Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: h5+CG8Ak4a/2Hxo6hHDgYkbOgYwgxTRurQ3eU0/rqbw=
Subject key identifier: 4A:CF:3F:7F:65:24:AB:F3:E9:46:33:B7:ED:DB:14:A2:39:07:4E:00
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 019DD087AE4656866EEC223535B2467B4A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 17B1
Signing time: Mon 27 Apr 2026 20:00:46 +0000
Manifest this update: Mon 27 Apr 2026 20:00:46 +0000
Manifest next update: Tue 28 Apr 2026 20:00:46 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: 9Ad2nGGN2HUYJyv9/UjXJyzidKwkQcKiolqj30H+NMk=)
2: fzAeGKhcQK73_8kUi9aPu-hO7GM.roa (hash: nriJ4MQ+9xZdYNUaYHTilz4XR7McFd/ntd369VK1PM0=)
3: lXz_0HyPSbL-uOjVg4Ot7TStlxw.roa (hash: UyzNEXVwdOfFnPKU5Gd+xkJiBk60PdbsHvretQnQOPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:87:ae:46:56:86:6e:ec:22:35:35:b2:46:7b:4a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Apr 27 20:00:46 2026 GMT
Not After : Apr 28 20:00:46 2026 GMT
Subject: CN=4acf3f7f6524abf3e94633b7eddb14a239074e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:e3:db:69:43:12:bc:54:1f:4f:c1:81:c5:
ef:c0:cf:9f:22:fe:8e:20:3a:e0:ca:ce:68:54:1d:
e4:0d:cf:b5:17:15:26:3c:08:c4:95:32:07:e4:ef:
48:51:e5:26:2c:dc:de:42:d8:bc:bd:e2:a0:09:ab:
07:cf:12:e9:67:b0:37:93:6b:0f:28:69:10:5a:f4:
2d:dc:00:7a:da:a2:dd:0e:43:df:2b:c5:8b:55:c8:
48:b5:fb:d2:dc:59:2b:de:b7:93:d4:2f:9b:13:7f:
03:bf:45:83:7f:2b:92:c8:96:36:f8:92:93:27:9f:
36:cb:af:49:c5:1e:5a:55:f1:11:d6:63:ce:45:e9:
38:82:41:5b:32:4d:ee:65:49:fc:76:dc:9f:3b:2c:
85:87:68:2e:33:eb:aa:d8:62:b5:0d:8a:6c:3f:16:
0d:a7:9a:a7:37:6b:02:71:dc:60:07:e3:99:6b:e4:
ec:9f:b7:e9:ba:31:af:27:fd:d9:35:14:de:b0:ed:
e8:47:97:29:ee:0b:f9:6c:cb:af:0b:d6:66:cd:73:
e8:60:18:db:9f:f5:f8:bc:5b:15:2b:47:23:a4:21:
5b:ab:84:dd:55:68:c0:fe:a3:48:bb:f4:87:a3:43:
1d:85:11:f6:cb:37:7f:c5:06:90:f2:6c:cc:5c:72:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:3F:7F:65:24:AB:F3:E9:46:33:B7:ED:DB:14:A2:39:07:4E:00
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:3a:ab:4f:76:f8:86:dc:23:00:6e:25:1d:c4:8d:c0:00:1e:
56:db:a9:91:cd:04:c7:d5:13:a6:a0:19:de:a9:81:a8:aa:cb:
ab:8b:33:49:37:99:80:8a:d9:2d:cf:00:4b:ff:08:86:dc:c2:
02:cb:75:1c:f5:ab:08:9c:ae:03:9e:98:52:d3:d8:4e:ba:45:
f8:0d:7c:10:71:d7:f7:93:68:56:7a:db:cb:ec:62:d3:96:83:
03:20:97:65:1c:f2:50:3d:ca:91:64:77:d3:30:8a:7e:2e:cd:
6b:72:4c:8a:78:6a:79:cb:e2:8b:e2:31:00:d8:b0:c3:c7:02:
f3:85:a8:fd:f9:9a:ad:65:11:ba:cc:cb:db:9c:83:3a:73:18:
6f:35:c1:21:eb:15:18:ec:e4:9c:95:f9:7e:e4:7e:f8:a6:6f:
d3:9e:28:50:0c:e7:1f:15:4f:be:c9:fe:c1:ac:32:9e:89:63:
45:82:47:93:14:a2:01:bd:72:5a:d9:85:03:56:2c:6b:33:49:
9e:f4:11:77:6b:1c:82:d6:cc:92:5d:39:35:b9:16:8a:30:06:
ac:d0:38:1b:38:f5:7b:de:51:67:d3:af:97:cf:cc:c3:cd:c9:
b8:64:8a:2f:21:46:af:ac:81:0e:4f:f4:e2:f2:74:ba:36:08:
f8:50:8b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:23:36 2026 by rpki-client