Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
File: inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json)
Hash identifier: kb9POoVxKXflwnpEJyP2ptmWv6AwWfpxd0CKK5ioyas=
Subject key identifier: 33:12:76:F1:2F:0B:75:9C:2A:9C:C4:AF:77:47:04:9C:BB:C5:23:27
Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
Certificate issuer: /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Certificate serial: 019DA3785B1161AB024CAE41BE5D15CE6C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 02:01:06 +0000
Manifest this update: Sun 19 Apr 2026 02:01:06 +0000
Manifest next update: Mon 20 Apr 2026 02:01:06 +0000
Files and hashes: 1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: FWJSrJ6Vf1VxOJAidLfmMKWcMmUYBTzyqPy7ChMI5RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:5b:11:61:ab:02:4c:ae:41:be:5d:15:ce:6c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Validity
Not Before: Apr 19 02:01:06 2026 GMT
Not After : Apr 20 02:01:06 2026 GMT
Subject: CN=331276f12f0b759c2a9cc4af7747049cbbc52327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:4a:f2:74:bb:84:c3:10:4b:cd:3e:3a:47:
23:7f:a0:a6:72:3b:d6:21:0c:7b:4a:ea:7f:fe:9f:
fb:a1:27:11:1b:c4:cf:2c:97:e9:56:f1:95:3b:36:
a3:bb:a5:58:b3:d3:b8:e6:ee:98:f1:c0:5b:55:ae:
54:86:94:8f:b1:fd:f7:a1:f5:db:d1:e9:32:cb:5b:
21:3a:9e:24:bd:92:e2:f6:ad:79:29:90:55:38:4c:
77:6f:69:95:ff:14:2d:67:c8:8b:29:18:9f:95:30:
ef:78:2a:a9:aa:4d:9a:a4:bf:43:8a:1a:f7:9f:5b:
10:2d:8f:4b:49:a2:7b:56:96:ed:bf:ae:0f:af:25:
b1:77:f9:8a:07:80:4a:7e:51:1a:0c:4e:d9:14:6f:
83:9d:23:ed:83:17:51:f7:46:0f:81:81:c2:16:f0:
5c:bd:c7:84:17:48:66:80:2f:6e:f2:27:36:5b:5f:
5c:51:6c:21:54:f9:4d:04:a6:ca:81:b0:2e:8f:05:
c4:6d:8a:57:29:b6:c1:90:49:4e:59:6b:7a:7d:6d:
da:43:e5:8d:e1:35:19:63:1e:c0:ab:89:48:ee:a7:
f1:be:5d:7e:09:8c:89:55:d2:e4:ba:a5:cd:5a:c4:
29:29:0a:7a:61:79:b8:db:71:71:6d:09:b3:3d:10:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:12:76:F1:2F:0B:75:9C:2A:9C:C4:AF:77:47:04:9C:BB:C5:23:27
X509v3 Authority Key Identifier:
keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:68:b6:23:15:a7:e1:a1:b5:f1:92:15:6b:f8:bb:a5:a8:2d:
2b:70:fe:33:ce:60:68:4c:0c:70:27:06:f6:7d:21:2a:77:d7:
06:4f:b4:c8:98:0f:37:2e:4c:66:5c:d1:95:e7:26:56:35:26:
0e:2a:ee:1a:b8:f6:c6:6f:14:54:de:ea:43:c7:2a:2e:4a:03:
65:10:b1:2c:9b:fc:04:00:e6:e6:7b:56:7e:86:00:fa:23:c3:
94:fd:13:6a:8b:41:72:6c:bd:6c:ca:66:b5:e9:38:ce:d9:d9:
e3:ff:b7:28:25:90:ab:2d:d5:7d:b4:d0:24:40:ff:5b:ce:ce:
61:bf:13:50:72:31:b4:c2:9b:32:49:9f:d1:63:f3:f5:49:96:
3c:e5:aa:74:80:25:64:d2:f0:07:2e:94:cb:a2:37:02:c4:bd:
24:72:97:c3:bb:48:a5:a3:6d:a4:92:93:52:62:c1:09:5a:38:
dd:c2:3f:08:d4:4e:59:6f:4c:2d:54:c1:a3:8c:3e:20:c9:1c:
96:9e:12:ba:c5:46:ff:a3:f2:82:03:d6:b0:9d:77:59:42:5e:
e3:37:8e:34:0a:3b:87:db:5d:b3:b6:cf:51:3e:6c:e3:cf:ec:
24:a8:d9:07:97:c1:ac:85:e2:3b:62:b2:8c:76:78:45:22:b3:
e4:8f:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:57 2026 by rpki-client