Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
File: sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json)
Hash identifier: jl9ARvg5JajwoMGjvp9k1kVlACdry6WTT7bmmxG8pgw=
Subject key identifier: D1:D4:69:84:DA:BB:B0:CE:1E:79:55:D4:D7:13:96:96:59:9A:BD:E3
Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
Certificate issuer: /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Certificate serial: 019D9B195B6F694AFE77E5B4D13D8D5E7B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 11:00:23 +0000
Manifest this update: Fri 17 Apr 2026 11:00:23 +0000
Manifest next update: Sat 18 Apr 2026 11:00:23 +0000
Files and hashes: 1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: MEaZimiLETnhJDLPyn78GIlSzm4vrxRBkZMIzTTLi18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:5b:6f:69:4a:fe:77:e5:b4:d1:3d:8d:5e:7b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e
Validity
Not Before: Apr 17 11:00:23 2026 GMT
Not After : Apr 18 11:00:23 2026 GMT
Subject: CN=d1d46984dabbb0ce1e7955d4d7139696599abde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:72:d6:4b:c3:25:48:3b:ed:99:ad:a4:20:
85:ec:71:fd:cb:2a:b6:a3:75:48:14:42:71:fc:e1:
c9:67:39:ef:79:a9:cd:7f:a2:c1:00:d8:8b:d2:ce:
fa:50:ff:96:6c:81:2c:14:a3:65:66:59:5e:48:d9:
41:5e:93:0c:a3:0d:2e:84:b6:c9:2e:cf:4c:34:3d:
cd:89:ce:2f:32:75:be:9a:29:34:4e:e1:ec:9e:86:
1b:b2:71:bd:60:a5:50:2f:6a:ac:f9:c8:be:ed:ff:
ee:10:74:71:3f:e4:e3:22:e0:0f:ad:7e:7c:08:33:
b2:a0:16:4c:5b:44:22:ef:74:57:c2:86:c8:bc:c0:
b4:e4:34:b4:c1:6e:82:76:f2:58:41:e7:20:80:76:
85:8a:9c:d6:e4:23:9f:1c:c4:e0:a3:f9:29:37:a4:
54:2e:ac:42:c8:8b:1f:9f:e3:30:a8:33:e0:00:ae:
dc:df:b4:c4:e1:f7:0d:81:46:4a:ed:87:e7:7e:0a:
19:fe:81:11:89:2c:21:5e:91:a3:56:58:90:1f:f3:
04:e7:b1:53:dc:19:e7:4b:b5:75:7e:64:a2:66:51:
ae:27:c6:38:e6:e7:73:23:25:f0:a7:7b:1d:b0:a9:
ed:1d:eb:66:56:63:ea:80:d8:6e:20:e0:9a:4f:2f:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D4:69:84:DA:BB:B0:CE:1E:79:55:D4:D7:13:96:96:59:9A:BD:E3
X509v3 Authority Key Identifier:
keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:a9:ed:4b:73:3b:0b:cc:66:db:95:8b:ab:d8:88:a6:a0:a5:
97:bd:bf:5d:9a:25:2e:fa:71:0e:7d:ca:5c:db:7d:13:16:b3:
8b:89:40:b3:1d:54:11:83:f6:dd:16:6f:01:49:dc:39:0c:22:
39:72:06:e7:4b:3d:ff:cc:56:73:45:2e:0d:59:e3:44:b6:1c:
10:cf:41:7b:ca:9e:f7:1e:05:d0:41:5a:c2:0d:94:c8:6d:59:
8f:95:59:46:c0:bd:ae:6f:1c:e9:a4:d3:ea:75:16:1b:71:93:
3d:3a:d2:14:8b:b2:6f:a2:c5:2a:8a:e7:19:4e:d4:28:17:5c:
64:9c:f6:c1:c0:4a:dc:6e:0c:bd:4d:7b:6e:9e:03:13:f1:ed:
d7:bb:e6:69:5f:e6:29:cd:7c:d8:7e:92:25:27:a3:50:bd:bf:
63:b3:e4:13:d2:68:40:5d:fd:9f:e7:3e:a0:4e:4a:79:20:58:
06:da:65:b6:a1:61:44:24:5a:42:34:f5:35:11:f0:1d:94:6e:
dc:b7:e8:3a:2e:03:69:55:ee:00:2f:dd:1a:b6:55:85:e8:ce:
1e:5e:c3:23:12:e0:e5:29:01:81:92:a5:da:05:ed:f6:d7:8f:
f0:6a:3f:30:59:30:6a:97:4f:19:81:a1:7a:9f:3a:a1:79:7d:
25:b0:28:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:40:03 2026 by rpki-client