Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: 1Br8H+QdsE7D6p62XHpTk5m2C4rQjbpBWaE6cHPac34=
Subject key identifier: A7:78:59:D6:B5:FE:0B:FD:D7:BC:FE:F6:84:A4:E6:20:69:D8:F9:B1
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019DCB616013AF3B135EFB60445A170E92C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 0B24
Signing time: Sun 26 Apr 2026 20:00:49 +0000
Manifest this update: Sun 26 Apr 2026 20:00:49 +0000
Manifest next update: Mon 27 Apr 2026 20:00:49 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: thoAaoaDEl9EQY3HLrAn5jg6f4ln7sF8sMrPVFvU0sM=)
2: Rb6ICVosTC_zaZ16edh9MPPlC-4.roa (hash: f7bv124K8RG4yyZpz3BCEJydd5vMDmuet5IH5Sqpc1Q=)
3: X9Dk1AunWGE1Dosy-zP1Hnz0r7o.roa (hash: /pQF82MMJDZaxsI41JYaoLCQk3D/NV9NF4tHkKVR/m4=)
4: oTAnj8V3sccufxLPJpZJ2av8j-A.roa (hash: +rK4QlG7dHwB2u8oBpVxeumts0TuXiCtUppM0dEFMEE=)
5: y81jmZh2IG1vc4T2rX8QCQEOL9E.roa (hash: Y1jjyD/MrRS3ujVJRgR28FUQy55OTENwus5vMZGjmSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:61:60:13:af:3b:13:5e:fb:60:44:5a:17:0e:92:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Apr 26 20:00:49 2026 GMT
Not After : Apr 27 20:00:49 2026 GMT
Subject: CN=a77859d6b5fe0bfdd7bcfef684a4e62069d8f9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:aa:ea:be:9e:59:ea:93:b5:73:a3:ee:33:
25:e2:8c:94:9a:ee:2e:ae:f0:9f:9a:5d:14:0b:6d:
12:d0:92:80:43:62:95:12:56:05:fb:4a:65:1c:a5:
77:66:34:b4:6f:b8:e1:66:95:d0:6e:bc:2b:03:9f:
7a:3a:a9:9a:4e:4b:b0:cf:37:11:2d:67:b1:ca:fc:
9d:7c:2e:85:63:7f:ec:d4:85:35:a8:95:de:de:e8:
b0:43:00:75:d5:c0:b7:ec:ee:1c:d1:80:a6:95:47:
06:5e:d9:48:40:cd:92:58:3e:11:2c:9a:49:6a:19:
5c:87:fe:81:9b:d1:03:93:56:16:03:a8:2b:54:a2:
63:69:7e:bd:b6:d3:94:27:ee:0b:d7:02:45:f2:ee:
de:13:ff:47:34:39:7e:5a:fe:47:7e:b6:e2:95:a9:
57:41:d3:fb:e5:87:e8:79:69:f2:9c:0d:2a:ad:1c:
8a:dd:8a:5f:8c:ea:25:85:a3:0c:2c:1c:f5:df:e9:
50:71:21:98:92:8b:9b:68:34:8e:7c:79:c0:8a:8d:
02:e1:02:f0:b1:16:f8:f4:0a:5c:2f:17:a9:9c:cb:
43:3a:74:0b:c9:53:cd:f6:45:53:cb:dd:a2:e9:73:
ea:43:cd:7d:88:d9:6e:74:0d:00:95:0f:a6:81:3c:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:78:59:D6:B5:FE:0B:FD:D7:BC:FE:F6:84:A4:E6:20:69:D8:F9:B1
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:85:46:3e:ee:2c:e3:dc:15:eb:08:f2:2e:47:9d:d3:65:dd:
54:0d:a1:5a:84:36:0e:0d:c0:f4:a0:75:f1:91:f1:28:98:82:
f0:85:6f:78:16:58:af:54:e8:ad:c8:83:dc:35:6a:00:a9:53:
7e:a0:26:dc:f3:97:b5:67:32:56:e7:4b:3e:e9:0d:b1:16:2d:
35:0c:e5:27:88:9b:47:37:59:82:18:68:03:de:ff:83:b8:ec:
54:75:e7:ca:1d:59:2b:f4:eb:68:64:52:56:14:ec:9a:c9:2a:
b5:3a:06:db:3b:a2:9e:07:93:67:8a:5d:f0:79:1a:0b:1f:22:
ea:25:f8:df:bb:b8:c8:ab:34:71:73:2a:fb:cc:60:87:fe:86:
32:c4:ac:c3:fc:c6:0a:a4:3b:c3:58:f3:9d:b6:f3:76:75:06:
8a:ba:52:36:86:01:35:b9:4d:fe:0c:0c:bd:cc:6f:0d:a4:fe:
e3:fd:bf:35:e8:9c:08:e5:56:59:f2:34:43:81:95:3e:ad:24:
04:6e:52:ee:e1:37:c3:a1:56:7c:c9:d6:ee:2b:fb:3d:4c:a8:
b6:45:3d:cf:ce:4d:67:be:2e:7e:0d:e7:c9:46:31:06:2f:72:
9f:8a:92:3b:f4:76:1f:47:3f:5a:4e:c4:b5:a2:ca:b5:1e:c7:
b9:15:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:11:23 2026 by rpki-client