Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: arAgQdybRHYMmUvGjt2PVeGHoLYdNMcUyNZ2tDtzTwk=
Subject key identifier: F0:1C:8D:BC:27:2C:6F:DE:4D:D6:88:BE:76:C9:CD:4C:02:A9:98:64
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019DD20835D248A9979D9007A778DB08CCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 11A1
Signing time: Tue 28 Apr 2026 03:00:46 +0000
Manifest this update: Tue 28 Apr 2026 03:00:46 +0000
Manifest next update: Wed 29 Apr 2026 03:00:46 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: aIWG7G7pc_c2slSSItEuUFBnVoI.roa (hash: S5hey+bOiO9SIrfKh6rWG2aF5cPDqfEVaBcsjW8NswM=)
3: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: BmyhjBMhq9GVv2dyVDzliERuorBAZDD+0s1ZL43Z0OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:08:35:d2:48:a9:97:9d:90:07:a7:78:db:08:cc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Apr 28 03:00:46 2026 GMT
Not After : Apr 29 03:00:46 2026 GMT
Subject: CN=f01c8dbc272c6fde4dd688be76c9cd4c02a99864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:86:8f:99:c3:5a:77:20:9e:b9:b0:22:d7:
33:1b:1f:8b:5c:af:68:ba:ed:a9:84:99:08:84:20:
7d:cd:1c:0f:f2:f6:57:85:59:1f:65:9a:81:a4:a4:
78:ba:10:c2:ef:65:73:6d:36:54:5c:81:5a:b3:83:
a2:b4:a8:53:33:28:46:cc:2f:84:74:e7:69:8e:b0:
d4:e0:eb:05:5f:fc:5b:9d:11:b7:7a:a8:3f:db:b4:
80:87:6e:02:e6:c2:11:b3:da:7f:ee:77:92:32:57:
fd:4e:6d:f5:5c:31:44:76:32:63:e6:03:e0:1b:ff:
ef:bc:0b:a0:0c:86:5d:28:fb:03:ec:40:fa:e5:9a:
a9:15:e5:8a:df:53:14:64:1a:6d:16:90:d4:fa:dc:
fd:83:73:9a:92:b0:e7:2e:2c:48:b3:bf:f5:17:9c:
53:67:63:f1:7d:6f:cd:59:11:b9:88:2e:55:06:46:
87:9d:65:77:a7:00:df:32:67:90:9d:bf:93:1f:67:
82:d1:d6:26:7a:1b:22:9f:9b:13:01:66:0c:0c:fd:
e3:b8:70:eb:0d:7f:cb:56:8d:66:29:78:22:a2:86:
2f:5c:42:87:17:be:95:c6:2a:a1:93:47:3b:79:f0:
46:dd:ee:ed:75:67:f2:c6:55:d8:f3:ce:56:5c:34:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1C:8D:BC:27:2C:6F:DE:4D:D6:88:BE:76:C9:CD:4C:02:A9:98:64
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:41:7d:dc:a8:ce:58:c1:8f:7c:47:32:03:dc:3f:cc:16:ff:
0f:91:8e:51:03:f7:36:e0:f7:a9:b0:e4:12:3c:aa:35:7a:64:
04:15:bf:c6:0c:8c:91:2d:f9:82:45:ea:1e:af:c2:d8:06:34:
c4:8a:3c:b8:08:ef:d0:c2:23:8e:43:26:bc:ef:43:97:e1:4b:
ac:ec:7e:28:0f:7c:94:a9:f4:9e:18:10:be:ba:f6:6f:ed:02:
53:dd:5e:61:8e:44:85:9b:d0:41:95:8c:61:af:b0:b2:cb:3a:
0a:8b:21:59:a5:03:22:6f:0d:b1:bc:28:fb:11:d2:7d:4e:d2:
76:35:10:30:f2:05:2d:81:f6:29:03:41:b5:d4:93:b5:75:fc:
fe:4e:eb:61:41:eb:d8:b8:f8:46:d6:54:d5:11:8b:5c:36:de:
b4:37:ff:4c:89:9b:f3:b1:e3:47:25:9d:39:18:4a:ef:c3:b8:
7b:15:35:0f:2c:84:be:e2:59:f9:d0:85:c2:20:06:b1:97:e1:
a9:fc:c3:64:44:59:16:ba:1a:e8:c1:c8:56:17:01:8a:41:95:
1b:e9:c4:83:04:ff:54:57:ef:3a:ce:36:dc:48:31:e1:5e:8a:
79:a7:a0:77:ad:0e:0e:9d:0d:8e:a0:5e:d5:c2:63:10:3d:bd:
d7:89:86:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:22:52 2026 by rpki-client