Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json)
Hash identifier: I77gwCaFGu+sI5/OImf+JWBZXIwF5P7wRdfqJ1Un1HA=
Subject key identifier: 40:7E:2C:6D:BB:F8:93:62:CE:E1:C5:63:94:2E:8F:4D:11:A4:AE:B4
Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Certificate serial: 019D9BBF11E46185A41FDF8DA9B9AB8B50D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 14:01:23 +0000
Manifest this update: Fri 17 Apr 2026 14:01:23 +0000
Manifest next update: Sat 18 Apr 2026 14:01:23 +0000
Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: zPAD0UNztkt01KV3Jh2PCaCvQvoKY29XdtqyQJWIFwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:11:e4:61:85:a4:1f:df:8d:a9:b9:ab:8b:50:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6
Validity
Not Before: Apr 17 14:01:23 2026 GMT
Not After : Apr 18 14:01:23 2026 GMT
Subject: CN=407e2c6dbbf89362cee1c563942e8f4d11a4aeb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:90:0b:be:ea:cd:e5:bd:dc:e0:07:25:24:
27:ec:80:f1:07:c3:d3:43:c4:4a:0e:c1:11:16:10:
da:24:ba:23:a4:b1:2f:61:28:0d:46:f4:c2:ba:7a:
1c:68:27:d4:c1:fd:cc:da:ea:24:fe:27:58:a3:c6:
a1:ac:54:a8:bd:60:da:5a:17:6e:e7:90:b7:79:44:
8f:e9:04:66:60:6b:75:c9:b9:f7:42:ce:28:30:f5:
4b:af:82:7f:f4:ca:31:b6:a2:f1:09:b8:fb:f6:27:
1e:c8:c0:7b:55:f1:25:ac:4d:20:68:8f:0a:7b:dd:
e8:f5:16:73:27:36:77:ad:5d:98:69:ff:d0:ca:99:
98:a5:73:1d:34:10:f0:b6:24:c6:a4:6a:e2:da:f6:
89:a0:75:3b:95:57:b6:32:43:de:7e:45:ec:0f:e3:
c7:5d:a7:90:f4:01:20:85:e8:20:cd:b5:ea:68:e2:
8d:74:de:6f:3f:65:94:1f:1d:0f:c4:0c:9e:f2:8a:
50:90:74:ea:3e:df:11:6c:9d:5e:46:27:3e:e2:ab:
cd:69:7c:04:7d:13:58:de:df:a6:b7:28:c9:db:68:
e2:ef:bc:1d:b1:62:70:ce:67:4e:8a:62:02:5e:9c:
72:13:1a:8a:04:07:71:7c:cc:03:2d:46:dc:db:0d:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7E:2C:6D:BB:F8:93:62:CE:E1:C5:63:94:2E:8F:4D:11:A4:AE:B4
X509v3 Authority Key Identifier:
keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:af:10:48:8d:7e:cb:bd:8f:7d:c8:ed:07:a3:c0:b7:41:87:
71:1e:0f:ba:72:8c:c1:a2:53:49:e6:c7:d8:60:68:77:01:c2:
c1:6f:de:20:de:7c:61:79:c4:9a:54:0b:3f:af:e7:cb:bd:45:
0e:4d:f3:5a:47:65:19:03:11:15:8b:2e:79:36:39:59:1f:05:
cf:6d:e9:2c:17:4e:7c:ed:79:d6:7e:d7:3f:bc:47:2c:c0:4e:
da:cb:fa:ef:4f:db:e0:4b:b6:48:c1:d0:df:17:76:78:2b:4b:
f6:68:1d:3d:8c:c4:74:38:99:7c:33:6c:89:42:ff:08:16:1f:
b5:9a:b5:e3:09:9a:54:51:bc:b5:23:27:bd:87:d9:bc:ae:01:
c9:65:86:bf:53:d9:5c:14:b1:d5:f3:d5:dd:4f:f7:7c:c6:83:
f8:d4:65:ec:5f:d7:1c:85:e9:08:ce:39:ba:1b:97:ad:5d:eb:
a2:b9:27:b3:12:a1:33:6f:f9:c4:03:2f:f2:cd:85:ab:52:73:
1e:ee:8e:06:3a:a1:1b:d3:a0:f3:f8:93:d1:04:28:9b:0f:46:
ad:dc:37:0b:58:ad:40:39:34:d9:5e:c1:87:d4:b3:5d:38:74:
82:09:7d:51:2f:e5:e2:82:f3:7e:0f:b3:4d:11:0b:4a:43:bb:
cb:db:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:30 2026 by rpki-client