Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: 1hGqhHYMXF17acmQ/NkZ+h+Fi1KQ05TsJpe3q083/jo=
Subject key identifier: 7B:59:FC:51:5B:63:D2:A8:9D:B7:7B:D7:34:AE:C5:46:D4:4E:39:C4
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019DD208362FC767285D2FCF85394B65F303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: 02EA
Signing time: Tue 28 Apr 2026 03:00:46 +0000
Manifest this update: Tue 28 Apr 2026 03:00:46 +0000
Manifest next update: Wed 29 Apr 2026 03:00:46 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: YtchQKF7JoM1ylmPlgIdZ7npoV8deDbiDyzi1Kvhu6Y=)
2: _5wD3GhDQ1YTzFTjqBTWs_Q3la0.roa (hash: wo2o5ggTBU2w++bpEVrPqvzmJ1RgxdR3NpxYQHN0044=)
3: k3iM252MCayhLR_PBb595fv_baM.roa (hash: EbtrM8zDUBSt9GwmEMPTeNJfc3L8jh3H2e88Yy2j2HI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:08:36:2f:c7:67:28:5d:2f:cf:85:39:4b:65:f3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Apr 28 03:00:46 2026 GMT
Not After : Apr 29 03:00:46 2026 GMT
Subject: CN=7b59fc515b63d2a89db77bd734aec546d44e39c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:f2:4a:70:09:96:47:bc:3e:17:77:d8:fa:
51:2f:bb:68:76:ff:c7:49:f1:b9:3c:90:8b:97:3d:
2a:b8:01:27:9d:97:55:c4:83:f1:2b:6f:f5:51:e1:
d6:6f:79:df:b7:de:e6:d4:6b:5c:6e:7c:a1:bb:87:
4b:f8:06:8c:6d:d7:6e:f9:7d:06:c1:ef:15:ce:9c:
e9:a8:b3:37:88:dd:b3:09:92:ae:a0:d9:57:fa:65:
b0:2c:63:4d:4e:94:8c:88:52:06:81:e0:07:1d:38:
13:30:b1:d3:6f:c1:2e:c1:5b:45:2b:ed:85:8a:5d:
2c:0b:77:2c:f3:71:f7:3b:f0:b1:3a:42:25:a0:1f:
76:82:ce:05:07:12:94:25:80:26:06:f6:5c:b9:de:
bb:1b:fd:a8:86:e9:77:f6:b2:72:f9:3d:c8:25:03:
c0:fc:1b:2f:73:64:3d:04:e0:3c:6a:b5:3d:e0:63:
50:c1:88:4e:ad:97:02:ce:fb:96:49:51:98:3c:9e:
b0:0f:68:3a:43:bb:76:2e:f9:b5:7b:97:08:fb:b0:
05:4b:e7:fd:c2:d8:dd:fb:bd:1f:d1:5c:e5:18:99:
e3:2c:65:cc:e1:fe:b1:56:d1:dc:b9:3d:c5:11:38:
2b:00:dc:95:cb:c5:be:41:bf:88:7d:a5:93:86:7a:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:59:FC:51:5B:63:D2:A8:9D:B7:7B:D7:34:AE:C5:46:D4:4E:39:C4
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:06:45:86:87:58:66:d3:06:c8:bc:c4:55:3e:61:3c:ca:75:
45:43:17:9d:6d:52:64:fc:f5:d3:a4:b5:d2:b7:aa:0d:d5:4d:
90:4c:b9:c4:d3:79:f7:e9:e1:c4:73:0e:ae:15:54:0c:a1:28:
6f:dc:9c:4e:e2:5e:a4:e4:d3:8c:66:52:29:b3:b5:3f:2b:b1:
54:33:65:6d:f5:d0:39:e1:f6:0b:b4:27:b7:99:06:07:88:22:
60:12:50:e1:2f:cb:5a:0c:2a:ab:98:ca:6f:35:79:ae:18:43:
c8:0f:8a:e8:d3:22:6d:0d:2f:35:12:7b:2d:47:b6:ac:0b:b3:
32:db:a8:96:89:7b:9c:94:33:7b:51:c2:f8:a8:60:74:27:70:
ee:e4:e5:26:f8:13:51:5e:90:17:3a:09:e7:cf:5d:ce:d4:97:
04:81:51:7a:ce:f2:bf:93:37:15:ec:1b:bd:b7:9e:c7:06:69:
54:46:8c:a4:dc:4a:4c:67:92:7a:90:9b:87:c7:4d:8f:0e:95:
12:4d:6b:5f:b4:25:b5:72:ad:3c:d9:d2:7d:7a:a2:99:98:61:
51:94:d1:8b:9d:78:eb:f6:8a:d3:84:ce:b1:5c:93:25:fa:78:
2f:c3:03:4f:e2:3d:11:a9:e7:b0:84:18:e6:db:0e:15:78:3f:
c7:58:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 06:07:07 2026 by rpki-client