Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: ysAweHz336sJErXcYG3e3NJcxQjUxktfxH2joVfU3Nk=
Subject key identifier: B1:6F:7D:C7:FE:1E:4F:8E:08:D3:47:16:1F:27:1C:87:BD:CC:59:3E
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 019D97742C7CEC8160521F519B643DD9BA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 18AA
Signing time: Thu 16 Apr 2026 18:01:06 +0000
Manifest this update: Thu 16 Apr 2026 18:01:06 +0000
Manifest next update: Fri 17 Apr 2026 18:01:06 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: 9KNKSeWyWj2fUSvNj8sPNLPa+OF7GLL0asaUFXNrX1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:2c:7c:ec:81:60:52:1f:51:9b:64:3d:d9:ba:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Apr 16 18:01:06 2026 GMT
Not After : Apr 17 18:01:06 2026 GMT
Subject: CN=b16f7dc7fe1e4f8e08d347161f271c87bdcc593e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:11:d7:fd:aa:be:f0:1a:8a:02:4e:e0:1d:
a3:94:63:fc:c2:11:7a:0a:13:ff:73:e6:ed:92:25:
6c:5f:3c:3f:42:fb:a6:da:c4:54:63:01:3e:66:a9:
f4:02:53:67:51:d9:28:67:fa:14:9f:cc:28:2d:37:
ae:a9:a5:67:24:ff:59:45:41:d1:46:a9:26:29:c7:
b5:24:89:86:9d:bc:89:bb:9e:0d:ef:bc:1f:ef:4e:
4a:21:ce:dc:09:93:1d:61:ed:06:ee:f3:27:fe:e0:
03:ac:f8:c5:69:35:20:5a:0f:2b:57:10:d4:70:3c:
e5:f5:65:ce:07:28:64:b6:ae:b0:f7:bc:4a:f8:ba:
f8:5a:62:92:92:6c:5d:3e:03:c9:7a:18:be:cd:c2:
a4:f2:b8:45:44:fe:aa:82:51:18:6a:04:f7:42:a2:
23:d3:f8:6f:56:4a:85:6a:c8:c2:e3:79:7b:36:72:
ab:b5:5f:0f:9f:41:2b:6d:0e:3a:af:43:29:53:ee:
f8:d1:b2:c6:7a:b0:2d:99:a4:a1:30:84:9c:e5:d1:
91:01:36:c5:f5:13:75:a4:31:96:94:a3:7e:00:e7:
c5:75:b1:4e:94:5b:9e:dc:5b:33:e6:d1:a1:9c:48:
7e:1e:6b:35:ac:5a:2d:90:a1:53:b4:6f:cc:1c:87:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6F:7D:C7:FE:1E:4F:8E:08:D3:47:16:1F:27:1C:87:BD:CC:59:3E
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:33:eb:3a:63:0e:ee:5c:b3:2d:db:a0:5f:72:8f:50:90:
39:1c:fb:00:5c:83:f6:16:ea:e8:b6:f0:dd:5a:91:4b:46:0f:
24:a0:6e:dc:43:51:08:4f:16:48:20:4d:a6:d9:5d:9c:85:ce:
93:db:d6:65:df:1e:b2:f3:94:5b:11:c4:ee:7e:13:c1:7e:ce:
82:b2:1e:4c:33:85:dc:30:b1:74:cf:63:d0:35:d0:35:85:a2:
59:a0:36:06:4b:7c:3c:67:e8:3e:0b:63:a2:09:91:e4:57:6b:
08:99:99:b2:d1:15:b5:15:1f:93:13:bd:95:78:50:6d:e3:8c:
78:30:ce:ab:94:83:e4:f8:a2:3c:c4:b7:d2:7c:1e:70:6e:7a:
5e:a1:85:58:0b:d2:8d:5c:69:d1:9f:04:d6:10:ad:77:84:cd:
65:ce:a6:c6:bb:a3:90:c1:96:c7:f5:fe:35:dc:24:85:9f:1d:
7e:42:4c:b5:44:0c:e1:f7:bf:37:bb:0b:ab:72:65:e9:e3:6c:
2d:62:ad:81:8c:d9:6c:58:2e:78:36:eb:b4:fa:ac:88:14:1c:
e6:9d:a3:9f:1c:fc:83:fd:f0:25:3f:d9:12:ab:85:07:f3:45:
71:93:a5:24:19:71:7e:7c:d5:5f:48:75:79:e3:31:65:d0:c1:
85:e9:8f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XdCx87IFgUh9Rm2Q92bpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODk0NTc1NTU1Y2RlMTRjNzcwY2JiMTgzZGE1NTM1ZDE0
NGI1NDAwHhcNMjYwNDE2MTgwMTA2WhcNMjYwNDE3MTgwMTA2WjAzMTEwLwYDVQQD
EyhiMTZmN2RjN2ZlMWU0ZjhlMDhkMzQ3MTYxZjI3MWM4N2JkY2M1OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo8R1/2qvvAaigJO4B2jlGP8whF6
ChP/c+btkiVsXzw/Qvum2sRUYwE+Zqn0AlNnUdkoZ/oUn8woLTeuqaVnJP9ZRUHR
RqkmKce1JImGnbyJu54N77wf705KIc7cCZMdYe0G7vMn/uADrPjFaTUgWg8rVxDU
cDzl9WXOByhktq6w97xK+Lr4WmKSkmxdPgPJehi+zcKk8rhFRP6qglEYagT3QqIj
0/hvVkqFasjC43l7NnKrtV8Pn0ErbQ46r0MpU+740bLGerAtmaShMISc5dGRATbF
9RN1pDGWlKN+AOfFdbFOlFue3Fsz5tGhnEh+Hms1rFotkKFTtG/MHIejsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFvfcf+Hk+OCNNHFh8nHIe9zFk+MB8GA1UdIwQY
MBaAFBWJRXVVXN4Ux3DLsYPaVTXRRLVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82ODI3MjItMDRiZS00NjNiLTkyMmIt
NGEwMzEyZmIxYTc1LzEvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82ODI3MjItMDRiZS00NjNiLTkyMmItNGEwMzEyZmIxYTc1
LzEvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgEz6zpj
Du5csy3boF9yj1CQORz7AFyD9hbq6Lbw3VqRS0YPJKBu3ENRCE8WSCBNptldnIXO
k9vWZd8esvOUWxHE7n4TwX7OgrIeTDOF3DCxdM9j0DXQNYWiWaA2Bkt8PGfoPgtj
ogmR5FdrCJmZstEVtRUfkxO9lXhQbeOMeDDOq5SD5PiiPMS30nwecG56XqGFWAvS
jVxp0Z8E1hCtd4TNZc6mxrujkMGWx/X+NdwkhZ8dfkJMtUQM4fe/N7sLq3Jl6eNs
LWKtgYzZbFgueDbrtPqsiBQc5p2jnxz8g/3wJT/ZEquFB/NFcZOlJBlxfnzVX0h1
eeMxZdDBhemPMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:46:35 2026 by rpki-client