Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File: 1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier: gr04hT5ogpftK0idJ3+zPy3JO5pPWt5aKlw8zwj1r8A=
Subject key identifier: F2:62:7B:BE:A7:D7:8D:18:2E:AC:54:61:7E:4C:C0:A1:ED:1C:53:4F
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 019DB16B0E939F6AD2B0A30C9B0C45BA1315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number: 1561
Signing time: Tue 21 Apr 2026 19:01:16 +0000
Manifest this update: Tue 21 Apr 2026 19:01:16 +0000
Manifest next update: Wed 22 Apr 2026 19:01:16 +0000
Files and hashes: 1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: KEua6CCpO1tOsjA8fxUj+8Y9Q8zLCTjDKl3wY9Fc3TE=)
2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6b:0e:93:9f:6a:d2:b0:a3:0c:9b:0c:45:ba:13:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Apr 21 19:01:16 2026 GMT
Not After : Apr 22 19:01:16 2026 GMT
Subject: CN=f2627bbea7d78d182eac54617e4cc0a1ed1c534f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:99:f9:ac:c2:6d:c8:fb:48:d4:15:95:80:
4b:86:e2:e2:8b:6b:39:42:7a:f3:92:bb:03:4a:c8:
c8:75:14:39:e4:cb:0a:22:54:bc:5e:03:25:4a:37:
c5:7b:78:dc:e2:d4:4c:16:79:3a:38:51:5b:4d:c4:
f9:f2:34:8e:b9:89:ef:df:c0:4b:c7:b5:47:e6:1f:
29:3d:3d:12:02:66:12:f3:2a:df:c3:74:0b:cb:bc:
5c:34:90:91:17:58:26:14:cd:66:95:1a:4a:7d:5f:
5d:46:cc:11:c4:72:50:22:79:d2:30:23:a5:02:63:
54:46:de:a6:88:01:ec:97:30:00:31:d8:44:ca:6c:
52:81:87:0e:fb:a7:2b:0e:d3:3e:de:0c:82:b0:cf:
f4:92:4e:5c:06:98:23:cb:1c:8a:18:75:2c:fb:44:
bf:44:55:5d:8d:1c:55:23:d5:13:28:fd:ab:e4:f4:
eb:9c:e4:3b:d4:a6:b3:63:55:5b:89:17:93:1e:a7:
6f:dc:bd:11:68:8f:e7:11:b4:b4:75:b7:79:1b:c7:
d1:70:3a:2d:2b:b4:7e:b0:88:6d:ac:42:54:c1:d5:
e9:e6:23:a4:5c:d8:84:bc:1e:e1:aa:5f:c0:5d:dc:
4e:15:31:63:81:6d:72:6e:03:ce:48:86:bc:22:20:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:62:7B:BE:A7:D7:8D:18:2E:AC:54:61:7E:4C:C0:A1:ED:1C:53:4F
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f5:ef:f3:04:46:09:41:f8:a2:ec:5e:99:57:eb:d2:06:cc:
95:01:c4:78:56:24:1c:48:2e:ca:6b:28:ba:35:b0:ff:7b:f9:
03:fe:4f:5b:ea:fe:42:ce:41:6c:4e:9e:71:68:39:16:50:bc:
a8:f5:b0:7a:7e:79:a6:b7:1d:cd:6a:43:ca:e2:a6:d4:0d:5d:
2b:c2:c8:1f:0c:82:35:4a:22:c6:5f:2b:bf:8c:b6:86:ef:e5:
af:d8:ab:f3:6a:18:01:42:15:24:0b:85:a0:10:ab:22:42:d5:
17:e9:dc:71:ce:4c:db:18:b5:2f:c8:90:bb:03:26:43:21:66:
64:d9:c1:8e:20:f8:fd:37:b5:c2:35:e8:2f:bb:56:6c:d9:95:
fd:01:54:d2:9c:b7:a9:99:09:f3:a4:fe:60:f0:37:7d:39:8f:
34:9f:79:e2:8c:77:1b:c8:51:93:bb:7e:4f:66:9a:e1:b5:c0:
4b:20:dc:d3:7e:97:85:a1:d9:ac:1d:4b:f9:cc:e8:98:7c:25:
06:8f:62:10:22:61:93:fd:7b:ba:65:16:88:4c:cd:36:3d:2b:
3a:a3:3b:28:25:75:c8:21:21:50:00:89:00:64:ce:e1:86:ec:
02:e3:e6:50:66:ee:af:17:6f:2c:90:de:46:6a:3f:5e:28:45:
ac:0d:8a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:13:48 2026 by rpki-client