Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: PSK/HhknvTsZ00+olOgc3UYwmIEIXoGrbYs6Y1zSrp8=
Subject key identifier: 10:0F:06:AF:93:3F:59:70:4F:DF:88:6A:73:DF:76:FA:59:34:EC:82
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 019D9A749A0E3ACF1A2CF0A28D2DCFA02A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0D68
Signing time: Fri 17 Apr 2026 08:00:26 +0000
Manifest this update: Fri 17 Apr 2026 08:00:26 +0000
Manifest next update: Sat 18 Apr 2026 08:00:26 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: 9dqA51iBFOAHqRCEuW5PVcMXtFQ8GQLnmalOOaYyadQ=)
2: Cgsxb4qiaxInZIOD52ZW_SBVWn8.roa (hash: AfaNiPsxEDa6BqM9VdWTViXe2dMUmuZ+VOqQLOWjvx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:9a:0e:3a:cf:1a:2c:f0:a2:8d:2d:cf:a0:2a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Apr 17 08:00:26 2026 GMT
Not After : Apr 18 08:00:26 2026 GMT
Subject: CN=100f06af933f59704fdf886a73df76fa5934ec82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:ae:dd:4c:5c:a3:5a:47:cf:b0:56:83:72:
98:42:ac:62:64:57:85:0c:f3:03:9d:8c:f6:93:32:
94:cf:7c:1b:7c:9d:00:a5:89:9b:54:f8:53:23:54:
a1:28:82:77:f0:f5:f2:a2:81:99:33:51:2c:32:e8:
0d:85:95:ec:2c:fb:40:72:5f:e5:7b:45:01:45:5e:
c2:0e:9f:df:81:ef:8c:39:43:78:d1:b9:d0:fa:90:
12:dd:08:4e:52:66:68:29:32:62:de:77:27:0c:5e:
07:69:cf:20:67:28:9e:d8:a8:60:b0:4d:68:f0:de:
16:d5:db:95:1f:54:00:66:fc:11:8a:e7:96:27:44:
fa:7f:38:e8:23:11:47:bd:5a:c1:e3:6e:65:5b:e4:
be:f5:2f:e6:12:ff:a3:bc:69:98:eb:60:cd:6d:a2:
5c:bd:a3:6a:17:b1:f4:3c:06:99:d1:97:29:86:69:
f1:5d:68:11:4a:53:5d:ba:00:45:ff:93:a6:91:89:
3a:b6:95:0e:fa:47:bf:d9:46:4c:6e:87:4e:14:ad:
ff:d5:3d:a0:20:8c:35:4d:6f:ed:20:30:62:c5:11:
59:85:29:8b:d4:c3:33:8e:ca:75:e4:36:17:e1:ca:
ba:6d:e4:ce:4b:f6:1e:30:8a:7e:e6:e2:13:69:11:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:06:AF:93:3F:59:70:4F:DF:88:6A:73:DF:76:FA:59:34:EC:82
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3c:03:1b:56:f7:0c:72:0e:f3:78:f3:4b:bc:72:6b:96:0c:
f4:25:3b:80:c7:8e:cb:0e:0b:c1:c5:04:78:25:30:97:69:5f:
65:98:b5:62:89:be:b1:fa:1f:6a:0f:44:ba:9e:63:40:6b:b5:
69:93:d5:fd:d1:5b:b6:5d:92:da:6b:5b:e9:d8:22:16:28:2b:
54:0e:ec:45:2a:be:1c:2a:79:fb:a9:f8:ef:23:e8:4c:50:94:
41:a3:95:66:88:1e:1f:69:d0:e4:cf:d6:87:e4:70:e7:a3:69:
85:24:cb:b0:b5:ba:2b:d7:40:d5:28:51:7b:59:69:69:40:f9:
80:e4:6d:ed:09:bf:37:a7:75:8c:49:fc:2e:ea:71:32:96:48:
51:b0:4f:62:4d:79:d2:7e:c8:17:6f:8e:39:1d:15:7a:7c:b9:
48:cb:5e:7f:60:1e:1a:22:fd:f9:b8:d7:dc:26:ff:ae:97:7c:
dc:c7:ea:bd:72:7e:ec:e3:fe:73:52:50:ca:c1:0e:a5:ad:74:
c2:56:7a:df:21:8f:27:60:e5:f4:56:34:7e:36:f1:a3:1a:21:
a5:fd:aa:eb:10:a4:1c:d1:be:16:e4:b0:ac:41:f8:3f:b9:b4:
bb:28:56:bf:cd:85:40:5e:d0:9f:86:f7:93:69:53:a8:f5:c3:
b3:90:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:03 2026 by rpki-client