRjQzemNzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAi5G
daoCo4fgWe4M8HztHd0i/lZ49bCbCGdPCk+Tty3aWp24m5fbpeaQczdeTkNZB47J
lPKh1oUAq80fyLWUQ6ZeqB8WQMs5lx658CA+vmXpU2TvySyWGAiHKmF+wrJ9xVZh
4lvDyjjOsxtUi5N/M+Fvlldgfz0MyC2cMSFZfuWQj64eQio/Rtt98VxDzqh4zUdt
B3nmmqcnHeszc+ryTwSZ2b+BUQjFOtE2vI6sNMzMdvIslkffrs5JMfoHIzpJzroh
XIz/6kzEHm/WOPoloN2rOR7/F89fT/oeeySsXuktH7Dj3R6EAAYRu/BQsNVikhVV
RDTh6U26aPyQIPGdOQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:22 2026 by rpki-client