Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier: qwxQ5alIZu2f+sQI1U2LfEAwUtp78tVPNimUx0dUOTU=
Subject key identifier: A0:B0:3A:0B:A9:CE:FC:23:E9:1A:0F:BB:03:59:04:EE:87:8A:DA:FF
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 019DAB3188FE3D12907FAF39A8F9C5CCEFE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number: 18E0
Signing time: Mon 20 Apr 2026 14:00:43 +0000
Manifest this update: Mon 20 Apr 2026 14:00:43 +0000
Manifest next update: Tue 21 Apr 2026 14:00:43 +0000
Files and hashes: 1: 1-m6k8GA9p4ZvRRt_IEBX1hvXSqw.roa (hash: ampjSRymUyQsDP6vuBsTUVzHhqhSNIFHHc8gno3VuVk=)
2: 1-vjFWmfG0701a1RWTVQR-wPwzPM.roa (hash: 7mCdtNCbIcMrpoX0PSQXD/jut52p6bBvzWyqRVVXaOs=)
3: FGWSmCiFor0nTfWbxjmzYP_XTWE.roa (hash: SoNbcAzZOAbsaX1DWlnc7rcsM5HKeRW27Hbeu6b+U0I=)
4: U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa (hash: MKGyp4HJxPM8RFddtv+Sf1HDZ8q6UPmk/UuasqpHff0=)
5: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: OJaOKXflVpvD3kPN6asa/T7cGerTuioJuDDv/PL9D0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 13:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:31:88:fe:3d:12:90:7f:af:39:a8:f9:c5:cc:ef:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Apr 20 14:00:43 2026 GMT
Not After : Apr 21 14:00:43 2026 GMT
Subject: CN=a0b03a0ba9cefc23e91a0fbb035904ee878adaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:ad:d1:45:af:28:4f:69:c6:11:0e:9f:ac:
25:fb:08:93:56:47:e0:a4:56:be:34:f7:27:e6:89:
a3:34:a7:12:0f:8f:49:b7:3a:2a:50:c6:d9:3f:63:
b3:36:33:03:df:a4:12:37:98:9e:40:e6:f8:18:ba:
1d:e1:e6:cf:d7:22:5b:3b:08:77:c9:1e:c7:49:b3:
de:fb:36:03:a3:4f:a1:3c:bf:bc:6d:4a:b1:84:76:
f4:a1:e7:e0:50:7d:5f:95:49:46:5e:d0:59:a1:9d:
99:a9:ae:ef:99:34:95:82:0b:4f:4a:05:2a:d8:85:
92:87:2a:41:a1:9f:45:c9:56:2f:71:2b:3d:8c:dd:
f0:de:e7:2c:78:a7:50:4f:fb:20:dd:45:c5:30:6d:
a4:87:1a:fb:04:b0:5a:cd:c0:4e:3d:52:07:2a:92:
5b:95:34:4f:6d:0f:84:be:9c:db:b7:ba:2f:c1:8d:
ea:82:f8:9f:66:1a:ef:f1:56:93:e8:84:da:98:e2:
e1:46:bd:9e:67:63:0b:3a:d2:a5:0c:3d:13:8f:60:
2e:38:4a:8b:fd:dd:0c:36:08:03:84:01:46:01:b4:
a2:a0:4d:dc:bc:ec:35:15:5d:81:a1:06:c9:7d:d3:
55:3c:4a:90:ca:0e:b1:10:0d:f3:08:04:09:b8:9a:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:3A:0B:A9:CE:FC:23:E9:1A:0F:BB:03:59:04:EE:87:8A:DA:FF
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:02:f1:f3:a2:ff:c5:56:76:f9:f3:13:33:00:04:49:84:31:
cc:8d:74:58:5e:cd:33:88:3e:19:93:3d:b3:ed:1e:26:d3:88:
b4:8d:50:6d:54:fb:e4:46:61:e0:2a:a7:6f:6d:0f:d7:e0:60:
f4:3f:5b:36:5c:e6:d9:ba:2e:83:29:34:46:90:80:90:ff:c8:
07:d4:f0:cb:b6:ba:b2:c1:cd:fe:6d:ba:66:94:4e:97:b5:28:
87:7e:4d:85:08:70:be:40:8c:60:c6:db:76:24:52:1b:a9:73:
42:3a:64:52:d9:4e:bd:b7:66:ba:4e:03:e7:11:85:a2:2d:76:
0a:77:1f:85:6c:43:11:5f:47:c5:d3:05:5d:2e:b2:5c:70:aa:
51:18:3d:d3:6c:6d:02:7d:e4:d3:64:23:48:8c:58:14:b3:d2:
1d:f3:0a:3d:fd:f4:e3:2f:97:7a:df:b6:da:f5:e6:cb:f3:a3:
75:ac:72:db:84:03:76:ef:7c:54:b8:b9:d0:c7:24:2e:f2:b2:
a6:3a:1b:ce:d3:43:5b:12:7e:f9:c9:7a:da:11:b6:24:14:ef:
a4:0a:ea:fd:56:fd:f9:4b:57:d1:a9:cf:32:70:5e:a8:9c:0d:
0d:4a:8f:a2:30:2f:10:f9:ae:2c:2c:53:c7:24:66:56:06:7b:
f2:95:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 17:13:52 2026 by rpki-client