Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: n411FMjUvdLlr/kyRntHgmYZzS+XIYcNMjgRQA91MiU=
Subject key identifier: 01:99:6F:21:AD:89:D0:F6:41:41:40:A3:5A:BD:94:6A:ED:3A:1F:00
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 019D9AE3364A1F5CE4080A4701D52FF4E72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:15 +0000
Manifest this update: Fri 17 Apr 2026 10:01:15 +0000
Manifest next update: Sat 18 Apr 2026 10:01:15 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: r7OSm3XAodwN+kx0bWL5RWqgmlInRo5nTRCqYaqH+00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:36:4a:1f:5c:e4:08:0a:47:01:d5:2f:f4:e7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Apr 17 10:01:15 2026 GMT
Not After : Apr 18 10:01:15 2026 GMT
Subject: CN=01996f21ad89d0f6414140a35abd946aed3a1f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:9a:e6:d7:c6:17:92:da:65:6a:6c:ec:d5:
f0:88:62:73:11:0f:e2:15:21:92:34:8c:b4:9d:e3:
ee:61:83:2f:7d:4c:d5:8a:e7:c1:a6:19:23:6f:ca:
4f:69:3d:d7:54:3d:45:8c:96:b2:6e:b1:82:6a:48:
27:36:45:a5:72:c9:d0:b9:90:1c:c0:76:14:f0:54:
97:1c:35:41:7f:7c:8c:1f:b0:e2:cd:d6:96:0c:6c:
85:56:6e:c6:16:5e:41:6e:a4:aa:2a:90:3f:19:25:
41:b6:cd:4e:02:d1:1c:93:1c:c5:0f:1b:20:7d:da:
95:3e:f6:7f:cd:f6:cf:6d:a9:e9:e0:a9:63:ac:4b:
b6:35:0f:db:a1:75:fb:96:1d:02:44:07:31:02:bf:
6d:ab:b3:a7:2e:2c:3b:05:0a:bc:3a:d4:8e:89:e5:
b3:e6:08:7c:1a:af:d9:87:5b:dd:4c:ba:42:d3:6a:
04:aa:2d:f1:d4:81:d0:aa:99:bc:d8:88:b1:ba:8b:
3d:18:12:e8:21:b3:7a:ef:c4:1d:da:2c:50:3a:cf:
96:f0:fe:6d:4d:da:55:f7:6d:2e:31:e5:05:95:69:
ba:80:c8:11:4e:29:94:67:7a:44:31:3c:1b:97:6c:
38:4f:26:4e:6b:13:9c:f7:f8:40:ae:f1:06:ab:64:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:99:6F:21:AD:89:D0:F6:41:41:40:A3:5A:BD:94:6A:ED:3A:1F:00
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:02:c1:9c:0c:23:3c:2b:90:51:63:bd:89:02:5a:89:53:01:
28:c0:93:2d:3d:ec:f8:3d:87:7a:f6:ca:3f:40:2d:e1:a6:f5:
63:f2:72:1e:52:56:39:ba:b7:fd:dc:00:d0:8b:51:e0:02:1f:
68:e2:7c:d0:b7:dc:ef:32:76:a2:d1:fd:e1:ce:44:0c:79:1f:
3f:ca:e5:04:66:ae:77:76:1b:f3:1b:a1:52:f5:db:16:03:86:
04:c1:22:f4:9d:dc:c7:7e:26:16:31:2e:28:b3:b1:08:1b:d9:
9b:23:14:24:5b:53:4a:a5:18:0b:ca:97:c1:cd:8f:49:25:fd:
7b:2a:f8:59:bc:ef:ac:21:fc:e7:26:0f:c5:d5:8d:27:0c:39:
aa:44:d4:01:1b:9c:58:35:fa:c4:58:9b:36:c7:b7:d1:db:0b:
2c:0b:54:bf:22:69:c8:c0:50:fb:28:30:35:08:94:6b:13:5d:
e5:fe:69:5b:83:ff:79:4f:d7:1c:cb:d4:27:eb:98:ca:a7:97:
8a:aa:c1:0b:c6:b8:f2:54:13:09:a6:4b:2b:35:0e:8a:dc:de:
cf:ac:1d:46:70:fd:c6:71:75:6d:95:d6:24:2e:bf:5b:9c:cb:
57:69:91:1f:b1:25:71:6b:55:4c:fa:ba:03:81:b0:21:71:d0:
f9:56:61:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4zZKH1zkCApHAdUv9OcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl
NDExMjAwHhcNMjYwNDE3MTAwMTE1WhcNMjYwNDE4MTAwMTE1WjAzMTEwLwYDVQQD
EygwMTk5NmYyMWFkODlkMGY2NDE0MTQwYTM1YWJkOTQ2YWVkM2ExZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDya5tfGF5LaZWps7NXwiGJzEQ/i
FSGSNIy0nePuYYMvfUzViufBphkjb8pPaT3XVD1FjJaybrGCakgnNkWlcsnQuZAc
wHYU8FSXHDVBf3yMH7DizdaWDGyFVm7GFl5BbqSqKpA/GSVBts1OAtEckxzFDxsg
fdqVPvZ/zfbPbanp4KljrEu2NQ/boXX7lh0CRAcxAr9tq7OnLiw7BQq8OtSOieWz
5gh8Gq/Zh1vdTLpC02oEqi3x1IHQqpm82Iixuos9GBLoIbN678Qd2ixQOs+W8P5t
TdpV920uMeUFlWm6gMgRTimUZ3pEMTwbl2w4TyZOaxOc9/hArvEGq2TprwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGZbyGtidD2QUFAo1q9lGrtOh8AMB8GA1UdIwQY
MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt
MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4
LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGALBnAwj
PCuQUWO9iQJaiVMBKMCTLT3s+D2HevbKP0At4ab1Y/JyHlJWObq3/dwA0ItR4AIf
aOJ80Lfc7zJ2otH94c5EDHkfP8rlBGaud3Yb8xuhUvXbFgOGBMEi9J3cx34mFjEu
KLOxCBvZmyMUJFtTSqUYC8qXwc2PSSX9eyr4WbzvrCH85yYPxdWNJww5qkTUARuc
WDX6xFibNse30dsLLAtUvyJpyMBQ+ygwNQiUaxNd5f5pW4P/eU/XHMvUJ+uYyqeX
iqrBC8a48lQTCaZLKzUOitzez6wdRnD9xnF1bZXWJC6/W5zLV2mRH7ElcWtVTPq6
A4GwIXHQ+VZhWA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:06 2026 by rpki-client