Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: ojRHBavyu/G7k/cJXgp5L45ATrnC+BPcovJiN5MRyw8=
Subject key identifier: 58:A8:88:CE:F9:FD:67:4C:9E:84:EC:94:F4:B2:40:AA:0A:D2:C7:8D
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019DB0FC8BD03F291BF1ABABABC98B88D1F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 1274
Signing time: Tue 21 Apr 2026 17:00:34 +0000
Manifest this update: Tue 21 Apr 2026 17:00:34 +0000
Manifest next update: Wed 22 Apr 2026 17:00:34 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: Md3uK5tlsP6tyZRUpXSVpvjR6YBo9ObofXZdgDAnL5Y=)
2: QbADnR-7JONR9psZmp25EkZo4_M.roa (hash: 8N891Zzq6DPXhsamgFNwmwRuiKpJQ8ss9kc+k3yiq9U=)
3: kneTFHssdpRkfp917HvR9pp0knM.roa (hash: Q0Z0lTZO2s3Ki+igcl/rjlfo3o507lYeXHkCl1jp7DE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:fc:8b:d0:3f:29:1b:f1:ab:ab:ab:c9:8b:88:d1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Apr 21 17:00:34 2026 GMT
Not After : Apr 22 17:00:34 2026 GMT
Subject: CN=58a888cef9fd674c9e84ec94f4b240aa0ad2c78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:35:02:8d:40:52:4a:5f:27:5a:27:73:2c:
48:fb:d7:19:71:4d:c0:74:49:fc:b5:f4:13:cd:3f:
c7:31:39:04:86:65:fe:1d:69:e0:7c:93:fc:38:bf:
b4:87:ff:bf:85:46:23:7e:07:f8:7a:ac:a1:45:2e:
28:dc:bc:c3:a5:84:86:f9:cc:a1:ed:e1:b2:ac:62:
92:a8:13:5a:07:98:4f:9e:90:a7:dc:db:81:9f:20:
fd:09:a9:84:55:80:3d:9f:68:c3:e5:8d:4f:73:18:
b3:a4:a4:76:36:8f:fd:4a:aa:87:2a:00:1c:e9:b9:
33:32:c7:73:ac:7d:c3:b4:f4:38:15:41:78:b1:d0:
2e:8a:12:f6:e6:b3:66:0a:54:95:34:11:c5:c0:9e:
2d:bd:8e:ba:78:03:ba:45:f7:52:d8:d5:3c:af:34:
89:6b:e9:af:34:19:f0:f3:86:f4:aa:c2:2c:7a:28:
fd:b7:58:6f:7c:d3:0a:65:1b:d2:5f:23:4f:0f:c3:
1f:04:3e:b2:29:04:5d:02:01:78:88:04:a7:f0:cd:
6a:e7:cb:28:98:3c:2f:30:8b:c4:5c:c3:ef:06:fa:
e0:3b:cc:2d:7f:9b:62:d6:83:28:6a:a7:3f:8a:7a:
b4:3b:ff:07:4b:8e:79:02:da:6c:8c:5d:3b:85:ff:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A8:88:CE:F9:FD:67:4C:9E:84:EC:94:F4:B2:40:AA:0A:D2:C7:8D
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:03:0a:0a:c5:68:c9:26:34:6e:93:39:25:7f:a6:bd:20:71:
34:a4:36:5b:24:cd:6f:e8:bd:97:ce:03:07:a5:24:74:b2:66:
77:96:05:36:af:3a:52:4a:c1:a0:98:75:08:5d:5a:37:17:cb:
ff:a4:85:ba:c6:99:7c:c7:da:85:1e:f5:fd:fb:0e:07:39:97:
f2:1e:a5:14:84:77:a8:ed:f6:4a:4d:bf:0c:1e:32:15:7c:e0:
ed:c8:a9:63:99:42:8e:9e:ee:30:61:ed:70:ad:e2:0e:51:25:
dd:a5:98:76:06:b7:26:5c:0e:ca:f8:bf:58:d9:9e:05:37:a9:
ab:b6:2c:c6:d9:19:8d:31:48:39:88:0f:c5:7c:84:19:05:fc:
db:8d:54:43:d8:a4:29:ed:0a:26:50:1f:35:b5:b0:2f:a1:92:
b8:7e:89:f5:df:4c:f8:d8:31:3e:98:79:b2:9c:ab:05:29:4c:
2c:b5:ec:13:7b:f0:4a:04:d4:04:14:97:4d:7b:04:ce:e2:51:
a1:73:2d:9a:1b:d1:26:1b:90:d0:48:8e:1c:c3:4f:3c:c8:17:
1c:62:13:de:f3:31:b3:c7:d6:5f:8f:82:02:d3:63:39:3d:1f:
31:0c:4c:1a:ad:dd:54:33:a6:62:9b:89:3c:ab:1b:69:76:81:
c6:8c:58:99
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2w/IvQPykb8aurq8mLiNHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzBkZTg0MGZkNmJmNGIwYWZkMTI3NGU0NGVmZDFiODY2
NTc2MmMwHhcNMjYwNDIxMTcwMDM0WhcNMjYwNDIyMTcwMDM0WjAzMTEwLwYDVQQD
Eyg1OGE4ODhjZWY5ZmQ2NzRjOWU4NGVjOTRmNGIyNDBhYTBhZDJjNzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDI1Ao1AUkpfJ1oncyxI+9cZcU3A
dEn8tfQTzT/HMTkEhmX+HWngfJP8OL+0h/+/hUYjfgf4eqyhRS4o3LzDpYSG+cyh
7eGyrGKSqBNaB5hPnpCn3NuBnyD9CamEVYA9n2jD5Y1PcxizpKR2No/9SqqHKgAc
6bkzMsdzrH3DtPQ4FUF4sdAuihL25rNmClSVNBHFwJ4tvY66eAO6RfdS2NU8rzSJ
a+mvNBnw84b0qsIseij9t1hvfNMKZRvSXyNPD8MfBD6yKQRdAgF4iASn8M1q58so
mDwvMIvEXMPvBvrgO8wtf5ti1oMoaqc/inq0O/8HS455AtpsjF07hf/bBQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFioiM75/WdMnoTslPSyQKoK0seNMB8GA1UdIwQY
MBaAFPtw3oQP1r9LCv0SdORO/RuGZXYsMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zRGVoQV9XdjBzS19SSjA1RTc5RzRabGRpdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvOWEzZWFjLWY4NjItNDc4OS1hYzIx
LWQ5NDQ0YTNkMGNlMC8xLzEtM0RlaEFfV3Ywc0tfUkowNUU3OUc0WmxkaXcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRhLzlhM2VhYy1mODYyLTQ3ODktYWMyMS1kOTQ0NGEzZDBj
ZTAvMS8xLTNEZWhBX1d2MHNLX1JKMDVFNzlHNFpsZGl3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwMK
CsVoySY0bpM5JX+mvSBxNKQ2WyTNb+i9l84DB6UkdLJmd5YFNq86UkrBoJh1CF1a
NxfL/6SFusaZfMfahR71/fsOBzmX8h6lFIR3qO32Sk2/DB4yFXzg7cipY5lCjp7u
MGHtcK3iDlEl3aWYdga3JlwOyvi/WNmeBTepq7YsxtkZjTFIOYgPxXyEGQX8241U
Q9ikKe0KJlAfNbWwL6GSuH6J9d9M+NgxPph5spyrBSlMLLXsE3vwSgTUBBSXTXsE
zuJRoXMtmhvRJhuQ0EiOHMNPPMgXHGIT3vMxs8fWX4+CAtNjOT0fMQxMGq3dVDOm
YpuJPKsbaXaBxoxYmQ==
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:10:21 2026 by rpki-client