Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File: 1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier: fWE3GnHBB96pkjtuzTsDGxIBlnSKIp0RVw4QR2y9jEs=
Subject key identifier: 62:2D:3D:CC:F3:70:55:3A:76:47:68:5C:84:7B:EB:3F:3D:71:7D:34
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer: /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial: 019DCDF5098C866012E5917CC875517B614E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number: 17B4
Signing time: Mon 27 Apr 2026 08:01:20 +0000
Manifest this update: Mon 27 Apr 2026 08:01:20 +0000
Manifest next update: Tue 28 Apr 2026 08:01:20 +0000
Files and hashes: 1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: IGgMGD4nCuYsaMN9BwRNOhpaTeb6udApLSvB+VcHBYk=)
2: tVllXtsvNqnnGT4ghCbeFVO4eK8.roa (hash: m5YFGULB9rnteTPaC4KcDVufk0CwF1ak5Ttvba2UEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f5:09:8c:86:60:12:e5:91:7c:c8:75:51:7b:61:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Validity
Not Before: Apr 27 08:01:20 2026 GMT
Not After : Apr 28 08:01:20 2026 GMT
Subject: CN=622d3dccf370553a7647685c847beb3f3d717d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:de:19:72:6f:bf:66:f4:ed:97:ee:d0:15:
2d:f8:f9:f1:1e:67:0a:a3:e5:32:52:e7:58:9a:2d:
66:61:84:03:a9:74:7f:20:e5:e0:55:48:cb:a9:ab:
6d:23:e0:fd:09:cb:22:45:30:7f:c6:8f:cb:5b:c6:
09:14:ab:d7:09:b1:f4:c0:84:09:3a:3d:fa:96:b5:
8e:8d:86:c1:1a:c4:5b:4e:ad:12:50:4d:f5:1a:96:
e7:46:07:c0:b1:2d:fa:1a:0a:b7:c5:d7:63:eb:ae:
7e:db:ad:f2:4f:96:f1:18:d2:b9:db:36:f1:cc:e2:
da:43:5c:27:4e:d5:c9:3d:a0:46:83:c2:47:69:22:
e8:c6:52:e2:fe:79:a1:96:47:55:86:f6:3e:aa:33:
58:a0:41:38:c1:a0:10:80:f3:32:a7:94:25:6e:ca:
06:80:35:a8:d6:51:ea:4f:6e:8f:af:9d:1a:c4:e6:
98:30:12:c6:1a:7c:1e:bd:64:9e:d0:c1:34:93:77:
37:05:2f:fc:16:a2:89:09:45:cb:fe:29:f4:d5:f4:
33:45:06:29:c2:0f:c9:5c:3f:ce:b4:bd:fb:04:96:
ce:aa:b8:ca:f2:74:ee:2b:ea:b1:25:df:63:4e:04:
71:ce:29:8e:ee:10:15:9e:be:7f:db:8b:42:ef:50:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2D:3D:CC:F3:70:55:3A:76:47:68:5C:84:7B:EB:3F:3D:71:7D:34
X509v3 Authority Key Identifier:
keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:cc:99:92:54:5e:f5:57:6e:c0:5b:ed:51:35:f5:e5:2c:25:
1e:98:31:e8:27:b1:ec:6f:d3:39:e8:94:84:08:a1:4c:9c:89:
17:64:d7:3a:18:3a:4b:54:e3:06:f3:24:73:64:04:1c:c7:42:
29:f7:ed:a1:03:07:fa:c1:fa:f1:66:c0:13:7e:8c:b7:2d:ee:
ec:b5:25:e3:bf:28:7a:14:c0:aa:30:0a:81:c8:93:52:1a:36:
29:67:00:49:b7:6f:3c:15:40:40:cc:c5:98:ee:27:ef:6b:cb:
67:d7:1b:87:b5:7e:c1:d7:69:82:e9:9a:ab:28:e6:10:23:d7:
89:5f:50:8f:0e:97:0d:94:0b:4b:25:6b:26:42:aa:aa:22:6a:
a2:f3:98:1f:b5:6c:aa:f4:e9:c6:09:1c:d2:50:ea:89:45:38:
c4:ba:88:1e:0a:ab:f4:08:3e:37:07:16:43:0c:aa:06:d3:0c:
13:ff:90:ae:08:0d:6e:63:be:90:89:d3:60:c7:de:92:5b:0f:
96:b4:6b:06:ee:7b:4b:d2:58:58:41:2b:87:44:52:91:7f:d5:
bd:ad:3a:87:48:50:8f:ac:db:3a:e8:97:21:7d:51:17:55:63:
9a:52:af:1c:5c:4a:88:c3:b1:15:65:ed:08:d6:03:4a:56:67:
71:0f:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:32:11 2026 by rpki-client