Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: HqbHWopTfZtfVm3cfOzTt2ZmkgN8S8+Ary9Tt+IE/8M=
Subject key identifier: 4A:F0:EA:DE:8D:4F:4D:06:46:0C:00:70:A7:4C:30:28:25:15:13:15
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 019D98F43FA83A356EDE73D98821B70A3B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:37 +0000
Manifest this update: Fri 17 Apr 2026 01:00:37 +0000
Manifest next update: Sat 18 Apr 2026 01:00:37 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: lrIeKN6RFS4xXrRPZBJ3P6eb5/txjVKVNvhlW2SKdak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3f:a8:3a:35:6e:de:73:d9:88:21:b7:0a:3b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Apr 17 01:00:37 2026 GMT
Not After : Apr 18 01:00:37 2026 GMT
Subject: CN=4af0eade8d4f4d06460c0070a74c302825151315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:4c:b3:62:15:1f:6b:13:65:c6:bf:d7:b0:
df:07:a3:a2:02:f1:39:0d:87:26:c3:2e:0f:7d:44:
eb:b7:6d:36:f6:e4:ed:84:8a:0d:ba:be:f0:0f:12:
d5:12:a5:a2:31:1a:4f:74:10:d7:46:d8:b4:88:b1:
f1:08:8c:65:5b:85:61:96:ae:fa:02:91:8d:e1:d6:
78:ed:85:82:2c:10:e1:82:16:9d:28:16:57:f2:38:
d2:bb:2f:94:f1:10:de:b8:21:b9:e5:19:df:3b:3c:
fd:20:c6:7d:f2:65:05:d8:5f:13:9b:bc:29:db:fa:
c0:7d:0b:0e:e4:2f:01:23:ec:ec:85:fb:97:60:bc:
d7:42:ca:32:69:27:06:5c:b2:1a:e5:d6:34:d7:2e:
44:18:31:5a:b3:bc:b0:c9:54:74:71:7a:ba:c7:f1:
ea:c5:13:8d:a8:5e:f8:7b:18:ff:c7:89:84:7b:93:
54:c9:53:36:28:05:33:68:68:d6:f7:9c:eb:58:7f:
eb:08:d9:86:1a:b0:74:6e:24:04:63:ee:3c:4a:7b:
3a:59:7c:d5:88:c5:a1:e4:e6:48:5e:ab:3d:dd:a6:
08:10:ee:54:a9:03:39:c7:27:2c:ba:b3:7e:66:98:
ae:71:e4:a8:d5:b6:60:ab:a3:21:bc:75:eb:67:a6:
1e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F0:EA:DE:8D:4F:4D:06:46:0C:00:70:A7:4C:30:28:25:15:13:15
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f6:7a:a3:ae:4b:a7:2c:21:c0:89:48:a4:08:53:e1:f3:ce:
7a:29:76:8d:6f:91:58:e9:51:8b:92:61:ea:05:74:77:77:03:
3f:a1:4f:bf:d6:49:71:5c:6b:10:04:46:35:b9:81:ac:7a:1a:
16:06:4b:64:c5:87:1e:6b:d5:5c:d0:be:61:2d:9c:61:2e:ff:
71:5c:22:4a:fa:72:d6:19:30:20:07:c7:5d:78:17:8d:d5:d3:
25:41:69:93:4d:ef:43:4b:70:d2:8e:f0:eb:0a:69:0b:4e:2e:
a1:cc:c3:6b:33:b5:40:09:d8:e2:15:18:ca:ea:f4:7a:f2:79:
be:e6:4d:1c:3e:50:92:49:e4:93:a2:7e:fc:e2:80:37:e3:b0:
e4:27:bd:9e:37:17:f0:01:02:5a:0f:80:c4:2b:17:f4:0d:ec:
18:ff:ea:2b:22:bc:fb:23:34:96:84:4f:2c:39:7a:f8:86:71:
bf:a0:27:c2:8d:a8:ba:96:3f:f6:a2:12:6c:ab:4a:ad:69:79:
5b:e6:c6:1b:dc:76:89:44:93:66:cb:c0:cc:2d:cc:20:a5:14:
43:48:59:08:6b:b8:c0:db:e9:1c:f9:28:76:58:3c:e0:45:0c:
7b:d5:f1:d8:92:9a:b4:c7:4d:73:ce:34:39:95:7d:0c:1e:9e:
f9:72:60:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:57 2026 by rpki-client