Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier: bEXGRBla81YWTVOPkI2DEaFCdAOx/QxLsxb5QFvBCQg=
Subject key identifier: 2A:A7:7F:2F:09:8F:07:49:99:F4:75:02:BD:26:32:30:34:E6:DC:9C
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 019DCC3CE2AFAFDB856E18FC163B3599D26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number: 18EA
Signing time: Mon 27 Apr 2026 00:00:35 +0000
Manifest this update: Mon 27 Apr 2026 00:00:35 +0000
Manifest next update: Tue 28 Apr 2026 00:00:35 +0000
Files and hashes: 1: 7QjRRYA7jcCFNync-7ZqAYQ9Lvk.roa (hash: Ww9Vf4lv8aoiNND6Ah1rgZbAtQ03hE7wpG+7oWtfpX4=)
2: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: U0gS/AASZQL3MPDmkHOxrX2YghAl1IiNXY3L4M5fZbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3c:e2:af:af:db:85:6e:18:fc:16:3b:35:99:d2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Apr 27 00:00:35 2026 GMT
Not After : Apr 28 00:00:35 2026 GMT
Subject: CN=2aa77f2f098f074999f47502bd26323034e6dc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e9:dc:56:b0:01:41:73:3c:17:d0:85:70:3a:
27:0b:97:24:01:25:62:ff:37:76:d1:30:4a:a3:31:
72:2e:eb:14:91:a8:1b:c3:af:00:50:46:93:f9:a4:
16:06:41:3f:f3:34:c4:4e:86:36:ad:ba:c5:aa:cd:
79:a2:dc:fb:f2:92:6e:a5:02:ad:4d:89:22:16:91:
80:35:13:21:ff:de:8d:ca:bf:fb:e7:47:3e:81:92:
8d:73:ff:16:e0:de:65:1a:ba:55:96:5c:a1:5e:0f:
c9:8a:61:33:2d:56:d5:3a:5c:ce:f3:70:82:ab:fb:
6d:75:29:93:4b:da:35:f7:74:07:bd:3b:d3:a2:83:
01:28:e4:31:21:d0:e1:cb:dd:ed:d8:63:86:c1:d7:
64:14:e0:8f:f9:95:31:7d:77:e9:b5:58:b0:cf:d0:
05:15:3e:c9:27:75:a0:67:39:27:c3:87:81:87:12:
e9:c8:ca:ed:b3:ad:8a:cb:04:45:6d:e1:49:c8:89:
ef:45:1b:1c:04:b9:b3:df:3d:e3:62:7a:b9:f7:45:
43:69:74:a8:2e:02:31:9b:ea:2e:89:71:ce:07:f6:
ed:31:82:94:b6:b8:e6:24:17:44:e5:da:97:97:cb:
09:7e:85:64:7a:7e:20:1e:d2:de:9b:4a:47:b4:b6:
12:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:7F:2F:09:8F:07:49:99:F4:75:02:BD:26:32:30:34:E6:DC:9C
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:af:b0:78:e4:18:b7:9c:c6:41:65:f6:9f:79:54:5e:9b:f6:
3e:89:ce:29:fb:bc:42:6d:63:f1:c2:30:15:0f:b8:c8:95:a4:
a1:7d:e0:28:36:46:0c:39:3d:ce:8e:af:59:87:c4:cd:81:04:
35:71:97:08:34:c3:57:f9:a6:74:cd:6f:43:1e:5f:bc:54:62:
37:13:74:2d:c5:91:51:03:d5:ac:43:eb:22:21:8e:db:c2:d1:
67:57:f5:03:47:c7:34:ec:59:8d:4e:a1:98:b4:67:b8:62:ba:
bb:1d:f6:77:a5:c6:f8:f6:c9:cf:9c:32:54:09:d8:5c:be:9e:
6d:a6:40:3d:59:a5:8b:90:0b:1d:43:fb:cc:9d:fe:72:5a:2e:
40:be:37:79:da:e1:3c:41:fe:d3:42:e7:3b:90:9c:e2:eb:60:
bc:e9:90:18:2d:e6:f0:10:90:5d:31:dd:7a:26:78:a9:60:9f:
d5:9d:10:b6:72:12:8f:74:9c:52:de:56:0f:58:1f:25:7a:70:
ff:d4:7e:69:dd:70:5e:85:6c:8f:9a:01:71:43:ee:bc:fd:ba:
1f:05:b8:1d:06:42:54:70:e9:3f:17:06:d9:1a:27:fa:b3:d4:
34:78:30:8b:07:e9:59:72:7b:96:c7:7e:48:22:22:a9:ea:10:
7e:0e:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:29 2026 by rpki-client