Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
File: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft (raw, json)
Hash identifier: 9ST39tSQU6USUA5U/EoB7n3J8yH/+xsrQY6mmGPgP7A=
Subject key identifier: 5B:82:12:D7:51:18:30:DA:55:45:A2:CC:9B:A2:15:D5:6D:97:3B:F8
Authority key identifier: 32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
Certificate issuer: /CN=322d6d4be163123242185dd451f14777974f7c62
Certificate serial: 019DA29C75D9527975F02F0EC661FABCC3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
Manifest number: 0904
Signing time: Sat 18 Apr 2026 22:00:55 +0000
Manifest this update: Sat 18 Apr 2026 22:00:55 +0000
Manifest next update: Sun 19 Apr 2026 22:00:55 +0000
Files and hashes: 1: Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl (hash: a2AGDKk1MhcenPUq7lVwdJ7MYqCQEdoup8CL+X7BEI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:75:d9:52:79:75:f0:2f:0e:c6:61:fa:bc:c3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d6d4be163123242185dd451f14777974f7c62
Validity
Not Before: Apr 18 22:00:55 2026 GMT
Not After : Apr 19 22:00:55 2026 GMT
Subject: CN=5b8212d7511830da5545a2cc9ba215d56d973bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dc:a4:97:f0:13:e5:68:d3:aa:44:84:70:bb:
38:64:94:e5:7a:cf:08:36:38:f2:6d:c3:5d:6c:81:
8b:e6:bd:7f:62:31:4e:12:d7:8f:56:5b:3d:91:61:
8e:f1:e2:3b:8c:b5:2e:59:59:2a:c7:40:15:7b:ad:
70:61:6d:3e:3c:03:c9:f4:42:11:9d:5a:0a:cd:dc:
2b:d5:67:5a:03:f3:6b:75:10:6a:41:b0:4a:76:d3:
34:69:05:5d:55:2d:4f:3f:f3:d0:91:82:f4:05:b6:
22:25:8a:e8:cf:42:2f:0b:bb:72:5e:81:e2:10:34:
b4:fe:a1:ff:75:47:ec:03:f2:40:82:35:40:9c:ed:
65:6e:d2:30:09:9f:d4:a2:32:6e:26:fa:43:bb:0e:
7e:59:3a:35:c8:92:1e:cd:e9:11:65:15:4f:a4:66:
59:e8:99:22:e6:25:96:2c:83:bc:79:85:88:a5:3b:
9f:7a:f3:64:de:84:cb:fb:0b:f4:be:50:a0:09:71:
90:e6:97:6c:8b:7a:d7:46:93:db:d3:dd:1a:50:33:
46:6f:05:6c:5b:19:d9:d4:35:88:0d:e4:0e:1c:ee:
a8:93:fa:95:17:81:de:a1:b9:c4:fd:cd:94:91:f3:
46:8d:93:74:4b:5d:09:38:e9:45:da:28:b0:ae:a0:
1a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:82:12:D7:51:18:30:DA:55:45:A2:CC:9B:A2:15:D5:6D:97:3B:F8
X509v3 Authority Key Identifier:
keyid:32:2D:6D:4B:E1:63:12:32:42:18:5D:D4:51:F1:47:77:97:4F:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1c758c-e75b-4224-afc7-060bdba430c5/1/Mi1tS-FjEjJCGF3UUfFHd5dPfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:20:09:c2:2d:87:47:ca:a8:bf:b8:2d:ed:1f:61:76:62:6f:
8d:d8:19:b9:53:ed:07:1a:10:21:68:80:30:87:07:38:ff:0b:
91:9a:b7:4c:ef:fa:88:6b:a9:0c:73:b0:d7:0b:a5:54:57:e2:
69:6b:7e:17:ca:ae:9f:82:55:c9:ba:d3:cd:38:5d:a8:a9:03:
bd:e8:4c:b1:1f:a8:ed:93:76:d1:52:00:7b:58:3d:5f:b1:f8:
8e:51:24:8c:50:42:2e:26:16:6c:9d:a5:3e:9c:8f:47:37:64:
66:7f:55:4b:e7:66:82:e7:00:64:66:11:f8:36:8d:44:da:ac:
84:57:9f:cb:1a:ff:6c:ec:c3:5a:70:7e:9d:a8:22:86:16:ec:
47:af:99:41:1b:9d:82:ee:eb:0d:e9:e9:54:b7:45:b1:72:90:
69:e8:18:b3:55:b7:03:4f:cb:b1:18:67:3c:7f:35:bb:7a:42:
85:7c:7c:7b:84:8f:fa:8a:2d:13:87:53:94:32:ae:a3:39:cb:
d8:a9:2d:c8:fe:56:39:43:8e:f7:af:f2:1a:68:3a:0c:3c:62:
59:a1:c8:ab:75:48:1b:cd:56:32:6c:ad:dd:2a:53:4f:ea:16:
0d:bd:5c:20:7a:20:5d:9d:0f:bf:75:68:7c:9b:a2:0a:08:5a:
4a:fe:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:04 2026 by rpki-client