
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
File: enBAB-ITXIsSeANbp2QrmRWURLE.mft (raw, json)
Hash identifier: 5mqoMx/ykywJBzqtDpHkGQWeLsQ3AEk7mgod2oc4eYQ=
Subject key identifier: FE:25:97:F3:03:56:8D:49:CB:88:60:2F:DC:3C:4C:FF:21:AD:37:95
Authority key identifier: 7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
Certificate issuer: /CN=7a704007e2135c8b1278035ba7642b99159444b1
Certificate serial: 019D97E23851AD126BFCF4B9F3EF9D5D3E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 20:01:18 +0000
Manifest this update: Thu 16 Apr 2026 20:01:18 +0000
Manifest next update: Fri 17 Apr 2026 20:01:18 +0000
Files and hashes: 1: enBAB-ITXIsSeANbp2QrmRWURLE.crl (hash: YcmXMXmdqflqbtTF9En6xCHAQtUQl+V71rHjMEOXiho=)
2: n2RXCHmE2mIVVK86mWjjYTONVEY.roa (hash: vfexF/zKDf9M5bj3mCjRl7MbjkVTZHBSgi+Kjne7g2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:38:51:ad:12:6b:fc:f4:b9:f3:ef:9d:5d:3e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a704007e2135c8b1278035ba7642b99159444b1
Validity
Not Before: Apr 16 20:01:18 2026 GMT
Not After : Apr 17 20:01:18 2026 GMT
Subject: CN=fe2597f303568d49cb88602fdc3c4cff21ad3795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:3e:34:57:1e:66:5d:2c:e0:21:4e:3d:40:
96:22:5d:e8:fd:d3:8b:83:27:f8:0a:03:c0:6e:a3:
9b:cc:6a:8c:c5:5d:7a:5f:4e:d1:81:b5:7b:a3:7e:
f6:59:4d:f9:b6:fa:d1:63:77:59:02:59:9e:04:47:
3a:42:ee:e0:4f:c1:18:9b:55:14:89:62:86:09:db:
81:62:ee:7d:a3:16:65:0b:0f:8a:66:c8:38:44:b6:
41:52:cc:91:9d:b5:91:28:47:bb:a6:e3:42:bd:d0:
47:73:46:a0:5f:2e:32:7e:4f:0f:71:cf:11:cf:cc:
d0:df:5d:42:b0:c4:72:83:9e:21:f1:e4:26:46:e8:
24:38:20:dc:df:b5:d7:61:0d:17:44:c0:92:1f:c1:
c4:5d:90:e9:6b:3c:86:85:4b:4c:5b:f9:70:50:29:
51:fd:43:9d:f9:a5:52:c8:f8:48:99:68:c1:4f:5e:
fa:d9:71:05:8c:fc:fd:05:d6:7f:d1:af:9a:cb:aa:
b4:f7:09:8f:9f:c7:7c:7d:99:ba:10:07:89:0f:ac:
ab:d2:01:d2:83:70:0a:ac:9d:dc:60:01:f8:32:2d:
25:0d:79:e1:f2:ac:74:5f:c9:31:9f:69:cf:fe:02:
ef:a2:3b:e0:0c:b4:b9:55:ef:65:d0:1c:85:79:44:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:97:F3:03:56:8D:49:CB:88:60:2F:DC:3C:4C:FF:21:AD:37:95
X509v3 Authority Key Identifier:
keyid:7A:70:40:07:E2:13:5C:8B:12:78:03:5B:A7:64:2B:99:15:94:44:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enBAB-ITXIsSeANbp2QrmRWURLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/4edda4-ebc5-4434-bb91-f7710a030fa2/1/enBAB-ITXIsSeANbp2QrmRWURLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:63:92:e4:21:b0:db:48:15:45:52:19:f5:b6:5e:40:6f:
87:99:7d:ea:6d:18:73:df:52:c2:8a:9d:36:b3:e3:88:a7:a4:
60:b3:e9:00:bc:3a:da:e2:63:12:f5:85:ef:2d:0b:9a:4b:ef:
8c:22:57:4f:09:ef:ab:f3:40:94:34:da:6f:f3:ae:34:ff:57:
5c:9e:1b:a5:ed:c8:a4:45:5b:bf:ed:69:a5:e4:12:a8:2a:ce:
82:56:a5:f9:80:1b:71:be:34:61:f8:67:13:f3:69:f0:f6:c4:
67:48:33:26:c0:0e:48:ac:eb:2c:ad:83:19:ee:98:62:77:d4:
11:e4:65:c5:d8:e9:c5:cc:f4:4f:43:3f:8c:e7:27:7e:ac:a8:
3d:a6:70:20:8f:75:ce:6d:0c:47:6b:01:fe:46:b3:85:6f:be:
04:e8:a1:c2:c7:98:c8:fd:8d:28:9f:da:24:37:ef:7f:eb:23:
a6:c6:60:ee:92:50:94:43:49:75:f2:1c:85:65:12:a1:81:19:
14:a5:7b:60:6d:36:cd:3c:a5:0a:36:17:26:21:71:0f:31:9b:
88:9c:7f:cd:c5:61:0e:c5:b3:f0:04:4c:18:cb:c1:70:00:2f:
05:ae:55:d9:35:1e:80:af:19:ae:6a:f6:c6:21:fb:28:f5:12:
08:ba:92:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:27:20 2026 by rpki-client