Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File: 1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier: 33Kp7BPHHEDtSzOHfFjLJifCWFOw9K/ivEECl90lBwA=
Subject key identifier: 92:60:71:54:DB:50:F1:A9:5B:95:4E:0B:0E:C5:0F:98:41:E4:E2:A3
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 019DB133F1900CA3BCBBC847A79EAD6F3E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number: 18D0
Signing time: Tue 21 Apr 2026 18:01:04 +0000
Manifest this update: Tue 21 Apr 2026 18:01:04 +0000
Manifest next update: Wed 22 Apr 2026 18:01:04 +0000
Files and hashes: 1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: 3cebZnUygzYJGKnh5g1YOsf2KoXYOlckh817eb0UONE=)
2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
4: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:33:f1:90:0c:a3:bc:bb:c8:47:a7:9e:ad:6f:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Apr 21 18:01:04 2026 GMT
Not After : Apr 22 18:01:04 2026 GMT
Subject: CN=92607154db50f1a95b954e0b0ec50f9841e4e2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:11:23:e0:1f:c7:3a:21:d7:b2:e9:cb:c8:
04:e2:b4:10:14:79:67:b0:b4:bc:aa:e7:18:bd:45:
b1:86:00:e6:ac:02:93:ea:eb:db:5c:72:57:19:14:
62:a0:1d:33:21:45:1a:50:4d:e8:2b:2d:c6:96:1f:
37:c1:e2:31:31:bb:0d:c8:ef:2d:0b:98:b7:62:30:
a7:b0:99:c8:d5:e6:e4:c8:50:7f:a8:26:22:6d:98:
2d:4d:54:ea:25:f4:87:3b:d0:6f:ed:9f:1e:f0:66:
9a:8b:0f:7e:57:8c:18:ac:c8:c5:1a:4e:02:ff:8a:
ce:ff:55:ba:58:8c:f1:84:4a:52:c6:63:c8:84:3d:
b4:c9:63:70:a2:63:19:a3:8e:23:d5:4a:43:cd:59:
91:a2:a7:57:5a:2b:9b:ae:1e:c3:fc:19:c1:02:a3:
a6:42:22:a5:9a:ec:a2:3d:ed:b2:a8:1b:62:b7:27:
c4:80:90:23:eb:a0:fd:37:cc:5f:91:dc:0b:6f:e4:
29:75:ee:34:17:7b:f7:d8:86:c1:75:92:82:4b:e4:
04:1b:74:59:1c:3a:83:ae:37:84:34:cf:0c:31:de:
42:77:83:9d:5a:2d:10:d6:de:00:3f:43:b0:71:8c:
74:23:f4:03:2b:11:a7:70:57:0b:02:68:47:f2:8b:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:60:71:54:DB:50:F1:A9:5B:95:4E:0B:0E:C5:0F:98:41:E4:E2:A3
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0c:41:19:26:7a:7a:d4:f6:54:b3:04:cb:84:e9:bd:a3:84:
12:80:0c:90:93:96:47:b2:a7:c4:a3:e5:67:11:d8:a7:d6:7b:
e7:f8:1a:bc:f5:5d:55:80:cd:a0:fd:a5:7f:6b:b2:02:6a:e1:
1e:13:e0:10:af:12:88:d6:22:98:b9:f9:27:1a:ca:e8:c0:7e:
ac:cf:ee:b5:6e:61:1d:ee:d4:83:90:fc:c5:29:32:d0:08:30:
93:f6:82:93:4a:2f:d8:46:89:0d:9a:1b:05:d9:7b:4b:53:75:
51:e9:92:a2:59:d2:5a:96:46:d4:4f:db:64:80:e7:2c:92:0b:
67:a4:a8:bd:f2:e9:a8:e2:c7:cd:5f:54:18:c9:87:a1:a6:86:
b5:0c:9b:19:12:8a:b5:ed:dc:66:97:ea:13:cc:9b:b1:0f:b6:
7a:6a:c4:ac:4a:4e:dc:79:1e:d3:a8:e6:66:ea:f3:4a:52:96:
f1:77:fa:00:9e:e4:c8:1c:1e:77:eb:ae:aa:8d:b0:d0:e6:b9:
7c:f1:6e:e5:7f:36:11:1a:fc:03:89:2f:dc:16:b8:e3:b1:b4:
ff:c6:1f:bb:be:dd:56:25:3b:c1:cd:de:16:9a:65:42:d3:82:
2e:90:79:a9:40:65:ab:7b:4d:ae:76:ec:a1:e7:3a:9e:c2:93:
e9:88:d0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:36:01 2026 by rpki-client