Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: FyfgqCj4S+tFEIqVqcDVVznsxiL+sr1nxdgDs74r37M=
Subject key identifier: C9:78:F2:C1:08:1A:BB:A0:DB:C4:F1:10:EA:A0:EB:19:2F:74:48:95
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019DDEB14DA74A33608B85289920BE8F27A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 162B
Signing time: Thu 30 Apr 2026 14:00:54 +0000
Manifest this update: Thu 30 Apr 2026 14:00:54 +0000
Manifest next update: Fri 01 May 2026 14:00:54 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: cXVoSHR2yin5aoO3znKWrxoTyBhZDOV+YGFrtfrp9dk=)
2: HXOFYv-072FsOVg35mkckEgbyio.roa (hash: rr27UIRFNz1qEQQUakpKnuloBOEhVERRXmaajk2GDbc=)
3: iCcCouY1S-nB4LsSEbuN21LdER8.roa (hash: b4tzlX7SLxO9i1S2FBRMsymp/F3ncDEjzvJear130vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:b1:4d:a7:4a:33:60:8b:85:28:99:20:be:8f:27:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Apr 30 14:00:54 2026 GMT
Not After : May 1 14:00:54 2026 GMT
Subject: CN=c978f2c1081abba0dbc4f110eaa0eb192f744895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:dd:88:e6:10:b2:b2:95:6b:c4:12:26:84:
65:db:f7:d8:fc:41:49:1f:37:11:f9:56:43:40:66:
45:76:d2:d3:a4:1f:31:1d:32:46:4d:9f:70:2f:e9:
71:b4:f0:ee:f1:1b:3e:2e:bd:c0:0a:1a:3d:a5:6e:
91:96:f8:d2:c0:33:b2:2b:49:62:b9:00:75:7e:e5:
20:6c:6e:a7:ac:24:21:ba:55:45:b2:69:84:46:70:
43:d5:90:7b:27:dd:a7:62:eb:5d:8d:31:3f:03:2c:
77:2a:eb:ba:a2:8e:96:05:f4:a8:57:60:b3:cd:88:
99:05:9e:12:d6:45:01:3a:57:ab:72:b5:57:61:b3:
f2:99:a5:f9:21:94:41:62:73:30:34:1b:18:b9:37:
c1:84:f5:5e:73:f9:de:9a:3c:bc:19:78:28:93:12:
49:ac:e6:94:8b:da:df:89:e8:8a:99:d7:88:98:78:
07:58:61:7e:81:80:25:ac:5f:55:19:10:3c:9d:79:
bf:a8:16:34:4e:3f:f4:27:a2:80:f9:ec:77:db:5c:
ba:37:2b:6e:ef:6e:12:b0:65:50:ba:6e:ef:56:00:
58:48:90:50:f2:7d:85:34:46:f9:83:c0:53:90:7a:
02:72:8b:b5:2b:36:ad:32:20:d3:13:49:6b:0c:17:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:78:F2:C1:08:1A:BB:A0:DB:C4:F1:10:EA:A0:EB:19:2F:74:48:95
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:91:4d:ba:38:25:9f:71:ab:4d:a1:7d:ef:c4:51:e9:3d:9f:
88:23:08:df:96:e1:de:fd:5a:3c:a9:ee:24:ce:5e:fe:80:f6:
37:7b:fc:b6:01:ac:7c:48:91:18:33:1c:f7:dc:59:c1:e9:68:
65:0d:98:e4:a7:5b:9d:3a:51:21:cf:39:ac:dc:47:e2:95:52:
47:11:77:18:53:b9:30:8f:ca:75:20:3c:b3:45:36:58:ef:b0:
09:c2:fb:40:d6:f6:38:68:85:7d:c0:a1:ae:1b:c0:57:ca:44:
68:c0:3b:84:fc:c4:8f:05:4b:c6:7c:c0:52:b4:e7:14:5c:9f:
38:a3:1a:16:21:68:6b:91:ef:f4:da:62:85:dc:40:93:08:ac:
c0:48:70:6c:8c:26:0b:a3:3f:f3:04:9d:ce:c3:0a:ad:5e:ac:
f4:93:fe:6f:e1:e1:0b:f6:da:f0:29:b8:9b:08:bc:27:fb:18:
6e:44:9b:1e:94:8e:51:56:dd:d6:94:8c:25:54:01:0c:8e:90:
ef:49:b0:87:3d:ba:cc:0a:d1:f9:59:57:ad:eb:5e:4a:b1:2d:
a6:d1:76:d5:03:88:4d:ac:e6:80:05:e0:f1:9b:b9:58:4e:97:
26:c9:e4:26:ed:0b:75:ad:e9:ef:29:6b:9a:a5:0a:73:64:f1:
14:3f:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 17:28:25 2026 by rpki-client