Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: Q7UGd2e5kLIHgRw87BkiBkmHKmq7quRdhJZpznuAQq8=
Subject key identifier: EB:2A:A7:97:74:72:A2:DB:F2:93:D7:A4:CE:39:2F:A2:3D:74:C2:5E
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019DA755877221172622FB5B6E877F0E0956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0B17
Signing time: Sun 19 Apr 2026 20:01:33 +0000
Manifest this update: Sun 19 Apr 2026 20:01:33 +0000
Manifest next update: Mon 20 Apr 2026 20:01:33 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: lWG4gqgDvKrRe62YaHMStYwsIU2nrZJdvx+rwI2LN2A=)
2: UnXx8eLA56gttIkRcqf-NuS44F0.roa (hash: fx9HijuBg7jYLyp35kspfL+8ovCgu0OiCG91CbefvX8=)
3: pHCSU3fGUEEiD3DyFHzti8TdYz4.roa (hash: OEwV0ew2FXkqKTy6N71POq3nfDa4IdMnV7dT9eNEoVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:55:87:72:21:17:26:22:fb:5b:6e:87:7f:0e:09:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Apr 19 20:01:33 2026 GMT
Not After : Apr 20 20:01:33 2026 GMT
Subject: CN=eb2aa7977472a2dbf293d7a4ce392fa23d74c25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:d2:ef:92:44:de:ee:8a:5c:8a:f8:e7:02:
dd:5a:4c:88:2c:5d:1d:2f:65:c6:48:39:3b:ad:54:
66:20:d1:af:95:9a:ab:9b:ad:17:9a:51:32:b6:22:
e7:56:21:60:53:ef:3f:55:4d:1d:89:0b:54:62:52:
bd:88:1a:6e:57:5e:9a:dc:f0:49:24:8a:4b:92:33:
a1:eb:6e:59:34:9f:b2:9a:e3:50:4d:6a:3f:46:b0:
b1:47:13:56:ba:2c:83:52:2f:26:c8:19:32:10:83:
3b:65:9f:ff:4d:23:39:8b:ea:72:b3:1f:9d:b0:59:
9d:1a:39:21:a1:88:c7:c4:9d:7f:fd:fe:9f:24:22:
52:9b:c9:2e:1d:6c:f3:40:69:fa:78:ca:cc:db:f1:
7d:e7:17:26:a5:4a:c3:27:01:8b:f9:c2:98:87:d5:
8a:64:25:3e:fc:10:17:6e:de:75:f3:2b:b1:42:cb:
67:f7:72:b5:3f:e3:75:25:b0:fe:d7:57:bd:39:89:
d4:ed:64:01:c3:7a:99:d7:81:fb:c7:85:0b:b9:a3:
5a:a6:05:84:c4:42:7f:46:2e:bd:bb:48:71:05:95:
dc:2b:3d:86:de:79:94:b0:3f:42:43:8d:63:1d:a5:
9f:e1:86:21:76:b0:b9:0f:70:73:bc:ef:a1:a6:d0:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:A7:97:74:72:A2:DB:F2:93:D7:A4:CE:39:2F:A2:3D:74:C2:5E
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e4:33:ef:86:55:b0:21:c6:9c:93:23:2e:d4:19:41:ac:33:
a6:8e:50:ab:b5:3c:e3:6a:63:8b:69:ed:f8:5f:cd:23:0a:09:
92:3f:09:c5:4b:9c:44:2c:d5:db:89:6b:b6:76:77:ac:0e:70:
08:bf:0f:72:1c:e6:6d:47:18:70:fd:fb:57:6e:43:96:26:0d:
83:94:91:c7:ad:fa:f1:d0:cb:e8:8e:da:5f:0f:85:a5:2c:68:
12:25:cb:a5:ea:29:88:65:1d:ea:b5:28:d4:0b:94:1c:da:3b:
f8:19:07:9f:bf:90:0b:94:d3:5e:f7:a9:f6:34:9c:5d:e1:ae:
f8:a6:09:d9:b0:97:b2:9e:75:10:43:e6:c4:29:d0:b7:0c:74:
82:3c:78:bd:7d:35:ed:4e:77:cc:1f:bb:25:98:3c:f2:90:2d:
4d:7f:e3:66:ee:bc:4a:86:32:3d:de:f4:2d:3a:3e:91:08:43:
4f:46:6f:49:e8:47:55:c6:94:ba:2c:c8:ca:11:1b:42:f0:19:
4e:20:4e:02:75:7d:b4:4a:b8:23:94:77:6e:7a:bb:a3:bf:d9:
79:7f:0d:9f:f2:08:1c:92:84:0d:ba:66:f7:53:e8:0d:eb:7f:
10:14:d6:5a:f2:35:d5:9d:45:94:6a:80:46:4d:a0:ae:a3:45:
d8:b7:da:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:58 2026 by rpki-client