Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: RPtHLGGAZvBwK5P5GEPnXv0MyBinuTbmb1Iav9Qs81w=
Subject key identifier: 3E:5E:6E:10:DC:79:15:35:1A:57:55:1A:50:23:D5:2F:17:31:B9:98
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 019D9A075BA8C0DADFF4BE3FE2DAD3176E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 0878
Signing time: Fri 17 Apr 2026 06:01:06 +0000
Manifest this update: Fri 17 Apr 2026 06:01:06 +0000
Manifest next update: Sat 18 Apr 2026 06:01:06 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: AkDgRT4o1SSTUlTb6jSRxLdQpiqtIghg8E4gojcAhQg=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5b:a8:c0:da:df:f4:be:3f:e2:da:d3:17:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Apr 17 06:01:06 2026 GMT
Not After : Apr 18 06:01:06 2026 GMT
Subject: CN=3e5e6e10dc7915351a57551a5023d52f1731b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:c8:1c:aa:ae:51:b7:e9:71:95:23:51:92:
f0:85:de:fc:40:28:a8:69:47:ad:d1:db:c0:2b:84:
e9:09:fa:72:7e:af:74:8c:ed:9f:a3:dd:96:2e:24:
c1:a7:85:99:2e:0f:ab:1b:0a:9c:e4:85:10:75:6a:
ff:23:8e:8f:e1:a8:d6:7e:81:fe:4e:87:8b:98:be:
c6:10:5d:9c:fd:96:eb:8e:c0:d2:0f:15:9a:c0:31:
86:92:f2:97:7b:c3:99:d5:ac:89:ed:2f:0f:46:1e:
33:d4:3d:bf:d9:8f:4b:50:d9:98:5b:f0:f2:85:aa:
61:36:f9:fb:8c:06:b3:f0:84:52:30:34:8c:83:03:
54:e7:04:2b:d8:71:90:81:11:d9:bb:10:aa:9b:97:
69:80:b2:90:a7:f5:23:ae:db:03:66:98:90:29:0e:
5d:5f:0c:4d:d4:67:4b:1f:8a:93:f1:4f:1d:86:38:
6e:60:f1:b9:b0:22:da:18:d5:9f:91:67:30:3a:eb:
e8:03:e8:6c:cc:e1:ea:86:0f:aa:c8:72:34:cf:88:
31:6c:37:d7:34:ce:33:2b:d6:3c:e1:34:43:0b:a3:
9a:78:c0:4a:ec:9a:3d:dd:60:ef:81:76:9c:8b:c0:
52:8e:08:e9:d6:55:d0:a2:bc:31:08:9f:b5:b1:46:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5E:6E:10:DC:79:15:35:1A:57:55:1A:50:23:D5:2F:17:31:B9:98
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:48:30:4c:02:5b:6f:f4:72:76:f4:e4:39:26:48:f5:45:d2:
a5:fa:68:ff:ae:9f:f1:66:b5:c2:5e:13:5f:ef:b9:06:fd:cd:
45:87:69:c5:ce:7d:50:65:39:3e:e8:19:13:ca:34:2d:8b:eb:
75:34:01:38:5e:cf:29:d8:e5:ee:87:6f:51:f1:9b:4b:d0:e7:
34:ad:e0:85:85:9b:d0:64:a5:ba:34:18:fd:c5:f2:09:04:0e:
bd:d8:58:09:35:c7:62:92:05:d8:79:bd:bd:df:56:ff:43:49:
2a:bf:54:d2:c4:48:e8:ee:80:ff:fa:a3:aa:64:cf:e0:0d:b6:
5e:dc:dc:9c:4e:50:17:99:3e:e8:5f:e3:25:29:ae:74:f0:c7:
98:04:a2:56:2f:96:d7:e1:29:b3:2f:b4:0e:ef:22:a7:1b:3a:
a3:e1:6f:f4:d2:e4:1e:08:c4:e4:3a:3d:c0:1e:78:d7:6c:e0:
31:05:7f:55:b6:28:29:33:7f:bd:ca:65:ab:e9:a7:c3:bf:8b:
f8:e1:28:f7:f7:bf:26:06:08:3e:2b:fe:7b:49:7f:41:a6:d8:
38:30:ed:2e:05:d4:81:18:8b:01:e7:a9:7c:37:df:27:47:59:
3f:85:f6:12:ad:05:31:24:1c:4d:70:74:42:dd:da:23:90:c8:
d8:c3:2e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:01:29 2026 by rpki-client