
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
File: 1jpuJY1igPPdl6ltlIbZPULxjUs.mft (raw, json)
Hash identifier: 4ElTIwcmQjE540xmiWdM72Y6fCUXN0BHq21dJ0MOz/8=
Subject key identifier: 3E:8D:48:65:B2:AA:6B:CA:D5:55:0C:C7:E2:D5:74:40:08:70:6F:3B
Authority key identifier: D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
Certificate issuer: /CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Certificate serial: 019DCFE2FEDBA0EDD439D5F65ACBC56CC6B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
Manifest number: 0541
Signing time: Mon 27 Apr 2026 17:00:53 +0000
Manifest this update: Mon 27 Apr 2026 17:00:53 +0000
Manifest next update: Tue 28 Apr 2026 17:00:53 +0000
Files and hashes: 1: 1jpuJY1igPPdl6ltlIbZPULxjUs.crl (hash: 5qcUcmVsdmPqXxDSG8zNOkHIOnX12mWWUnMLQ57+q/s=)
2: 3CZ316XifGJ7iXy_fvnC6yaUCL4.roa (hash: jpVzlrWllusXIidVkRRsjohQfHqCLoCDqt5WfrDTXj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e2:fe:db:a0:ed:d4:39:d5:f6:5a:cb:c5:6c:c6:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63a6e258d6280f3dd97a96d9486d93d42f18d4b
Validity
Not Before: Apr 27 17:00:53 2026 GMT
Not After : Apr 28 17:00:53 2026 GMT
Subject: CN=3e8d4865b2aa6bcad5550cc7e2d5744008706f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:02:a6:1d:e4:92:27:c9:58:11:a3:ee:b1:
f3:21:3c:46:e1:ae:22:96:36:dd:ea:49:c2:09:8d:
0d:02:e3:5a:29:47:1a:51:c8:ad:9c:d4:b1:44:d8:
e5:47:fe:8a:e1:87:72:33:84:e6:db:2c:a4:cc:46:
b5:8a:2f:1e:c0:d7:76:50:dd:db:65:21:ca:6b:74:
54:4f:c1:da:55:96:97:a9:c3:b3:13:cb:56:2f:6a:
2b:d2:ea:0c:41:96:b6:b3:c9:3c:75:28:5f:a9:43:
35:87:37:1e:b6:5f:41:54:4b:2e:df:89:a2:15:6c:
39:8d:d4:b9:54:2e:25:e9:c4:1f:a9:4a:87:88:ec:
3d:5f:45:93:fe:a8:01:9f:d0:d6:1b:b6:c9:4c:b8:
29:dd:cd:46:39:16:5c:ac:63:96:8f:13:6c:97:ac:
93:3c:19:ac:3d:94:91:cc:66:6b:b6:24:3b:0d:2e:
48:a5:6c:87:51:e2:9d:d4:9e:e7:07:b1:b8:ac:44:
60:b1:07:33:5d:6e:0e:fc:fe:74:4d:87:28:93:54:
dc:fd:c8:fe:2b:c2:b4:ca:12:e5:7b:bd:9f:c7:39:
93:5b:51:b5:a4:3f:2e:9e:f5:6d:2d:a7:cc:84:88:
82:0f:b4:18:54:a5:5c:72:74:d8:c2:57:ff:e6:93:
cb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8D:48:65:B2:AA:6B:CA:D5:55:0C:C7:E2:D5:74:40:08:70:6F:3B
X509v3 Authority Key Identifier:
keyid:D6:3A:6E:25:8D:62:80:F3:DD:97:A9:6D:94:86:D9:3D:42:F1:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jpuJY1igPPdl6ltlIbZPULxjUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/87f705-8862-44e1-9033-a47b69c22cd0/1/1jpuJY1igPPdl6ltlIbZPULxjUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:11:1c:d6:81:fd:92:51:bc:93:0d:69:41:19:d7:eb:6b:f9:
79:35:a0:b4:f9:0f:f1:4c:e8:0b:e8:a7:91:5a:c4:4d:07:b5:
79:92:b1:4f:76:b3:ba:92:d1:a6:7e:22:ab:dc:b0:18:aa:24:
78:6f:04:ed:0e:73:9f:18:58:8b:78:27:e3:07:4c:93:23:4d:
54:47:e4:4a:7b:2f:66:26:ad:dd:51:a5:73:e1:c5:9d:e6:7a:
f4:dc:d1:c4:a5:9a:55:c1:7e:a2:2d:80:10:28:e6:56:f7:10:
a6:f7:5e:7e:3b:60:1c:fb:ba:06:60:cb:fd:5c:0a:84:95:ae:
92:d7:85:5d:a5:24:20:d0:d5:97:42:62:da:f9:ea:55:52:92:
3b:8b:3e:e6:6e:7f:ec:98:37:8e:b9:a9:98:47:27:e0:6a:b0:
fb:9d:db:65:0a:96:a2:0d:38:de:92:95:77:0c:46:cb:40:87:
1a:b8:3d:49:a3:b9:65:e9:af:38:16:fb:eb:35:51:58:76:32:
98:ff:39:48:63:7e:34:ea:18:b8:73:11:32:25:ce:72:b7:ed:
31:b3:98:70:6f:9c:3a:7c:2b:e3:11:65:87:dd:c5:8c:3c:59:
e3:ea:ff:34:89:74:b3:04:b9:32:fa:9a:66:9a:72:a1:16:30:
ec:a1:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:33 2026 by rpki-client