Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: 4ihYvco4rl4tk6ieWQK13HuONwjGfVBrVarc+RApNIA=
Subject key identifier: 36:90:18:4E:AC:15:AE:B9:0D:1E:B7:1E:44:CC:7D:C3:73:84:9B:40
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019D9962C2638BD759123506FCA3F59C4D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0A0F
Signing time: Fri 17 Apr 2026 03:01:19 +0000
Manifest this update: Fri 17 Apr 2026 03:01:19 +0000
Manifest next update: Sat 18 Apr 2026 03:01:19 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: ViguIrpLZ05w14302SiWWtPEfDfWHQfcBY6JV2u9afc=)
2: EZY7A-eju651goeVkZLLp1VSmig.roa (hash: aCnJkcFWyIJao1foOWzQ1b4E1esuGzdYX4+9n2A6cdM=)
3: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (hash: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c2:63:8b:d7:59:12:35:06:fc:a3:f5:9c:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Apr 17 03:01:19 2026 GMT
Not After : Apr 18 03:01:19 2026 GMT
Subject: CN=3690184eac15aeb90d1eb71e44cc7dc373849b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:24:48:40:ee:f4:63:ce:ab:42:96:2e:4a:f2:
6b:40:87:57:c3:40:3f:02:08:9a:02:e2:f8:e2:71:
7d:b6:d6:1f:8d:f8:d5:bd:1e:55:97:08:fc:6b:30:
69:8f:ae:49:9b:86:79:48:74:59:18:20:f3:3b:4c:
c6:d8:63:f5:e3:79:2e:a8:dc:c9:7d:1c:53:3b:35:
6c:ff:ee:f0:fc:fd:00:41:2f:92:52:8a:6d:95:4f:
08:a5:aa:9e:b5:32:25:8d:c7:f8:a8:6c:ec:cb:a0:
17:c5:ca:2a:01:ad:3c:5b:e1:15:5f:e4:71:b1:cf:
2d:48:6d:70:fb:2f:8d:5a:7b:76:89:95:65:ae:10:
dd:5e:18:c9:b2:bc:cd:b6:76:27:0e:c8:a5:60:4c:
f9:14:10:86:46:b7:fb:db:20:97:1c:e1:5d:c6:b3:
28:ab:7f:0d:d7:5e:b5:e0:31:8f:39:21:55:fb:25:
69:8b:2f:54:51:2d:2d:5b:4b:28:c9:8f:28:0d:58:
6f:50:36:cb:f6:1a:af:a2:3c:f0:86:10:14:b8:70:
30:1b:6c:09:90:ac:25:1d:7f:0e:fd:2e:cf:62:52:
ef:11:8a:8a:5d:6f:3a:d0:54:c2:fa:c6:90:02:f2:
41:1f:2b:98:2b:92:48:af:ef:79:77:43:92:36:a7:
3c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:90:18:4E:AC:15:AE:B9:0D:1E:B7:1E:44:CC:7D:C3:73:84:9B:40
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3b:73:ae:96:1b:6f:72:bb:07:1b:ed:39:fc:c5:02:3a:48:
42:ad:43:f9:95:c2:5d:b1:2c:ec:d6:8a:83:6d:77:9b:b3:65:
19:c1:6f:cb:e1:11:29:29:e3:5e:bc:e6:e9:7a:19:14:27:4b:
16:1b:3d:79:a0:83:7b:e6:dd:a2:af:4d:62:f3:ef:bc:52:8e:
6e:25:a7:0e:45:e2:de:01:99:05:b6:4d:4e:9c:cb:b3:de:55:
b6:ec:ed:bd:6a:a4:dd:4a:1e:5d:19:2b:04:b5:45:51:0a:6f:
21:2e:68:97:87:97:70:93:d5:66:d7:dc:d2:21:31:78:bc:78:
5b:df:1a:7b:e6:be:e6:d1:7b:d6:71:54:f5:57:72:ab:a0:43:
09:75:f8:ac:53:43:df:95:88:af:e3:31:f5:70:fa:52:63:0b:
cc:ca:5e:ba:e5:97:c3:47:7d:7a:34:ab:54:bc:34:c3:92:70:
47:be:ef:71:7a:4e:3b:67:96:05:7a:fa:50:31:93:c0:f2:ff:
d0:6b:e6:75:36:8a:60:a3:5c:32:f2:3a:05:09:12:7e:fd:9c:
d3:d4:09:3e:1a:95:7c:45:95:45:af:c5:b6:ca:41:fa:23:b3:
38:47:68:f7:a2:ed:74:3b:a7:69:0e:1c:0b:5d:9d:94:fd:49:
e9:6c:f4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:46 2026 by rpki-client