Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: SRrLIU7AOYG/oeAf5koNnrY6nrcHnpe6R5Vfw1wXAF0=
Subject key identifier: 6F:4E:B4:FD:D5:A8:0A:2E:01:30:16:31:55:1E:6A:EE:67:C9:48:B1
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 019DCE998C79F95DD081CE799A9D42976925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 17B0
Signing time: Mon 27 Apr 2026 11:01:02 +0000
Manifest this update: Mon 27 Apr 2026 11:01:02 +0000
Manifest next update: Tue 28 Apr 2026 11:01:02 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: 09gvDadfsvyZC57KqYDgFsly0aV97aUNmNRPJGz7IfA=)
2: fzAeGKhcQK73_8kUi9aPu-hO7GM.roa (hash: nriJ4MQ+9xZdYNUaYHTilz4XR7McFd/ntd369VK1PM0=)
3: lXz_0HyPSbL-uOjVg4Ot7TStlxw.roa (hash: UyzNEXVwdOfFnPKU5Gd+xkJiBk60PdbsHvretQnQOPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:8c:79:f9:5d:d0:81:ce:79:9a:9d:42:97:69:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Apr 27 11:01:02 2026 GMT
Not After : Apr 28 11:01:02 2026 GMT
Subject: CN=6f4eb4fdd5a80a2e01301631551e6aee67c948b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:4e:87:17:6a:4b:09:41:78:72:34:9e:aa:
b6:90:c7:ac:4a:6d:47:78:46:aa:c5:81:e2:76:24:
f8:46:ce:eb:b3:b3:f4:fb:d5:be:6f:2d:48:0a:51:
2e:22:70:8d:96:9a:20:1f:35:28:23:ee:e3:54:f0:
f1:88:43:0e:47:db:67:f6:6c:f4:e4:cd:17:07:1f:
67:49:1f:75:a6:c2:a2:4f:74:e5:9a:6e:54:b8:2e:
53:d4:5b:ad:67:e6:75:6c:97:eb:37:d1:34:f8:23:
d7:a1:e9:a7:f7:c3:dc:88:8d:c5:19:7e:a7:17:99:
84:cd:48:63:34:ab:8b:6e:f9:f4:fd:d2:8a:57:1a:
30:28:c3:61:5a:fc:96:b2:fc:8b:ee:8a:ce:ab:f6:
86:ba:f7:a6:a7:c3:3b:16:a7:06:e3:6e:31:1d:55:
43:e1:87:c0:d4:5b:c4:59:a7:26:bd:42:d6:ed:81:
5c:da:f2:3c:f5:cf:b7:92:0e:ba:33:1f:63:8d:de:
ca:50:3b:bd:7a:f7:f5:22:a7:c2:0f:e0:c2:61:4c:
49:8f:e3:2d:e6:43:f7:94:93:20:e7:3c:c1:18:e9:
e1:79:a2:ca:5e:d9:fe:af:18:d1:79:35:6c:e0:30:
3d:b1:ce:f7:44:ed:6e:11:30:0e:08:ca:cd:23:59:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4E:B4:FD:D5:A8:0A:2E:01:30:16:31:55:1E:6A:EE:67:C9:48:B1
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:14:f7:8e:85:7f:77:10:cf:b2:c1:28:d0:4a:2a:5b:64:
15:47:ea:92:88:b0:ff:ab:9c:49:25:d0:3a:c6:65:44:39:3f:
f8:97:21:90:c8:0d:db:1f:37:a9:68:a4:78:ad:ff:cf:d6:b6:
2f:95:2a:bd:7c:cb:77:3e:1d:1a:4b:e6:8b:a7:fb:ec:53:8c:
25:99:ab:9c:23:17:aa:94:7a:67:6f:79:07:a7:ba:7f:1f:92:
ef:ea:39:70:6d:48:f9:ef:74:36:e9:53:7a:03:7a:3b:24:6e:
b1:91:4d:d4:11:7d:e3:d3:10:6b:f1:8e:ad:35:eb:e1:bb:62:
dc:a8:4f:25:33:18:96:a1:4c:5f:bd:1e:c8:6c:f3:3a:cb:75:
8f:21:ce:86:0e:b0:ba:3b:9d:fd:bc:ea:f0:6f:26:04:a1:fd:
4d:8b:7b:d8:2c:6e:4f:55:43:18:5c:35:2d:c7:43:c6:d1:b6:
83:82:3c:97:a2:82:da:dd:59:f9:14:56:f6:9f:7c:e5:db:24:
59:42:81:87:81:82:e0:79:5b:45:33:82:36:51:c6:de:bb:c5:
62:6e:f7:05:c9:61:55:5e:0b:6f:bd:92:f2:0a:31:87:3c:57:
ec:8f:4c:3a:86:4b:b4:c4:94:4b:57:a5:1c:3e:5c:c9:d8:50:
23:e0:28:ec
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ3OmYx5+V3Qgc55mp1Cl2klMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzU2YTk2ZTc0ZWEyZDcyYjY1NDVjODdjNzlkMjEyZDcy
YTdiZGUwHhcNMjYwNDI3MTEwMTAyWhcNMjYwNDI4MTEwMTAyWjAzMTEwLwYDVQQD
Eyg2ZjRlYjRmZGQ1YTgwYTJlMDEzMDE2MzE1NTFlNmFlZTY3Yzk0OGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbFOhxdqSwlBeHI0nqq2kMesSm1H
eEaqxYHidiT4Rs7rs7P0+9W+by1IClEuInCNlpogHzUoI+7jVPDxiEMOR9tn9mz0
5M0XBx9nSR91psKiT3Tlmm5UuC5T1FutZ+Z1bJfrN9E0+CPXoemn98PciI3FGX6n
F5mEzUhjNKuLbvn0/dKKVxowKMNhWvyWsvyL7orOq/aGuvemp8M7FqcG424xHVVD
4YfA1FvEWacmvULW7YFc2vI89c+3kg66Mx9jjd7KUDu9evf1IqfCD+DCYUxJj+Mt
5kP3lJMg5zzBGOnheaLKXtn+rxjReTVs4DA9sc73RO1uETAOCMrNI1lQDQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG9OtP3VqAouATAWMVUeau5nyUixMB8GA1UdIwQY
MBaAFPk1apbnTqLXK2VFyHx50hLXKnveMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UVnFsdWRPb3RjclpVWElmSG5TRXRjcWU5NC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvOWY0NTlmLTI2NGQtNDZjZS04N2Iw
LWNiYjdkMmJmNmZhMS8xLzEtVFZxbHVkT290Y3JaVVhJZkhuU0V0Y3FlOTQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UyLzlmNDU5Zi0yNjRkLTQ2Y2UtODdiMC1jYmI3ZDJiZjZm
YTEvMS8xLVRWcWx1ZE9vdGNyWlVYSWZIblNFdGNxZTk0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZoU
946Ff3cQz7LBKNBKKltkFUfqkoiw/6ucSSXQOsZlRDk/+JchkMgN2x83qWikeK3/
z9a2L5UqvXzLdz4dGkvmi6f77FOMJZmrnCMXqpR6Z295B6e6fx+S7+o5cG1I+e90
NulTegN6OyRusZFN1BF949MQa/GOrTXr4bti3KhPJTMYlqFMX70eyGzzOst1jyHO
hg6wujud/bzq8G8mBKH9TYt72CxuT1VDGFw1LcdDxtG2g4I8l6KC2t1Z+RRW9p98
5dskWUKBh4GC4HlbRTOCNlHG3rvFYm73BclhVV4Lb72S8goxhzxX7I9MOoZLtMSU
S1elHD5cydhQI+Ao7A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 21:04:10 2026 by rpki-client