Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: oHIIFOgtHKCSuhkG3wJPrTV2x4R5oEiCUQhZAVwyCTw=
Subject key identifier: 51:B5:5A:AE:40:7C:EA:82:C2:75:C4:44:8D:BE:B8:2A:C6:E9:E2:63
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 019DCD1982630AF275A7FDDDFAFFC6249590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0D35
Signing time: Mon 27 Apr 2026 04:01:34 +0000
Manifest this update: Mon 27 Apr 2026 04:01:34 +0000
Manifest next update: Tue 28 Apr 2026 04:01:34 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: 3fAyi/rVp8KdpI+DxxGAgT2A7nyUBn9IDDnOTQjyRho=)
2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:82:63:0a:f2:75:a7:fd:dd:fa:ff:c6:24:95:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Apr 27 04:01:34 2026 GMT
Not After : Apr 28 04:01:34 2026 GMT
Subject: CN=51b55aae407cea82c275c4448dbeb82ac6e9e263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:04:d2:ad:1f:53:d7:71:a8:02:ed:6a:9e:
e4:95:0e:ba:42:00:09:6f:52:75:d3:2d:61:9c:88:
d4:fa:25:78:5b:78:29:01:d9:a9:46:a4:b0:a6:22:
fc:fd:0e:5b:0b:d9:01:f6:c4:17:e6:43:64:5c:f4:
9e:e8:2a:90:67:44:4d:94:18:3a:3e:e1:f5:10:3b:
4d:93:7b:c6:1a:ce:f1:60:76:c9:00:09:9a:f4:1e:
73:12:1f:85:52:7f:49:84:43:a9:93:a0:b0:78:db:
77:00:2f:c3:93:e9:2d:36:e9:db:56:c3:20:33:91:
d6:26:81:82:a7:20:d9:59:82:73:63:8a:2a:52:0e:
51:0f:e4:73:8e:6f:dd:be:ed:91:dc:ee:e2:72:d0:
0f:65:17:69:a9:a0:d6:29:b8:2a:8d:b2:8f:78:c1:
0f:70:dd:b3:5f:cd:c0:e1:de:85:cf:ac:43:00:4c:
78:7a:f2:0e:47:11:55:b9:41:7e:c6:ce:de:b4:19:
42:8e:ec:2a:0c:c1:7f:ef:c8:56:4e:a1:c9:5f:d4:
79:67:10:80:f7:d2:2d:c8:0d:8c:dd:9f:6c:d2:c4:
ae:60:9a:9c:fc:73:1c:c0:64:d5:ca:45:83:7f:74:
f6:20:dd:d2:e5:14:8b:0b:f3:c2:70:fc:2d:c4:da:
2a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B5:5A:AE:40:7C:EA:82:C2:75:C4:44:8D:BE:B8:2A:C6:E9:E2:63
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bd:29:5a:44:bd:50:c0:34:a0:d6:07:85:d4:72:3d:3e:13:
07:fe:80:d4:2c:a2:70:ad:d9:2d:83:6a:dc:9b:7d:8e:a6:69:
09:48:81:ca:75:d1:7f:77:66:db:f0:3f:cd:fe:dc:ca:29:3e:
96:90:19:42:a3:61:94:c3:89:97:83:56:bc:4f:ab:5d:4b:17:
17:e4:e1:32:61:fb:49:ea:ce:8e:4e:48:78:69:eb:c2:f4:c0:
71:35:31:a5:1e:bb:a8:c3:23:e9:d9:89:68:b0:86:89:b4:49:
ca:50:06:90:b7:7e:65:18:00:0b:23:38:4c:34:7e:a5:91:bd:
48:da:c6:59:56:2b:03:ad:19:d5:c3:f2:48:11:f0:97:a2:03:
ac:c0:64:0d:28:cc:12:f0:83:52:17:8d:61:fa:a2:86:da:3a:
f0:ec:20:53:da:4e:eb:69:27:62:27:e1:fd:c7:b5:ae:c8:1c:
2a:7c:63:0b:3f:02:64:f4:c6:aa:9e:e7:31:0c:51:e5:87:85:
37:b3:a0:98:7b:19:07:8f:34:57:2d:ed:49:27:67:96:2b:1e:
3e:dd:4b:27:44:5c:d6:81:5f:ca:ae:3e:b5:c6:08:32:f6:82:
7f:4b:e9:48:c0:12:e4:99:5c:15:46:62:7d:91:df:23:85:02:
be:40:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:28:55 2026 by rpki-client