Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File: _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier: xLLhlTWzgO28SPtENnV/w2dEjaMFE5roh8LDQY201E0=
Subject key identifier: A5:0C:AB:20:5A:25:65:94:E3:BF:AA:A4:35:6E:25:0A:84:82:A6:A4
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer: /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial: 019D99996E3786C982ABEF74E1B6689510BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number: 18BC
Signing time: Fri 17 Apr 2026 04:01:02 +0000
Manifest this update: Fri 17 Apr 2026 04:01:02 +0000
Manifest next update: Sat 18 Apr 2026 04:01:02 +0000
Files and hashes: 1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: YLCzpILimWVSbRAAhf8oPr3QyVY6XqVMdyofRl9wEFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6e:37:86:c9:82:ab:ef:74:e1:b6:68:95:10:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Validity
Not Before: Apr 17 04:01:02 2026 GMT
Not After : Apr 18 04:01:02 2026 GMT
Subject: CN=a50cab205a256594e3bfaaa4356e250a8482a6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f1:06:28:70:71:31:90:74:c1:a5:15:bd:67:
db:93:9c:12:8e:ca:33:98:f0:23:c5:4a:d4:82:81:
fa:3f:9a:05:0c:8f:84:34:ea:4c:19:2c:53:34:04:
e9:b5:f0:f3:06:d4:7d:f7:ca:19:1d:cb:43:21:7d:
7b:5e:78:da:e9:4b:94:c4:f6:70:19:e9:e0:4e:45:
d7:8b:ae:37:27:60:50:4e:10:7d:f4:b1:d3:96:53:
2f:2e:b3:7f:32:07:e3:76:e0:f0:10:4a:5c:92:b7:
28:07:bc:c3:9d:5f:b9:fc:2f:93:df:02:4b:8a:fd:
28:51:13:41:60:a9:19:f5:35:72:41:09:76:38:98:
30:99:24:10:4f:fa:52:0d:df:72:ee:22:d4:f0:6f:
01:6a:e6:6b:7c:d8:d0:27:b7:26:83:52:ed:5e:fb:
1d:b3:cc:73:8b:40:46:e7:1a:21:89:7f:a7:03:12:
c7:c3:32:b0:67:6c:b5:77:2d:6e:e8:3d:0c:69:75:
5b:6f:7c:a4:7a:4e:fd:42:d0:29:da:cc:48:de:c3:
07:d9:ca:86:e6:7b:ef:36:2c:9c:84:49:75:b5:39:
70:a2:35:d3:da:b7:e5:d9:c4:c7:14:62:8e:7c:5a:
3c:52:ef:e9:b2:86:8d:cb:cd:27:7e:0d:ed:da:9d:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0C:AB:20:5A:25:65:94:E3:BF:AA:A4:35:6E:25:0A:84:82:A6:A4
X509v3 Authority Key Identifier:
keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:26:dd:0d:65:a0:fa:00:0c:56:3e:7f:d0:11:5c:fd:54:dc:
e5:50:b9:8a:44:8d:2e:60:ab:74:1f:67:a7:68:2a:45:0e:41:
ff:27:df:6e:c1:dc:dc:9c:26:79:ee:d5:1e:72:71:63:43:81:
a5:9c:d3:d4:11:4c:6b:a0:c6:73:e0:f7:ec:d8:50:69:e8:53:
42:22:66:7f:e7:91:96:1b:7a:cf:0e:04:5b:4a:b9:b2:ff:31:
10:ca:a2:bc:95:92:35:bf:5e:ed:c9:21:4a:b0:65:e5:a3:13:
ac:05:df:91:12:54:a4:4c:db:07:9b:b9:82:94:f1:85:8f:3c:
4c:71:84:da:17:46:15:66:ca:c0:cc:3b:01:6a:8c:82:fc:97:
c5:52:c2:5f:b6:83:15:97:87:57:ca:ea:7b:f2:22:35:11:fc:
71:58:47:f0:5e:2c:f0:14:a6:38:f4:e0:a2:31:d7:73:bc:2d:
72:da:ce:63:df:ac:bf:7e:69:36:c3:fe:37:85:f1:91:75:64:
8a:09:88:18:f8:78:d4:6a:12:58:98:43:89:cf:48:24:cf:80:
cb:ac:e1:5e:fc:9f:11:50:f7:9f:ca:54:ff:3f:01:0c:8c:2c:
23:e2:f1:83:56:57:59:9d:c5:61:be:35:ab:14:1b:02:8d:2c:
8c:ba:19:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmW43hsmCq+904bZolRC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNTU0OTE5OTMxYzY3YmQyNjUwZmM0ZTBjNzNjMmZiM2Uy
MjhkOTUwHhcNMjYwNDE3MDQwMTAyWhcNMjYwNDE4MDQwMTAyWjAzMTEwLwYDVQQD
EyhhNTBjYWIyMDVhMjU2NTk0ZTNiZmFhYTQzNTZlMjUwYTg0ODJhNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPEGKHBxMZB0waUVvWfbk5wSjsoz
mPAjxUrUgoH6P5oFDI+ENOpMGSxTNATptfDzBtR998oZHctDIX17Xnja6UuUxPZw
GengTkXXi643J2BQThB99LHTllMvLrN/MgfjduDwEEpckrcoB7zDnV+5/C+T3wJL
iv0oURNBYKkZ9TVyQQl2OJgwmSQQT/pSDd9y7iLU8G8BauZrfNjQJ7cmg1LtXvsd
s8xzi0BG5xohiX+nAxLHwzKwZ2y1dy1u6D0MaXVbb3ykek79QtAp2sxI3sMH2cqG
5nvvNiychEl1tTlwojXT2rfl2cTHFGKOfFo8Uu/psoaNy80nfg3t2p3iPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUMqyBaJWWU47+qpDVuJQqEgqakMB8GA1UdIwQY
MBaAFP9VSRmTHGe9JlD8Tgxzwvs+Io2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8yMzI0NGQtNDg4Ni00NzBiLWIxZmMt
MjkwYWE0MzE4Y2FhLzEvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8yMzI0NGQtNDg4Ni00NzBiLWIxZmMtMjkwYWE0MzE4Y2Fh
LzEvXzFWSkdaTWNaNzBtVVB4T0RIUEMtejRpalpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALibdDWWg
+gAMVj5/0BFc/VTc5VC5ikSNLmCrdB9np2gqRQ5B/yffbsHc3Jwmee7VHnJxY0OB
pZzT1BFMa6DGc+D37NhQaehTQiJmf+eRlht6zw4EW0q5sv8xEMqivJWSNb9e7ckh
SrBl5aMTrAXfkRJUpEzbB5u5gpTxhY88THGE2hdGFWbKwMw7AWqMgvyXxVLCX7aD
FZeHV8rqe/IiNRH8cVhH8F4s8BSmOPTgojHXc7wtctrOY9+sv35pNsP+N4XxkXVk
igmIGPh41GoSWJhDic9IJM+Ay6zhXvyfEVD3n8pU/z8BDIwsI+Lxg1ZXWZ3FYb41
qxQbAo0sjLoZ+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:58 2026 by rpki-client