Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: 9ZUhnA9jTiwFqCNJptGoSBWE9z9fHoDu7T1nYAY91N4=
Subject key identifier: 92:F0:B4:95:41:0E:AE:A8:7E:9E:3B:25:CC:67:97:BB:75:1B:7D:26
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019DD1641DD08E69983F5B55106F5B4398E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 18E5
Signing time: Tue 28 Apr 2026 00:01:32 +0000
Manifest this update: Tue 28 Apr 2026 00:01:32 +0000
Manifest next update: Wed 29 Apr 2026 00:01:32 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: YTmRXtMlpjPeyYXtXOoE/RBk++qEpXNYaqcme5My0pA=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:64:1d:d0:8e:69:98:3f:5b:55:10:6f:5b:43:98:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Apr 28 00:01:32 2026 GMT
Not After : Apr 29 00:01:32 2026 GMT
Subject: CN=92f0b495410eaea87e9e3b25cc6797bb751b7d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:92:8e:f2:c0:a3:b9:36:35:42:c3:5f:3c:
08:fc:ae:58:49:93:fc:d6:78:07:9a:97:6f:e8:ef:
2f:20:53:cb:9a:e9:ee:d5:b4:f5:2a:36:3e:49:fb:
3e:2b:41:52:e2:05:c2:ba:a0:9f:74:3c:0b:4c:19:
fd:be:95:7a:03:38:a4:54:f6:97:e3:8a:2a:88:15:
ed:66:a9:ea:33:2d:6f:b1:0c:88:18:e1:a3:e3:c7:
cd:31:43:39:d4:d5:4b:fc:d1:4a:08:f6:6f:53:da:
77:38:af:38:c9:25:29:9e:9f:0f:66:3b:88:8c:46:
3c:91:11:12:e6:60:85:ef:d8:d6:69:3b:66:54:f9:
ab:82:5b:8c:85:3d:8b:55:1d:c5:36:ec:1d:dc:6f:
41:9f:6c:35:8f:4c:7b:43:ef:51:11:8b:d0:35:cd:
19:e8:14:44:97:d6:e6:fd:5b:f1:fc:58:82:08:f7:
9a:e8:74:32:e6:b1:e4:d7:3a:44:88:a1:ac:82:62:
e6:89:7a:fb:71:e3:89:7e:9b:0e:4b:8a:8d:16:da:
ba:7f:01:b4:13:c6:db:ca:65:5b:9c:7d:ea:07:49:
1c:ac:44:da:bd:1a:5e:9d:60:a6:b4:93:90:4b:77:
e7:69:17:cc:d7:cc:3a:05:3d:d8:87:75:a4:bd:90:
83:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:B4:95:41:0E:AE:A8:7E:9E:3B:25:CC:67:97:BB:75:1B:7D:26
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:93:05:7f:f1:b2:db:bc:ac:f4:5d:cf:07:41:63:a1:b7:9c:
8d:04:2a:ed:3d:f8:9d:ca:5b:09:d6:cb:39:14:91:ee:96:28:
65:59:c9:3e:71:a5:1c:1a:68:c9:9f:57:47:4c:71:60:e2:d4:
9c:c2:62:ae:ac:89:cf:f5:64:ef:e5:e4:3c:39:ca:f6:79:4b:
26:26:2e:87:36:09:69:34:e5:39:78:83:5d:eb:59:ab:52:3b:
4a:58:95:09:d4:65:b3:b4:09:de:ee:57:80:9e:8d:d4:bb:69:
49:cd:17:ed:57:6b:5f:52:e0:ae:0d:64:58:4a:a0:bc:17:3c:
89:fd:4e:6a:3b:6e:38:ab:72:f9:5c:bd:8c:97:e8:68:b0:5d:
f3:35:79:41:70:30:fe:ea:c0:92:6e:42:08:ee:97:0a:ec:de:
7d:3e:bf:1c:b4:be:88:77:13:95:1c:73:53:e0:4c:32:23:e8:
b5:ee:a2:c9:40:bb:cf:ca:27:34:af:9f:7f:6e:95:9d:07:93:
1d:a4:cf:fa:7b:7a:9a:c2:90:94:3c:75:fd:93:88:47:f0:ff:
35:41:b8:aa:71:33:bf:c1:f0:f6:a6:5d:1b:a8:d3:c7:0d:ec:
15:5f:e9:c3:eb:21:85:2c:a6:b6:7e:f1:d9:cc:a9:e4:d0:d3:
a1:9d:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:33 2026 by rpki-client