Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File: d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier: opLf1/41fvvB0sdnsvuKAJHBW9HcVVPH3nTd2QqPJqQ=
Subject key identifier: AB:A9:6E:8C:A8:0E:C2:5D:D2:DA:CB:8C:1B:B5:82:03:A3:19:50:AF
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer: /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial: 019DCED0C382A09CE3370DCC59D34E058BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number: 0904
Signing time: Mon 27 Apr 2026 12:01:21 +0000
Manifest this update: Mon 27 Apr 2026 12:01:21 +0000
Manifest next update: Tue 28 Apr 2026 12:01:21 +0000
Files and hashes: 1: 9F2fGaXqkwYq7hsidHwhVUABVT0.roa (hash: b+5jUhu8wzSR5Hz+8wVW5uNIAXefzuPQ7RL1+84Zd/s=)
2: FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa (hash: ev1W9ohjVf7Q0Z9nGx/i+Cc2wNkdLs6mHMbE9kefqiU=)
3: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: NgOdwlY4kp2j8RDcGMUXCFHHa8mT37YcOABTE7Fd5h0=)
4: yj4Baoa8O0cK9liPFSajl18EXPE.roa (hash: qR4NJRolj3aKBGShXLhpMIVXbSB+hmucW84pdI75rZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:c3:82:a0:9c:e3:37:0d:cc:59:d3:4e:05:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Validity
Not Before: Apr 27 12:01:21 2026 GMT
Not After : Apr 28 12:01:21 2026 GMT
Subject: CN=aba96e8ca80ec25dd2dacb8c1bb58203a31950af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:73:02:95:24:ef:49:42:ca:8b:72:cb:02:
cf:f5:1a:ce:af:39:20:02:5d:60:f7:f1:54:57:4e:
49:c0:7e:9f:19:42:24:bd:55:ca:5f:43:e8:fd:9d:
c0:e4:d7:6c:d3:dc:4f:62:6d:6f:f2:7f:0c:40:9c:
f1:bb:23:8c:0d:de:06:0c:39:78:1e:9e:23:ad:bc:
ed:bf:e0:ae:d4:b4:bc:64:8b:cb:7b:69:47:eb:e7:
d0:bd:70:d0:30:2d:0d:b9:f4:35:56:da:10:46:62:
22:ba:d0:64:84:12:79:65:9c:86:b1:d2:ce:53:dd:
8c:80:b8:47:c5:e3:c6:49:d8:f4:4b:bd:05:31:f9:
a1:9e:27:8d:4c:92:98:ff:bc:69:09:0c:ed:3b:6b:
9e:f9:d1:cc:43:b1:b6:7d:e2:25:22:21:68:dd:e4:
e9:ba:a3:5b:54:6e:41:85:14:26:0d:d7:13:78:9e:
e1:25:49:3e:fc:48:8f:a0:8b:b8:65:0d:18:30:0e:
8a:a5:59:e1:81:95:e2:1e:2f:39:87:b8:33:58:b6:
1f:4d:c5:5a:d7:fc:93:4d:13:84:d8:9f:75:22:13:
7b:79:eb:dc:42:ae:73:7c:07:5a:85:66:1e:50:ac:
f7:9c:95:32:2e:8c:d8:73:75:ad:60:ca:cd:42:c5:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:6E:8C:A8:0E:C2:5D:D2:DA:CB:8C:1B:B5:82:03:A3:19:50:AF
X509v3 Authority Key Identifier:
keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1a:92:c3:ca:0c:92:64:a5:bc:6f:58:38:d1:c1:b1:ff:dd:
56:68:66:b8:df:2a:4f:26:08:28:3c:e1:44:e4:0a:e6:ec:8d:
ec:b2:7b:f1:fc:ed:da:7f:d9:a2:5a:5b:c0:f4:24:a7:ec:d9:
8a:c9:de:28:d9:9f:f5:c0:d2:c8:23:45:8e:25:95:77:72:15:
25:d0:cd:38:32:64:57:3c:eb:7e:28:84:dc:0a:98:2d:97:2f:
fe:50:61:1e:77:bc:75:9f:8f:55:0f:40:9c:b2:ab:a2:9e:a5:
64:6b:f5:e2:87:e7:04:6b:1b:72:53:57:c4:41:a9:8a:39:c7:
21:31:a5:75:97:f8:0e:d6:ef:77:94:01:8f:31:ac:05:1e:f9:
b4:3e:14:31:21:74:7f:6c:67:b1:b3:83:c3:d2:3f:81:82:8f:
ab:2b:cd:6e:e5:54:9c:ec:b5:74:2d:4c:71:ef:da:f8:d5:6f:
05:36:05:08:e3:4f:2a:66:c4:1f:e9:04:e7:9d:22:f0:b2:03:
73:59:2c:09:a3:c8:6e:5d:06:bc:f1:3a:81:bc:62:ee:9f:fd:
9e:62:0f:13:1c:15:c1:33:59:fd:e6:2b:52:3b:c7:0a:c6:5b:
d1:78:f8:85:e0:75:63:be:93:fc:46:b3:f2:d5:63:51:63:ab:
de:71:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:25:06 2026 by rpki-client