Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: Wz1rIEekvXMsuIeP/68FocduggtluqqxFXdujfP/gA4=
Subject key identifier: 6B:31:0D:ED:A1:2C:87:15:9E:97:4D:53:53:02:46:D5:E2:28:74:9E
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 019D98F4DE9A415B3079FA6A59666F5777A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:17 +0000
Manifest this update: Fri 17 Apr 2026 01:01:17 +0000
Manifest next update: Sat 18 Apr 2026 01:01:17 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: 3IhZZjPlmB18OflJyRexCRKhMDFKWszR3YU1l3rJpgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:de:9a:41:5b:30:79:fa:6a:59:66:6f:57:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Apr 17 01:01:17 2026 GMT
Not After : Apr 18 01:01:17 2026 GMT
Subject: CN=6b310deda12c87159e974d53530246d5e228749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:9e:73:cf:39:15:5b:16:1c:34:c8:24:fa:
ae:b6:2a:07:0b:1b:80:cf:5e:c7:1a:8e:99:13:d1:
07:48:96:08:a0:d4:68:98:95:68:33:24:d4:8d:75:
67:84:38:32:82:7b:f5:5f:2e:1e:06:46:21:54:00:
2e:b5:2b:eb:b4:3e:7a:ed:d4:ce:a0:77:22:27:17:
17:c2:83:14:ae:2b:a4:be:ba:5f:6a:69:5e:89:88:
0c:f2:0b:fa:4f:de:87:7e:7c:52:90:05:9c:dd:bf:
36:e5:af:97:48:ff:90:76:9b:27:11:9a:9f:23:30:
12:68:b2:c0:e2:7f:a8:d3:85:ee:cb:6d:d9:20:08:
ce:85:51:4f:45:d2:4a:04:31:3e:7d:70:4e:04:b9:
12:5e:97:aa:26:5a:5c:6d:85:8d:96:d4:68:51:1c:
37:24:17:47:24:68:a2:4b:af:17:6b:eb:cf:51:9f:
57:95:38:6d:54:e3:6a:4e:b8:39:13:d5:7a:7c:9a:
6b:9b:ed:e6:c8:d3:1e:de:9a:fb:7c:55:d4:f6:6f:
da:f7:5b:3a:31:16:30:8d:86:49:85:5f:73:7b:b5:
f5:1d:c6:5d:7b:d9:40:57:53:10:10:ff:bf:fa:ec:
af:31:5b:0e:f7:7e:f1:bc:0d:8d:46:dd:1d:8d:66:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:31:0D:ED:A1:2C:87:15:9E:97:4D:53:53:02:46:D5:E2:28:74:9E
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bd:5a:96:01:08:b5:d3:27:60:79:1c:7d:68:46:70:35:ba:
9a:b2:77:4d:6a:79:da:70:3d:50:7d:1a:e4:0a:f1:a4:b8:e6:
c2:d0:3a:b5:78:64:20:f4:2c:51:f5:4c:14:f2:e5:29:a1:03:
5b:a5:cd:9d:04:cf:a4:65:a5:5f:b9:5f:c0:2b:b1:7a:7d:77:
35:38:a9:69:1c:35:d5:e8:e4:36:85:2a:9d:ac:28:0d:bc:ba:
f9:59:b4:d1:8f:ae:65:c1:ea:79:ce:8e:09:0a:be:75:ea:87:
15:dc:0e:3a:7c:56:f6:3e:55:bb:3b:e4:74:5f:5b:3a:26:64:
66:12:dc:e2:d7:25:f1:3a:4b:2e:85:01:9a:b4:60:61:f0:d4:
e3:8f:cf:31:53:9a:92:b4:4b:3f:41:6f:68:8e:be:f4:c0:da:
24:9b:98:b5:4c:f0:29:fd:15:7e:05:d8:c5:c2:31:5c:73:15:
d8:17:b1:a1:0f:6d:cc:4a:c8:6d:8e:40:95:e2:21:a0:4a:05:
c2:1c:1f:2a:da:0c:49:0b:a7:92:98:7a:2d:46:96:b7:29:85:
e3:a8:a4:48:dd:7b:82:82:b1:cb:6e:00:90:df:33:ea:dd:32:
70:77:59:91:08:60:87:a5:bd:cb:81:4e:e7:1c:d6:c0:40:2c:
7e:09:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:25 2026 by rpki-client