Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: n0STtc8Jcg/Hel/wwQAc9oTeQ3wPczOhzfRVcI/OLrc=
Subject key identifier: AC:EA:2C:E4:AF:C2:E8:B0:2D:FA:DF:9F:18:89:00:8F:12:F8:65:5E
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019DA0AECA6C995C0DB7BBBFC2DCB18DF5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 092D
Signing time: Sat 18 Apr 2026 13:01:42 +0000
Manifest this update: Sat 18 Apr 2026 13:01:42 +0000
Manifest next update: Sun 19 Apr 2026 13:01:42 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: Cfdex6lTerNddctxUDT5upEhafeIGWuJxO1gsUePK3s=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:ae:ca:6c:99:5c:0d:b7:bb:bf:c2:dc:b1:8d:f5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Apr 18 13:01:42 2026 GMT
Not After : Apr 19 13:01:42 2026 GMT
Subject: CN=acea2ce4afc2e8b02dfadf9f1889008f12f8655e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:21:c7:f3:78:b8:79:b8:d0:cc:8d:ee:27:8d:
2a:29:e0:11:a0:d3:7c:fe:45:60:14:b2:59:c1:5d:
9d:e2:a1:25:1e:b2:55:de:c3:7a:86:fb:95:3b:86:
64:c3:c1:94:5a:b2:4b:db:4e:1f:c8:3f:9d:9f:89:
0c:8e:3f:89:a8:6f:e5:8b:71:3e:7a:2d:06:db:65:
61:2e:f7:a6:c8:73:0f:5b:ad:86:60:08:57:fe:47:
f1:ef:05:fb:b8:1f:4e:5e:f8:34:2f:c9:a2:6b:c9:
67:16:ab:a0:52:ec:de:a3:8c:67:a9:25:f9:90:32:
16:e2:1c:91:fb:57:89:0f:77:2b:13:c8:18:c2:4f:
e6:ff:be:85:3d:91:cd:f7:4b:2d:9b:ed:2e:eb:fe:
94:1e:fd:fc:f7:b8:52:c0:40:e9:0b:40:94:b9:85:
b9:a2:a4:1f:09:65:39:76:4b:fe:82:b3:26:b2:7d:
48:f6:b6:b8:cf:aa:46:44:77:4c:a1:a7:82:c9:54:
60:31:ee:e9:67:dc:73:4b:dd:05:43:36:f0:11:98:
a6:6c:db:f7:8c:26:9e:b9:7a:02:67:0e:b5:12:ef:
81:81:9e:19:8a:1a:70:37:ac:c2:0e:a8:91:11:ec:
8a:72:76:39:f2:21:f8:fa:3f:1f:e4:3d:1e:f2:64:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EA:2C:E4:AF:C2:E8:B0:2D:FA:DF:9F:18:89:00:8F:12:F8:65:5E
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:43:b4:0e:9a:55:76:9b:0c:e1:36:c0:91:f5:01:09:c8:
7b:ba:67:b8:57:7c:4f:c4:e3:1a:ad:39:1f:01:d8:ab:2b:fc:
5d:96:d8:96:97:3a:af:8b:0b:df:1b:a1:54:16:31:21:2b:d2:
29:1a:13:14:e5:b4:f4:5b:f0:4b:e9:83:2b:91:b0:1d:12:8e:
95:84:28:02:70:23:71:37:39:49:e6:d7:7f:77:6c:24:99:50:
37:86:70:51:e1:2a:b5:e7:8f:a3:1d:cf:cc:ee:14:32:47:9d:
d3:61:74:33:c3:87:5d:22:76:46:e4:74:b6:0d:9e:42:05:96:
0f:fa:7f:2d:59:9a:26:07:90:92:a4:f8:03:79:77:9a:44:62:
52:c4:d9:60:db:a2:e4:0d:46:97:42:e8:53:26:3e:c9:79:dd:
d5:0d:92:86:c6:df:7c:47:b6:da:1f:1b:81:f7:74:bd:f5:b4:
3c:3b:94:3a:70:76:4f:df:8a:78:37:fc:ed:c7:22:21:6f:e5:
2c:5f:db:e9:ae:58:52:d1:29:58:bc:d1:11:a1:1a:25:87:51:
ce:78:af:56:68:b3:10:4c:99:69:4e:09:ef:12:60:73:82:0a:
11:66:88:d5:e1:43:71:a6:25:c6:ae:ff:26:19:fe:4c:86:59:
05:d5:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 19:42:38 2026 by rpki-client