Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: CQX9NfL0QJyOJIfqvWt9ljOSDNH/Yu68VZLdI6gYu6o=
Subject key identifier: EA:B0:A0:4E:A7:EF:C2:B1:E3:6A:A0:27:B3:ED:2F:79:40:09:15:F9
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019D83B6DEE956F11D26926DB46C7ACC8F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 04AC
Signing time: Sun 12 Apr 2026 22:01:33 +0000
Manifest this update: Sun 12 Apr 2026 22:01:33 +0000
Manifest next update: Mon 13 Apr 2026 22:01:33 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: +9V1lXPf1oR3OZYk92jR7Dl7l7iknFOZqqOvCesOUc8=)
2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Apr 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:83:b6:de:e9:56:f1:1d:26:92:6d:b4:6c:7a:cc:8f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Apr 12 22:01:33 2026 GMT
Not After : Apr 13 22:01:33 2026 GMT
Subject: CN=eab0a04ea7efc2b1e36aa027b3ed2f79400915f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:0c:b0:3a:4b:6a:f9:06:ea:48:4d:c6:33:
12:a4:45:cf:a2:bf:f1:59:fd:53:01:d1:6b:74:17:
da:b3:85:7d:a0:a7:0d:3a:e9:b7:a5:bc:1a:82:fb:
fd:8c:9f:0e:aa:75:bd:12:1d:cd:11:19:f7:94:1f:
f7:51:d6:75:34:c4:62:59:e9:80:1a:3b:78:b8:b6:
28:89:7f:e4:4d:8e:cf:77:b9:50:c5:54:72:cd:a2:
5e:c3:72:4b:83:df:24:3d:9b:33:ad:9e:4e:79:d5:
50:13:c6:73:99:b5:04:11:4d:e8:31:42:7b:b1:e1:
d4:42:e6:70:36:1f:38:a0:cb:89:08:d2:c7:41:58:
83:79:c0:62:18:98:8b:96:f2:c0:18:95:96:0c:ff:
e2:11:9b:4e:7d:cd:5a:fe:d0:52:bd:61:fc:2e:61:
d2:4c:8d:61:cf:f4:da:4c:a8:7c:06:1a:df:24:fd:
26:d7:e0:dc:77:66:bc:64:af:64:83:80:dd:32:a5:
c0:a5:a2:3a:e1:82:a1:69:94:bb:b3:f1:b6:40:45:
4b:3a:dc:69:d7:00:80:e0:d9:22:cd:57:f4:23:43:
94:f3:75:fe:88:48:cd:9d:38:9b:5c:eb:84:c1:6e:
95:05:b5:73:81:69:fd:f7:a7:20:30:14:fa:2b:8f:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:A0:4E:A7:EF:C2:B1:E3:6A:A0:27:B3:ED:2F:79:40:09:15:F9
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:5b:58:78:5c:2a:1a:34:77:26:a8:3e:51:07:4b:f8:d8:99:
01:2c:46:fd:96:42:85:96:de:67:ee:7a:c2:06:0f:7c:81:6f:
13:bd:09:33:df:a2:ee:64:94:54:f2:16:a3:8f:45:23:b7:16:
58:5e:d9:c0:ae:2e:ca:8a:1c:5f:95:ae:ec:b4:35:88:ff:4a:
c0:04:6d:f7:6b:45:b0:9e:34:a7:fb:23:0e:ec:ec:12:00:ff:
84:dd:d9:bf:25:19:32:d0:12:59:76:99:d9:a3:6d:5f:6b:75:
18:3f:06:3a:6b:4d:e1:df:fd:eb:f2:02:f0:20:78:0f:45:27:
67:f0:c5:73:f4:1b:75:4d:ba:8c:c5:ba:4d:7d:b1:04:a1:6c:
aa:44:96:b9:e8:5d:ec:fb:c3:8b:73:b4:4a:dd:fe:27:7a:1e:
af:a7:72:7e:98:d5:c5:64:e2:6f:31:50:75:58:31:46:ff:4c:
c8:25:89:be:ee:5f:42:11:bb:55:15:4c:27:e7:4f:85:b0:83:
7a:73:61:31:6b:4c:ba:dd:41:4f:bc:ba:b7:05:39:f9:45:dc:
0f:34:e4:e8:63:b5:d3:80:47:56:66:4c:ec:27:c8:1b:91:dc:
ba:ce:92:b3:8f:16:a2:26:9f:6d:d2:18:98:12:64:5f:48:5e:
4b:12:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 08:07:33 2026 by rpki-client