Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File: 1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier: dcgjNlJrhJxxm/iHq7NTdWGkGVch4bLbtbTdMoPI96o=
Subject key identifier: 4B:76:AB:F4:2F:A5:0E:79:B6:AD:16:A3:C2:53:D7:99:63:B9:F0:0A
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer: /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial: 019DCE2BC4E4F24B8DA9231C61434888DEE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 09:01:08 +0000
Manifest this update: Mon 27 Apr 2026 09:01:08 +0000
Manifest next update: Tue 28 Apr 2026 09:01:08 +0000
Files and hashes: 1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: Z06bRQU1jhpra3fH2Ko4hb5rhw/riqOK6XVutRmawCs=)
2: DoWhtMhiJd62u67yTypXkNyKc54.roa (hash: rOFqk1lXAk5Zo2qrvR0lJblhfPY81qij2Skbo2/XBYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:c4:e4:f2:4b:8d:a9:23:1c:61:43:48:88:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Validity
Not Before: Apr 27 09:01:08 2026 GMT
Not After : Apr 28 09:01:08 2026 GMT
Subject: CN=4b76abf42fa50e79b6ad16a3c253d79963b9f00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:a3:67:8e:29:1d:50:71:ee:bb:3b:fd:f4:
4b:17:f3:3d:fe:c4:74:46:5b:62:b7:f1:0b:77:c1:
5f:bf:58:46:56:71:24:af:bc:d7:a1:1f:30:da:f6:
78:84:b6:78:34:37:b9:12:18:9a:6a:10:d0:d0:23:
49:43:dd:85:cb:e2:f2:1d:0e:33:bd:ae:1a:18:35:
7a:b6:dc:76:4e:4b:3c:2e:5e:08:a7:45:7d:d2:7a:
2d:f3:9b:e6:1f:d0:66:03:5e:fd:fc:5e:fc:e7:64:
28:c8:0f:7a:7b:37:f1:ba:d6:ed:2d:17:42:ab:00:
f4:63:e2:d6:63:d8:a2:db:58:39:8a:2a:df:dd:fa:
eb:a4:94:96:01:a7:5b:69:2b:1a:5e:d6:0d:ab:95:
49:8b:fe:b8:b6:dd:c6:ff:9c:03:78:35:e2:6c:3a:
2f:69:7e:ae:58:15:25:2e:da:96:d0:df:4b:50:55:
f1:96:03:a1:8c:c1:50:ca:cc:65:ec:de:6d:c2:55:
ab:8b:b7:48:ea:a3:83:5c:9e:e4:61:c4:30:dd:8f:
ef:b9:4f:d0:fa:26:37:26:7c:c6:12:ac:d5:5a:71:
4e:17:1d:e5:cb:0a:e9:19:f7:2c:33:dc:11:1f:a6:
98:ad:76:7a:7e:68:69:bb:b5:05:77:90:0b:ad:e8:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:76:AB:F4:2F:A5:0E:79:B6:AD:16:A3:C2:53:D7:99:63:B9:F0:0A
X509v3 Authority Key Identifier:
keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a8:28:59:8e:da:b3:c8:70:bc:ae:66:44:37:99:32:5f:5b:
78:e7:73:aa:30:9b:95:91:67:ec:c8:13:e5:f7:9d:7d:3d:93:
63:5d:c6:c8:34:9a:cf:4e:e2:69:2c:b6:a7:b3:dc:00:bf:51:
4a:86:ad:0c:04:62:c6:fd:8c:db:4c:50:af:5c:20:c1:bf:1f:
c3:7b:c2:49:ed:a5:ac:57:a4:79:de:c0:6a:25:b8:83:63:e2:
52:8d:21:1c:f8:ca:63:bd:1f:ab:15:99:93:eb:df:a2:d3:6e:
7b:7e:9b:71:e6:a5:4b:d1:54:38:a7:49:bf:2e:48:d7:4d:25:
d8:48:6b:52:1c:23:0b:96:74:04:19:c5:e8:ff:39:18:04:3a:
73:97:93:fd:36:ba:3c:6e:9d:06:22:aa:a3:86:52:e7:a2:51:
f8:3a:b6:3d:0c:c0:42:79:bf:71:3a:ee:9d:1a:14:6a:48:d5:
b7:3f:f5:3d:1f:04:71:c2:ee:89:1c:d8:a3:36:f1:03:7c:7b:
fc:a2:0c:eb:44:26:24:a2:b0:84:e1:b6:34:4b:0f:a9:3c:f5:
41:29:be:31:7b:91:cf:1d:57:30:5a:49:90:16:74:54:90:6f:
62:41:ca:45:6e:6b:48:a3:fa:fe:73:ae:31:07:6b:fa:6c:db:
8e:ec:2f:e0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3OK8Tk8kuNqSMcYUNIiN7iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZGY4MGY3YzY5MmU4NmQzY2Q2Yjc1NWQwNmNmN2NlOWMx
MzdmZjIwHhcNMjYwNDI3MDkwMTA4WhcNMjYwNDI4MDkwMTA4WjAzMTEwLwYDVQQD
Eyg0Yjc2YWJmNDJmYTUwZTc5YjZhZDE2YTNjMjUzZDc5OTYzYjlmMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhOjZ44pHVBx7rs7/fRLF/M9/sR0
Rltit/ELd8Ffv1hGVnEkr7zXoR8w2vZ4hLZ4NDe5EhiaahDQ0CNJQ92Fy+LyHQ4z
va4aGDV6ttx2Tks8Ll4Ip0V90not85vmH9BmA179/F7852QoyA96ezfxutbtLRdC
qwD0Y+LWY9ii21g5iirf3frrpJSWAadbaSsaXtYNq5VJi/64tt3G/5wDeDXibDov
aX6uWBUlLtqW0N9LUFXxlgOhjMFQysxl7N5twlWri7dI6qODXJ7kYcQw3Y/vuU/Q
+iY3JnzGEqzVWnFOFx3lywrpGfcsM9wRH6aYrXZ6fmhpu7UFd5ALrejf8QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEt2q/QvpQ55tq0Wo8JT15ljufAKMB8GA1UdIwQY
MBaAFPnfgPfGkuhtPNa3VdBs986cE3/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kLUE5OGFTNkcwODFyZFYwR3ozenB3VGZfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjcxZWU0LWFkODEtNDU0Zi05NjVm
LTYyYTRlNjc1ZWFlYi8xLzEtZC1BOThhUzZHMDgxcmRWMEd6M3pwd1RmX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU3LzY3MWVlNC1hZDgxLTQ1NGYtOTY1Zi02MmE0ZTY3NWVh
ZWIvMS8xLWQtQTk4YVM2RzA4MXJkVjBHejN6cHdUZl9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqago
WY7as8hwvK5mRDeZMl9beOdzqjCblZFn7MgT5fedfT2TY13GyDSaz07iaSy2p7Pc
AL9RSoatDARixv2M20xQr1wgwb8fw3vCSe2lrFeked7AaiW4g2PiUo0hHPjKY70f
qxWZk+vfotNue36bcealS9FUOKdJvy5I100l2EhrUhwjC5Z0BBnF6P85GAQ6c5eT
/Ta6PG6dBiKqo4ZS56JR+Dq2PQzAQnm/cTrunRoUakjVtz/1PR8EccLuiRzYozbx
A3x7/KIM60QmJKKwhOG2NEsPqTz1QSm+MXuRzx1XMFpJkBZ0VJBvYkHKRW5rSKP6
/nOuMQdr+mzbjuwv4A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:31:00 2026 by rpki-client