Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: CfvIJg4D9MxvOunjdDTpnCX27to8WbKY5bI5xj9kBbs=
Subject key identifier: 67:A1:D9:73:C4:0B:61:36:A7:52:D2:69:F6:75:E2:7C:31:B8:88:B5
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 019DCD87224CAFEB14EE67E39F16F1D60310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0C94
Signing time: Mon 27 Apr 2026 06:01:18 +0000
Manifest this update: Mon 27 Apr 2026 06:01:18 +0000
Manifest next update: Tue 28 Apr 2026 06:01:18 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: Q9z/WjSeVm+T3UAUTEeRP9d/lZvuVvCpp+UJzXzrMwA=)
2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:22:4c:af:eb:14:ee:67:e3:9f:16:f1:d6:03:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Apr 27 06:01:18 2026 GMT
Not After : Apr 28 06:01:18 2026 GMT
Subject: CN=67a1d973c40b6136a752d269f675e27c31b888b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:71:10:08:f9:d2:d4:15:77:76:b1:84:6e:dc:
29:e9:81:d7:c3:e7:0a:4d:ac:e4:d6:67:f7:55:17:
dd:12:1a:ff:c8:32:41:48:c7:a7:06:06:75:a7:fd:
e0:2c:ac:40:4f:e5:e1:65:ac:87:91:60:20:20:67:
24:41:17:f7:18:ba:e9:1b:16:cc:6f:69:35:2f:f4:
b4:7e:b4:01:3d:fb:d4:ab:e3:e1:de:22:a6:11:57:
63:6e:82:6c:ff:76:14:5e:a7:44:d2:76:d8:bd:10:
26:04:31:76:12:39:26:ad:74:f5:9a:a5:c1:d2:2a:
f4:e7:3c:f8:c8:ed:ef:66:22:90:74:48:9f:75:32:
9e:64:5c:32:60:b6:11:1d:cd:fe:08:43:b1:d6:d2:
b6:39:20:51:83:dc:bc:67:e3:49:10:1d:94:4e:85:
46:de:cd:11:53:4a:04:5e:ea:09:86:4d:68:2a:ed:
74:87:da:d7:fb:66:24:8c:19:1b:e3:66:71:20:86:
05:4a:41:56:46:c0:a4:ee:8b:c7:c2:82:8a:99:5c:
2e:b1:de:2b:9b:4b:50:d6:76:80:7d:5b:17:a0:d0:
2b:20:ca:57:42:4b:d8:1a:8a:63:f8:65:82:88:c3:
33:66:27:a1:87:a4:b9:a1:64:b4:40:e2:68:c7:9d:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:D9:73:C4:0B:61:36:A7:52:D2:69:F6:75:E2:7C:31:B8:88:B5
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:50:65:81:f6:fc:fc:3f:d9:aa:8a:47:b6:ee:85:12:4b:45:
f8:a1:5e:6a:23:80:c5:38:54:a8:35:72:02:e9:76:12:47:6e:
f2:6e:29:7b:25:44:fc:50:1d:9d:2b:17:d0:81:91:b4:38:20:
ca:17:5c:19:00:48:b3:fc:0c:54:cd:20:bc:f6:95:b8:fa:a3:
c2:ba:14:a2:83:82:16:f2:b0:7b:ad:d4:1b:5f:df:96:15:47:
69:fb:9e:7f:34:de:71:de:bd:a5:31:c9:8b:bc:0f:36:23:b0:
8c:e6:6d:02:cf:b8:8d:62:ff:91:5d:15:56:71:c3:e8:f3:a1:
0e:b8:35:67:3f:37:95:3e:69:7b:b0:4f:e5:1f:a9:5d:f6:d9:
3c:ba:27:2e:a3:50:52:43:76:b8:40:12:1d:83:eb:26:4f:83:
85:47:67:71:7c:da:99:d2:2b:54:13:44:02:51:63:c7:b0:5e:
38:f2:6c:6c:48:5b:2a:ea:49:09:9c:99:47:17:c7:57:ca:ff:
83:44:a1:18:d5:a0:05:92:28:8b:03:43:78:9b:8c:5a:ae:41:
81:59:26:b3:53:23:ac:98:1c:2e:b5:38:2d:f7:a4:c8:ef:ae:
e7:20:b4:26:03:fc:7b:cd:37:2e:fc:8b:de:00:29:17:32:5a:
65:3f:00:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:31:49 2026 by rpki-client