Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
File: l1JqhRIT5aY6wpR47RNnCCn8oaU.mft (raw, json)
Hash identifier: RtNgKAODENCc5MCgMCPYhSXRUQhe8JUir4fJvb9bXXY=
Subject key identifier: 81:59:8E:AB:66:B5:DC:D0:FB:C1:88:3D:13:9E:8F:25:A1:DB:72:50
Authority key identifier: 97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
Certificate issuer: /CN=97526a851213e5a63ac29478ed13670829fca1a5
Certificate serial: 019D98F5244C1A4E184163524C3F519BAE29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:01:35 +0000
Manifest this update: Fri 17 Apr 2026 01:01:35 +0000
Manifest next update: Sat 18 Apr 2026 01:01:35 +0000
Files and hashes: 1: l1JqhRIT5aY6wpR47RNnCCn8oaU.crl (hash: e0xJUWSvnkEtxQ1D87L8kPe8By0imU2DFgxpxPf8Zao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:24:4c:1a:4e:18:41:63:52:4c:3f:51:9b:ae:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97526a851213e5a63ac29478ed13670829fca1a5
Validity
Not Before: Apr 17 01:01:35 2026 GMT
Not After : Apr 18 01:01:35 2026 GMT
Subject: CN=81598eab66b5dcd0fbc1883d139e8f25a1db7250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:3c:3d:e8:a7:52:29:60:ce:13:ce:34:0b:
25:69:df:8d:ca:7a:fb:b1:d4:e3:d4:00:a2:3d:5d:
77:6a:a4:3e:ad:e9:60:31:0a:32:4a:21:81:d4:07:
a9:c9:8f:cc:e9:00:c0:57:f2:f4:84:cc:7c:79:34:
28:46:16:8f:eb:1e:05:fc:b1:5d:c2:11:0c:97:25:
e5:fb:43:ea:e7:b4:3c:7b:69:fe:3b:e2:0f:ad:8a:
f7:08:9c:c8:1a:d7:db:55:09:4a:0b:58:6d:17:78:
4c:84:02:0e:fa:a6:88:28:1a:08:88:8f:74:7b:84:
9a:e1:84:80:49:34:c9:9e:17:75:6b:14:21:d8:23:
7d:89:9f:2c:22:4d:57:97:2e:aa:b5:b7:50:6a:70:
88:9d:5d:da:e0:20:ac:b9:20:c2:4a:06:1f:2f:b1:
bb:a4:b9:25:d0:de:60:7d:c9:06:fa:ec:66:42:7e:
39:2b:20:8f:a9:d7:d2:b9:14:18:fa:a9:a1:aa:b1:
a1:9e:d7:9d:9d:1c:b5:03:97:0e:94:0b:94:41:27:
3a:56:d3:24:c5:fb:c4:68:48:a1:0e:a0:0c:e0:d8:
3f:5b:bc:d2:df:f2:2d:65:c3:4c:3f:51:6e:a2:b9:
24:9d:03:8b:a4:b5:db:50:bd:b5:45:11:96:2c:1c:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:59:8E:AB:66:B5:DC:D0:FB:C1:88:3D:13:9E:8F:25:A1:DB:72:50
X509v3 Authority Key Identifier:
keyid:97:52:6A:85:12:13:E5:A6:3A:C2:94:78:ED:13:67:08:29:FC:A1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1JqhRIT5aY6wpR47RNnCCn8oaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4be86a-0aeb-4b18-a6c4-e2dce93a4529/1/l1JqhRIT5aY6wpR47RNnCCn8oaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:db:25:4e:b2:1d:a9:5f:de:84:85:f7:65:90:fb:63:48:7b:
e7:15:87:ef:26:61:55:eb:c8:84:d1:5f:de:44:d7:b2:55:25:
be:89:6a:b1:f6:fe:b0:fc:2b:53:0e:b0:9a:ba:7f:34:06:97:
18:f7:74:9f:b8:f2:03:d2:c3:8c:8a:89:f7:a9:4f:41:0e:d2:
7b:ac:46:56:37:20:42:c2:24:1c:b3:bb:fb:6d:24:fd:d5:4e:
d7:f0:8f:2b:7c:a9:99:39:31:d3:31:5a:89:be:9a:de:e6:f1:
24:ad:55:20:85:ea:27:29:ce:eb:b4:4e:70:e1:97:b7:01:70:
b7:98:5e:5d:dd:ec:2b:73:a1:96:9d:3c:13:5f:c5:45:bd:3e:
4e:53:be:d8:cd:99:d5:70:2f:9a:28:60:48:fb:93:81:b9:65:
4e:ef:52:37:82:30:9f:00:f8:9d:aa:2a:aa:9b:3e:72:d5:3b:
16:88:93:be:d7:7b:f7:59:99:c2:e5:a7:a2:b1:2f:b2:30:3a:
c0:67:cf:77:1c:0f:f8:69:13:f4:41:36:95:b8:94:a3:35:04:
1c:71:61:27:3e:d5:2e:a3:1f:37:87:ec:27:73:46:8e:fc:f2:
88:be:00:1c:91:13:47:a8:30:42:91:f2:24:60:90:55:45:f8:
fe:7c:ab:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:40 2026 by rpki-client