Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier: NT5WZwDIADte+faZ0uvQP5EDT/6n1T9/c+w2Wp2++OQ=
Subject key identifier: D1:12:CD:EB:A6:F4:44:62:13:78:ED:6C:AC:C7:4E:59:FE:E2:5C:64
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer: /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial: 019D9A3E960C15DE04D789C85A8EEA5BEA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 07:01:25 +0000
Manifest this update: Fri 17 Apr 2026 07:01:25 +0000
Manifest next update: Sat 18 Apr 2026 07:01:25 +0000
Files and hashes: 1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: srSXrv2r0BheW9pinVuU7bUYu//69HWAdFmNE4s2xCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:96:0c:15:de:04:d7:89:c8:5a:8e:ea:5b:ea:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Validity
Not Before: Apr 17 07:01:25 2026 GMT
Not After : Apr 18 07:01:25 2026 GMT
Subject: CN=d112cdeba6f444621378ed6cacc74e59fee25c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:95:6f:3e:61:b5:2c:f7:b4:0d:ea:89:7f:cb:
2c:dd:bb:17:fe:16:97:35:c9:7e:ca:b9:d8:78:7d:
c8:be:43:da:57:65:e4:aa:ca:2e:0c:78:e8:17:e0:
c8:61:b3:c2:66:da:bb:aa:56:9c:b5:ae:dd:ce:69:
81:4b:3f:c9:6e:4d:11:a3:7a:b1:17:6c:54:0a:ab:
05:03:ab:84:88:83:f8:06:c2:fc:5e:1c:99:bb:b4:
a9:ba:7a:3c:cb:cd:f1:c5:30:e3:82:60:13:23:b9:
8a:3c:97:ff:38:77:58:f1:06:df:5b:a8:ca:02:cd:
0e:6e:ff:9a:e7:30:04:86:dc:6e:b0:62:24:40:c3:
a9:d1:04:53:70:0d:86:af:da:5b:42:fc:e2:0e:9d:
22:19:ab:48:0c:09:53:50:89:52:a5:8b:76:1f:83:
da:56:2c:4d:b5:d3:84:47:59:7e:d5:34:59:67:50:
62:d8:3e:7f:5a:fb:5c:c1:64:e4:e1:9f:a5:b3:16:
72:e3:e6:07:c2:a6:a7:df:b6:b2:95:d5:b0:6e:c7:
bb:03:13:a7:a3:28:61:93:57:05:41:81:f3:03:21:
10:b3:aa:54:11:e8:dd:3f:47:ab:0b:1c:32:a6:04:
be:ec:86:3c:af:5d:32:b2:6c:f4:20:bf:d8:df:f0:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:12:CD:EB:A6:F4:44:62:13:78:ED:6C:AC:C7:4E:59:FE:E2:5C:64
X509v3 Authority Key Identifier:
keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:6c:59:49:2d:30:aa:ec:e5:1f:ce:ef:29:3c:ca:a0:69:
92:d0:61:15:0f:67:6e:81:74:5d:62:10:2c:cd:ec:4e:fc:2e:
27:6f:29:8c:94:56:a8:92:91:b9:90:ec:74:c3:3e:8d:b0:2d:
da:af:cd:1e:6d:cf:c7:d5:be:56:5b:79:20:ef:0f:8d:b2:6a:
78:81:a6:0f:31:b7:f2:9c:03:ba:98:58:b7:3e:a8:94:44:6c:
a9:9d:fe:f5:03:d0:a2:91:72:8d:72:d7:a8:b6:18:18:e5:c4:
94:74:20:71:e8:c4:1e:fd:8f:27:f3:f8:35:1c:28:4c:74:b4:
e5:78:e8:54:0c:5b:ca:e9:88:74:4b:17:7a:39:9d:89:4b:2b:
db:33:41:23:db:d6:d0:3a:d7:93:a9:cc:2b:db:be:4e:1d:fb:
01:51:fb:8d:d2:3d:4a:a9:31:ae:f9:88:e2:05:91:25:7b:73:
df:26:32:13:4c:bd:8f:40:37:f3:0d:53:89:0b:84:6d:21:2e:
2b:39:fe:12:73:4d:d4:c1:d5:93:d6:8e:07:a2:9c:cd:57:5a:
42:ee:6e:cd:1d:ff:a0:3b:e2:c5:af:76:5b:ef:8b:9f:4b:41:
d6:ef:1f:54:2c:78:28:37:5f:7a:08:a5:27:83:17:6b:44:22:
14:63:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:49 2026 by rpki-client