Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
File: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft (raw, json)
Hash identifier: YXLB5bu5ewPIUc8rFSgnouc2XdbUIMHJbB5/gXrXPEc=
Subject key identifier: FF:F5:8C:7A:32:6F:6A:6F:47:4B:B2:49:18:45:C6:FA:CC:8D:67:38
Authority key identifier: D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
Certificate issuer: /CN=d425900312ff3bda4d2f896f64df65646fd9c251
Certificate serial: 019D9A06B329917DE34563B5CFC4E273AA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:23 +0000
Manifest this update: Fri 17 Apr 2026 06:00:23 +0000
Manifest next update: Sat 18 Apr 2026 06:00:23 +0000
Files and hashes: 1: 1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl (hash: c4NEb5ni41+GNPSqAsmiuWjJeJK5J5js2SOxfpHBv3I=)
2: 1Kg_Ulab4sB3FtCcoo1l5PNO7rw.roa (hash: c8c2ZCfFSRIW6FylRlfxyknjH4TvpagO5fNnP9Ygg7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b3:29:91:7d:e3:45:63:b5:cf:c4:e2:73:aa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d425900312ff3bda4d2f896f64df65646fd9c251
Validity
Not Before: Apr 17 06:00:23 2026 GMT
Not After : Apr 18 06:00:23 2026 GMT
Subject: CN=fff58c7a326f6a6f474bb2491845c6facc8d6738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:77:52:8b:4c:37:9e:60:96:97:ee:40:cf:
e1:5d:f9:6b:bb:37:c0:22:b7:56:17:10:e9:6d:8e:
c5:e1:43:60:d0:88:69:1d:2c:aa:9a:79:8d:a2:23:
4f:85:cb:23:8a:d6:e0:87:05:9a:5c:85:42:17:28:
94:fc:02:00:78:df:37:13:6d:ea:83:4f:ca:95:f4:
d2:c6:5f:fa:f6:60:57:e6:c7:74:0a:57:3c:9a:f6:
f4:24:37:ee:96:88:0a:a6:73:da:17:00:27:69:69:
d5:35:37:f2:47:3f:39:30:44:fb:a0:00:e0:84:12:
d9:9b:89:3c:84:4d:10:ba:28:8b:93:ed:f1:cd:60:
9a:7b:b2:5c:3f:90:99:dc:57:ca:92:da:af:1e:10:
35:3e:73:85:70:70:63:91:c9:ab:f6:8c:2c:ec:cb:
b3:a9:e2:97:a2:62:68:6f:3a:14:34:eb:af:25:39:
93:4e:8e:91:02:31:85:b4:23:10:38:e1:60:89:e6:
3f:94:c8:7a:0f:2b:24:00:57:96:d0:b9:14:ee:6b:
54:cc:30:e7:ac:55:ab:78:2b:4c:3e:fc:56:bd:ed:
f8:78:93:d9:c5:f7:1c:6a:87:d1:46:b0:93:52:c9:
96:83:13:f2:fa:d3:9c:a8:ce:9f:8e:7b:41:32:94:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:8C:7A:32:6F:6A:6F:47:4B:B2:49:18:45:C6:FA:CC:8D:67:38
X509v3 Authority Key Identifier:
keyid:D4:25:90:03:12:FF:3B:DA:4D:2F:89:6F:64:DF:65:64:6F:D9:C2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5bf826-921e-44f5-af33-676b428925ab/1/1CWQAxL_O9pNL4lvZN9lZG_ZwlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:be:e6:f6:0c:9e:25:32:37:9b:31:22:e1:e1:ef:9c:2b:5b:
7a:cb:5c:c3:17:6f:1a:29:de:b0:5a:bf:a8:79:1c:28:e2:b8:
e0:c8:52:cb:84:a6:9a:ff:5f:e6:2c:5a:7c:0c:66:95:38:b4:
45:b4:45:5f:d0:57:6d:97:de:ed:c2:52:b2:0b:c1:de:54:d5:
7e:e6:58:04:27:96:bd:26:4b:a3:2e:17:5b:97:56:ed:47:45:
0b:81:4f:44:b4:7e:cf:82:13:62:10:52:aa:c3:93:ae:8d:2a:
6a:1b:5d:e9:2c:0d:57:86:80:25:ef:ec:d7:d4:48:89:c4:67:
5e:8c:bc:07:4a:f0:29:2b:23:66:01:95:11:e4:ee:d5:33:8c:
e6:9e:d4:f4:9f:eb:63:18:67:f0:25:24:7d:0b:52:d5:2b:93:
74:ed:09:93:58:d3:07:36:6c:1d:5e:f9:0d:5a:4e:db:05:c3:
e1:ed:01:d2:66:54:62:71:c8:64:89:22:56:4c:80:22:9d:bb:
75:f7:75:42:40:9f:77:3b:19:29:46:bb:4b:df:de:00:d0:83:
bb:63:6f:08:4c:17:39:9e:a0:c5:bc:ae:7f:7c:fa:43:1f:e3:
f5:f4:f3:bf:d8:f4:43:e8:47:52:29:da:a0:1f:bc:2f:89:c9:
82:d8:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:59 2026 by rpki-client