Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: cvoYQU1/6d1E+fqkeiJNok8vcxCI2CkGkTkHGFy/iM4=
Subject key identifier: 11:AB:AB:B4:22:8B:9E:68:98:56:45:72:9B:D2:14:5E:37:06:37:D5
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 019D99625FA5981046EFB130990A48700403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 10A3
Signing time: Fri 17 Apr 2026 03:00:54 +0000
Manifest this update: Fri 17 Apr 2026 03:00:54 +0000
Manifest next update: Sat 18 Apr 2026 03:00:54 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: vac257Oe3Iu6oxFKIrnAgGu6AbPmWiulLjKBkkikkds=)
2: 6Pc_yuf6U7fifvpMORJRJWUOec0.roa (hash: YkCtWd8TqjpXFSR0IlaGJlvhxUpQhvA2ISYdw8xN7rc=)
3: SiiyX2N_VudkW_kgHjDWb96Midc.roa (hash: VBfDCyR0GjOaXAtcZCDfH6SSSVgHl3aLvPMUM1TIr7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5f:a5:98:10:46:ef:b1:30:99:0a:48:70:04:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Apr 17 03:00:54 2026 GMT
Not After : Apr 18 03:00:54 2026 GMT
Subject: CN=11ababb4228b9e68985645729bd2145e370637d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:1b:0c:cf:15:1c:0d:80:a2:8b:df:c2:47:
43:c4:c9:cc:78:a0:5c:8d:88:f8:25:76:e6:5b:c6:
66:14:04:3a:4d:84:66:9f:88:20:4e:6a:19:83:f1:
02:00:5f:15:12:66:33:ff:78:50:a2:f0:df:ee:20:
e5:91:24:9c:cd:5c:03:97:d3:2f:e6:b1:a4:46:cf:
d0:d1:db:40:23:35:40:ca:91:c0:a1:00:8e:5d:b8:
26:e3:a6:08:da:88:ea:ac:85:80:89:7c:6f:bd:f1:
d9:29:34:49:9e:e0:c6:25:4e:7f:90:58:0f:5f:0b:
ad:2c:c2:1e:a8:d8:e8:65:17:6e:86:78:e4:e0:9c:
6c:57:46:bd:24:73:8f:c1:e5:8f:1d:08:5b:46:5b:
88:2a:8d:d3:13:fb:a7:35:28:28:1d:8f:0e:21:d3:
09:ac:cf:62:50:92:cd:4c:12:2e:9c:e6:ed:33:4b:
86:d7:fa:1a:58:6f:04:d0:f1:a2:3d:d6:6c:de:c9:
3c:9e:7d:9b:6e:52:50:6b:fb:12:0f:d0:3d:05:69:
54:76:84:5a:19:16:f8:e3:70:b4:78:c1:37:bf:13:
80:40:b4:b8:b4:1f:9e:ae:62:22:87:09:90:ab:45:
13:b7:ed:d6:08:59:a3:f5:65:b3:c5:a1:a9:78:83:
97:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AB:AB:B4:22:8B:9E:68:98:56:45:72:9B:D2:14:5E:37:06:37:D5
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:ab:b8:38:f0:53:ca:5b:50:8e:5a:d5:05:8c:a0:24:9e:
75:27:f0:ec:12:5d:e0:43:15:21:32:5b:41:82:38:68:0c:b2:
47:7a:89:1b:ca:3b:54:04:2a:9c:96:43:9f:04:6d:86:41:46:
6a:0d:d7:b6:aa:9a:d3:4d:89:f2:9e:51:6d:29:a6:2f:32:01:
29:95:57:8b:b4:7f:91:ac:41:f2:db:0d:e8:a8:57:6d:80:59:
00:70:bc:ed:c1:3c:e2:43:de:86:5e:14:f1:4c:13:ba:01:00:
2f:02:1c:1e:1c:09:9c:a5:13:a2:fe:38:a1:56:67:7d:d3:b4:
b5:b6:b2:09:63:db:c2:52:8e:ed:c9:cd:3a:38:78:88:db:9a:
7c:3d:80:7d:9b:82:18:75:6d:c6:a7:ec:1a:f6:0b:f4:f3:42:
88:34:18:c8:aa:22:38:75:57:4f:34:b6:60:2f:97:35:8e:29:
27:95:4a:7e:18:57:c2:70:91:38:e1:14:6f:4a:9a:35:6e:f3:
f7:cb:c2:1b:aa:4c:56:98:9b:49:59:f4:e2:3f:7c:c2:0b:8d:
78:ec:37:a4:41:2e:db:c2:42:7d:f3:01:c8:90:69:4b:f2:b3:
7e:28:c8:6a:bd:90:87:67:a2:6b:62:de:21:b9:a3:90:a6:0c:
01:55:0c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:38:52 2026 by rpki-client