Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File: 1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier: pYe/4k+LSb//KHzouZyoU0EHF3WiH9hN4zy4+hwRAd0=
Subject key identifier: 2D:28:2F:43:D2:73:CD:C7:6A:89:D3:97:65:AE:38:2B:FF:70:92:D2
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial: 019D999915FC16B95DE6EDD2CB53D23E690C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:39 +0000
Manifest this update: Fri 17 Apr 2026 04:00:39 +0000
Manifest next update: Sat 18 Apr 2026 04:00:39 +0000
Files and hashes: 1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: 6VWpZUpyUe7hWs8imRi3osGcv80iZSXBFX0vVTRw+Eo=)
2: J6FmNDAxHRgFsssLSzgzQh53r1Y.roa (hash: 9kmfubQa+S1khPjpZARKisbPrmjL4y5wvcmzrFU7yFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:15:fc:16:b9:5d:e6:ed:d2:cb:53:d2:3e:69:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Validity
Not Before: Apr 17 04:00:39 2026 GMT
Not After : Apr 18 04:00:39 2026 GMT
Subject: CN=2d282f43d273cdc76a89d39765ae382bff7092d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:95:68:ed:b1:d0:15:93:b3:bc:3e:d8:d7:
fc:92:f2:8f:64:0e:e8:c3:27:47:f8:ab:de:78:23:
d0:14:80:1b:15:96:48:af:77:71:e5:13:13:1a:0b:
dc:ad:76:4a:8a:52:10:14:ad:6b:5f:ba:81:9d:de:
45:c4:59:fa:73:3f:7a:85:61:f0:66:87:0c:71:02:
11:99:8c:e2:6e:21:50:98:6b:d1:04:94:5b:8e:69:
b5:37:90:21:0d:39:a6:d2:5c:3e:11:47:e9:56:7a:
93:81:cc:cf:cf:9b:05:8d:66:66:f8:09:18:bc:89:
4c:f9:fd:c7:f8:ae:e7:24:6d:0e:7b:30:27:39:d5:
19:3c:7f:28:46:b1:a1:cf:11:df:a0:c3:f9:0c:6a:
00:21:e5:95:9e:c9:9c:04:36:8f:a7:0d:68:b5:1d:
e6:87:9a:f1:ac:55:dd:3d:d7:d9:b1:27:ae:37:ca:
2b:ec:1e:a8:a1:34:62:66:59:5d:e2:a1:36:7c:ac:
c5:a1:b7:e9:46:dd:ea:78:37:3e:9d:db:96:b6:bd:
05:66:5c:16:ce:f0:a1:80:9f:47:26:25:ba:2a:f0:
be:3b:6d:09:c4:cb:64:c4:07:1d:ea:81:6a:a0:7f:
ea:a6:54:62:6a:5d:9b:6d:eb:f7:19:f5:43:26:d5:
7d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:2F:43:D2:73:CD:C7:6A:89:D3:97:65:AE:38:2B:FF:70:92:D2
X509v3 Authority Key Identifier:
keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:55:c5:59:48:f2:01:dd:fe:03:34:a7:9f:57:34:55:4f:03:
cc:d2:17:40:76:86:d7:3c:27:bb:82:98:67:e1:f2:f9:23:ac:
5a:45:41:40:90:62:ac:e1:50:0a:25:58:aa:a9:c6:87:d3:48:
8b:cd:dc:a7:c6:a6:92:dc:9b:6c:e1:53:05:6a:b6:e2:34:57:
96:96:b9:69:7e:21:29:9a:73:20:a6:4a:88:14:d3:fe:ad:dd:
84:9b:da:20:e5:1f:66:b0:55:67:61:c2:c3:bc:91:db:20:44:
88:49:a9:6e:ab:f6:5a:9b:c3:7e:84:58:93:6e:54:f0:d2:2a:
95:2d:3b:af:41:0d:a7:9e:c6:da:b8:03:4a:21:b8:b4:18:e0:
e3:6f:8f:70:61:fb:0f:ee:b1:18:04:71:58:37:ce:d4:88:2d:
00:94:65:51:fd:5a:e1:9c:25:24:eb:47:72:30:50:a6:30:a5:
15:53:a3:4f:9c:a0:c9:23:76:6f:ea:26:c4:b2:f8:3b:2e:7d:
ea:cd:bb:33:7d:82:dc:1d:a7:81:31:43:6b:95:b7:86:dc:28:
fd:d3:c9:3c:99:5b:7c:86:d7:1e:2b:74:42:c7:b1:1f:3f:3f:
3b:47:be:02:f4:e9:81:45:35:15:c7:bd:0a:d8:5b:ce:6c:77:
26:68:db:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:28 2026 by rpki-client