Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: ppm0UXecnJica6HOAgoiikSGSIM5bYfDpybbXEfXLqY=
Subject key identifier: 29:C4:94:65:00:B6:A5:C9:41:EF:3D:34:F5:26:DA:33:95:1D:CC:AE
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 019DCCAB0074915BF7EFCD4FFA7BD1D31DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 02:00:51 +0000
Manifest this update: Mon 27 Apr 2026 02:00:51 +0000
Manifest next update: Tue 28 Apr 2026 02:00:51 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: Wq7nvjVctPEELHA6jwV4/AEs6WS2+5APM7Yszid943Q=)
2: HyHzV1MU9ElmfLFYo26pHGiN3IQ.roa (hash: FAwtBrWvr9mjLRzQVdNQzXl4BGzCudYJ6kq3X7cDbdU=)
3: xc2N92zCzE8dOyiUB1DKEECW9u0.roa (hash: zdTFoZAtDppROLcUt1HO+ZMDOiFUGUnqXWfKYmpZP6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:ab:00:74:91:5b:f7:ef:cd:4f:fa:7b:d1:d3:1d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Apr 27 02:00:51 2026 GMT
Not After : Apr 28 02:00:51 2026 GMT
Subject: CN=29c4946500b6a5c941ef3d34f526da33951dccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:80:5b:5b:d1:73:d7:f3:be:df:48:65:72:
0b:eb:b9:90:ac:06:b4:ec:06:3e:7d:fb:4a:0f:ef:
fe:e3:3a:71:25:2a:05:b7:f7:ee:c6:9a:76:f1:b1:
e2:a8:93:05:1e:a2:d5:9f:f7:47:8d:eb:38:f8:0a:
c3:67:ff:24:b7:2f:ed:f7:e4:64:d4:af:18:84:fe:
16:94:66:a4:31:f2:a1:e3:1e:c0:67:dc:bb:d4:a2:
81:e5:81:e2:0c:31:3d:05:71:83:16:c8:a9:09:cd:
f0:a4:60:b4:0d:83:a2:0e:cf:6b:86:94:79:1e:92:
84:ac:79:11:87:2a:d8:f6:62:30:4c:9a:5f:59:72:
10:e1:5c:ab:ea:39:a7:66:0e:b9:12:5d:b9:57:0a:
b5:cc:81:69:fe:9b:cd:5a:89:5a:67:0a:3e:49:3f:
b4:af:00:30:41:98:b8:ac:4c:fb:aa:88:cb:34:e5:
81:5b:b5:10:eb:ef:c0:9e:e6:90:f7:a4:35:be:98:
9b:dd:53:6d:f2:5c:c0:07:22:a1:f9:13:fd:76:a7:
3f:f5:aa:22:30:96:83:a2:59:37:61:84:7c:2a:b4:
aa:40:c4:21:0f:30:7d:fc:08:d6:09:48:bc:15:4c:
dc:44:a5:4c:0a:7d:da:5e:6e:7a:d1:d9:18:ec:fe:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C4:94:65:00:B6:A5:C9:41:EF:3D:34:F5:26:DA:33:95:1D:CC:AE
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:23:13:0b:ad:f3:d6:4b:30:f5:1c:09:56:00:49:d4:fd:50:
d1:55:3b:31:af:49:f3:32:88:b7:03:eb:28:a6:93:31:19:fa:
df:ce:35:9c:72:30:34:b3:23:6b:37:f8:17:81:49:c0:6e:b0:
56:b2:be:3d:15:06:a8:54:7e:b6:c0:e1:94:91:f6:08:cb:c3:
27:6e:e0:35:43:54:c2:e3:a8:74:1e:fe:1d:84:2f:b8:1b:94:
41:d9:58:bd:27:26:a7:a7:69:b7:f1:0b:32:7d:1e:8d:76:a6:
92:58:64:c8:10:77:9e:7b:de:54:1b:40:2c:a7:e0:29:ad:5e:
03:fb:3a:12:0e:16:eb:cf:f4:25:30:f7:90:c9:bd:40:06:ea:
8f:ee:87:42:48:35:f3:c1:ce:39:8f:66:98:02:86:f1:f4:a3:
1f:fc:fe:40:0f:10:d0:f7:7e:35:09:8e:de:3b:f5:27:bf:b9:
a3:2f:89:cf:14:e8:9c:95:cc:cb:da:70:12:f5:f1:91:29:1a:
b7:40:72:b9:8d:17:07:65:f9:bd:44:01:03:23:c5:15:40:28:
c0:61:83:08:b9:e0:4d:be:2f:a0:f9:d9:d3:3b:95:c9:d2:18:
a5:81:92:8c:9c:17:cb:1e:fa:ba:58:9d:ef:34:14:e4:ba:f7:
bd:29:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:02 2026 by rpki-client