Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: w9ishsrxN+iYHb2Yi0DCDh/cRT6gRQZ/I6r4WBqgHX0=
Subject key identifier: F8:4F:CC:B3:5A:0C:43:3F:14:4A:73:F7:9B:D5:3D:64:07:6E:08:D3
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 019D9886DDBC3A095F7409223AF3680AE5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:01:08 +0000
Manifest this update: Thu 16 Apr 2026 23:01:08 +0000
Manifest next update: Fri 17 Apr 2026 23:01:08 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: CG4qJ5xSehTrb3RyjIvohheyQfN5MAVUWw/Z8FCY/DU=)
2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:dd:bc:3a:09:5f:74:09:22:3a:f3:68:0a:e5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Apr 16 23:01:08 2026 GMT
Not After : Apr 17 23:01:08 2026 GMT
Subject: CN=f84fccb35a0c433f144a73f79bd53d64076e08d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:61:a7:ba:0f:9a:8f:e1:d7:cf:79:22:d4:fb:
f6:56:07:e0:98:6f:30:6d:19:5c:37:bd:42:2c:fd:
e6:0e:62:ee:b6:7e:d7:00:49:17:15:a9:ce:7e:9f:
e9:a2:cc:27:23:18:37:b3:e8:05:e1:ad:9a:2b:de:
30:b3:2d:f6:1c:cc:65:a7:24:2b:bc:7b:47:54:18:
bf:4b:51:dd:78:25:f9:d5:c8:eb:e3:d3:0a:fe:86:
4d:31:f7:b5:03:33:bf:dd:ba:c2:75:9d:bc:d9:1d:
ff:49:e3:86:77:45:ec:91:8b:92:06:c8:42:34:bc:
2d:e7:fa:64:97:77:28:63:56:82:42:cb:b2:f8:5b:
6e:bd:0c:3f:f9:d3:9e:d8:ce:e6:2c:2d:51:02:6b:
df:33:db:c5:4a:7d:29:ae:70:93:d6:6a:a9:e5:55:
5a:db:a1:b9:4b:fa:9f:88:82:34:d9:74:fa:15:84:
96:74:b8:6f:f0:14:6c:66:10:d2:29:1a:da:c1:fa:
bf:a7:7e:fa:a6:1a:6f:cf:e4:23:4d:d0:46:38:c9:
21:99:17:64:2c:3d:f9:15:fa:82:c1:c4:44:2c:79:
6b:7c:d9:2a:34:80:83:f0:1d:f7:f2:7b:c4:e0:97:
73:52:89:c7:a8:dd:73:a3:12:5f:98:8c:45:47:6e:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4F:CC:B3:5A:0C:43:3F:14:4A:73:F7:9B:D5:3D:64:07:6E:08:D3
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6e:e7:16:44:b1:b7:54:20:6d:32:44:a2:42:14:8f:fd:bc:
f2:99:f6:48:2e:94:ee:5e:48:77:73:09:aa:d1:33:51:30:14:
df:c8:49:39:74:7c:78:9a:37:76:3f:8d:23:88:ba:6e:d9:98:
c4:6e:20:2b:3f:cc:50:b3:5a:e9:ea:8e:3a:df:8c:fa:42:7a:
a7:c6:bb:5d:c5:d6:8d:fa:ef:bc:9f:64:a8:21:03:7b:dd:6d:
b3:e2:f4:fd:50:a7:8b:c0:77:ae:d2:f3:9c:e6:ef:6e:3f:95:
0f:c8:91:96:9e:aa:90:ed:36:8c:6d:fc:3e:0d:7c:2b:28:31:
2f:0e:39:3e:9e:67:10:b3:02:86:3d:9a:70:ff:f2:95:1a:46:
6f:8e:53:14:de:db:1b:c2:95:43:1e:a5:b0:d5:11:d3:9f:d7:
61:d8:cd:84:80:56:c8:73:09:64:68:20:c2:55:c9:a6:c4:a4:
49:bc:8c:5f:4a:ae:28:d0:63:77:68:8c:84:62:e7:07:93:ea:
3a:2a:97:7e:d1:fc:18:81:23:73:06:53:ce:5a:f5:22:de:13:
45:64:4a:67:47:34:81:06:11:11:9c:e6:62:95:c7:dc:b4:a4:
78:d9:cf:ea:d0:de:d2:c1:0e:c2:62:61:29:ab:31:5e:3d:18:
30:83:ae:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:28 2026 by rpki-client