Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
File: sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json)
Hash identifier: jtrocbhfuOBWUFxJRhWkP1at3ZylKuuSWhSZfljei2g=
Subject key identifier: 6C:87:A7:90:6D:5B:26:92:A0:B5:29:D8:8D:86:75:23:5A:04:28:EF
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial: 019DCE62949126874E00FC00FF306F7D6A58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
Manifest number: 1249
Signing time: Mon 27 Apr 2026 10:01:00 +0000
Manifest this update: Mon 27 Apr 2026 10:01:00 +0000
Manifest next update: Tue 28 Apr 2026 10:01:00 +0000
Files and hashes: 1: IFU9yqMojf3OF6XRbPbAyfRClxk.roa (hash: 35a15I7jZQOPlqYRrp7fhGZKGwSIuTjFX5WUsqtUd2U=)
2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: Oj8xCiT5lsTLL1NPnl85hRk/3eyNadqC42InU1Qb4YU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:94:91:26:87:4e:00:fc:00:ff:30:6f:7d:6a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Validity
Not Before: Apr 27 10:01:00 2026 GMT
Not After : Apr 28 10:01:00 2026 GMT
Subject: CN=6c87a7906d5b2692a0b529d88d8675235a0428ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:cf:20:10:7a:c6:19:af:9b:5b:de:0e:67:
17:90:11:f4:9a:5b:b0:5f:2f:2a:ec:ea:05:5d:8b:
47:54:97:c9:b0:6d:82:0e:06:c6:df:4d:a3:3c:af:
e9:be:5a:bf:86:f7:01:c9:db:63:95:78:97:c1:f0:
18:45:eb:89:38:7f:fc:c7:48:35:94:f4:79:e1:d8:
dc:47:b1:00:03:53:18:fb:4c:34:9b:c8:22:f8:13:
fc:35:8f:8c:06:2d:ee:26:07:21:90:86:10:f3:27:
af:98:0c:d8:d8:3d:bb:eb:84:10:84:9c:21:66:82:
37:4b:47:c7:85:6f:c5:36:e4:39:13:92:42:cc:05:
63:8c:e3:44:1b:d8:63:a2:82:bf:7b:83:d4:0f:c0:
82:33:35:80:00:18:82:56:73:ca:48:4b:f0:b4:f2:
21:77:90:91:42:c6:3c:d7:79:97:b8:6b:1c:8a:13:
4d:f3:c1:f2:36:da:03:52:23:74:7b:9e:9f:75:f3:
bc:e3:92:9c:c8:ec:5e:45:d4:c5:d4:8c:99:e3:44:
81:82:c9:7c:18:cd:7b:49:2c:f0:10:cf:ae:93:e9:
6d:04:4d:35:5a:67:f8:9e:c0:c4:62:d6:8b:76:d9:
57:8d:88:63:47:0a:89:e6:ef:7a:93:1f:6d:d4:e6:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:A7:90:6D:5B:26:92:A0:B5:29:D8:8D:86:75:23:5A:04:28:EF
X509v3 Authority Key Identifier:
keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cb:22:1b:60:bd:47:27:78:2a:c7:cd:ac:06:44:98:70:ac:
77:d8:b3:32:b8:a1:d5:15:1a:d9:96:79:e8:b6:6a:8f:e5:14:
35:0f:7b:53:4d:e3:e5:12:44:5d:cf:4d:03:cc:88:61:c0:9c:
af:14:3e:a8:df:74:c5:6e:b3:fd:8b:f1:7c:9d:92:a6:91:0b:
d7:01:50:53:2d:75:11:10:ff:ee:51:e0:8a:04:f2:50:ee:38:
34:f4:ab:1d:08:5f:1b:fd:ac:6c:b2:74:8e:1b:6b:14:b4:81:
63:f6:3e:3a:ba:14:62:26:93:48:e6:2c:06:dd:60:d6:3b:f7:
95:2c:34:1c:84:ac:f7:d6:45:61:16:b7:27:fd:30:2f:d6:9b:
63:74:5c:63:94:40:90:35:9a:b7:b8:f4:50:cb:c1:86:34:23:
f5:f9:dc:c4:fa:6d:35:87:dc:62:90:7d:76:13:b1:47:7e:62:
4c:dd:61:7e:70:c2:ba:f0:06:3f:08:9e:fb:9b:2e:c2:44:3a:
31:22:9b:43:66:74:71:f3:64:be:b5:39:66:4f:93:1f:e0:f8:
f8:ec:18:c7:1a:02:35:e3:34:88:eb:c6:55:e3:7d:90:61:80:
b8:d3:10:34:7f:0e:25:bc:1f:89:01:d2:8a:46:9b:aa:d7:85:
63:24:05:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:03:27 2026 by rpki-client