Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
File: H38fQMjrspNo9ug7-d3QZ14H1O0.mft (raw, json)
Hash identifier: EbolXCNCDsnlKtO91SEIgwFFkvT+pM8oAOtgbUN0rXk=
Subject key identifier: BA:43:E8:9D:2E:38:BA:4C:32:18:82:A4:44:E7:FA:F6:85:60:12:E9
Authority key identifier: 1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED
Certificate issuer: /CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
Certificate serial: 019D9AAB82EB0C924E8F97E0720B97203D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
Manifest number: 1182
Signing time: Fri 17 Apr 2026 09:00:24 +0000
Manifest this update: Fri 17 Apr 2026 09:00:24 +0000
Manifest next update: Sat 18 Apr 2026 09:00:24 +0000
Files and hashes: 1: H38fQMjrspNo9ug7-d3QZ14H1O0.crl (hash: 6Y+AAEncijLbNVKrAtZGhATSVrH5y5n78UZpPFmOKoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:82:eb:0c:92:4e:8f:97:e0:72:0b:97:20:3d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7f1f40c8ebb29368f6e83bf9ddd0675e07d4ed
Validity
Not Before: Apr 17 09:00:24 2026 GMT
Not After : Apr 18 09:00:24 2026 GMT
Subject: CN=ba43e89d2e38ba4c321882a444e7faf6856012e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:c0:13:94:93:cf:6c:f1:08:20:fe:db:c6:
fd:48:dc:77:29:67:4d:ee:1b:16:9f:90:1e:53:41:
12:d7:5d:81:fe:3b:f5:0d:84:12:0d:c3:08:b9:ca:
4f:d8:a8:86:7f:22:3c:76:8a:15:1c:2a:8f:ff:92:
fa:4f:3b:70:5f:3a:94:ea:78:45:a1:b1:bd:f2:72:
1a:99:44:4b:04:b3:b0:25:9d:d9:1f:63:0f:1f:48:
1b:96:ac:9b:b9:5e:be:1a:f9:e5:31:4b:11:90:da:
2d:1e:78:02:46:20:63:6e:bf:5a:75:fc:c1:62:64:
b2:ed:8e:44:e7:e8:07:4e:7c:f8:75:6e:ea:ae:3f:
2c:2a:7d:02:be:93:d2:78:95:b0:90:00:8e:a3:8a:
e2:5f:20:d1:78:da:42:b1:0d:6f:84:8f:dd:7c:c1:
6e:cd:66:0b:3f:90:d0:68:f6:1b:19:77:f7:7d:3a:
ce:3f:72:d0:85:40:ee:51:1b:57:9e:ff:38:4a:9a:
a8:93:9c:39:d1:49:51:50:a6:6f:8c:d9:9c:d0:78:
9c:a4:a7:03:69:73:e9:d9:2f:68:c7:06:0a:6e:81:
c0:cb:4c:38:ee:b9:c4:3e:eb:17:27:cd:3f:06:3e:
8f:58:db:8d:9c:68:f7:72:2c:47:dc:d8:90:7c:14:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:E8:9D:2E:38:BA:4C:32:18:82:A4:44:E7:FA:F6:85:60:12:E9
X509v3 Authority Key Identifier:
keyid:1F:7F:1F:40:C8:EB:B2:93:68:F6:E8:3B:F9:DD:D0:67:5E:07:D4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H38fQMjrspNo9ug7-d3QZ14H1O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7ed662-25f2-4a04-a7b6-777a4f800245/1/H38fQMjrspNo9ug7-d3QZ14H1O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:78:b1:8d:04:f0:62:78:fa:f9:d8:84:7d:58:3b:26:25:d1:
e5:89:48:ce:b6:39:f2:8c:af:0a:32:d0:7e:04:6d:9c:7e:20:
10:52:e1:67:9f:14:c6:aa:2f:2a:e4:1d:22:8a:60:ac:69:24:
04:13:d6:fa:6b:af:1d:73:e7:da:e0:5d:9a:d1:19:cc:59:62:
1a:f8:5f:7c:d3:f5:5d:03:63:db:1a:08:5a:46:46:a3:39:0a:
fc:ec:1e:6b:38:52:ae:e7:61:b2:b9:f1:e7:68:e1:ae:5e:10:
c7:db:d0:c8:9e:3b:8a:e9:ba:81:14:35:7e:9d:45:d0:a9:f9:
63:b8:4d:74:04:6d:36:4e:61:cc:19:df:46:3c:2f:93:36:ac:
82:f3:6d:2d:8a:c8:d5:db:65:5f:d1:6a:52:72:15:31:f8:f5:
1d:46:3f:5a:f4:24:55:de:b8:75:a2:c2:7d:ec:5b:09:df:9c:
02:17:99:36:ad:d5:33:93:ed:d3:17:29:e1:c1:d2:56:e4:bb:
21:44:ea:3d:f0:64:a3:01:83:ba:bc:01:3c:0d:a2:11:b8:a9:
38:07:ca:ea:df:b7:b1:67:c5:57:0a:86:96:60:50:52:1c:4c:
af:c0:98:f3:fb:b1:2c:e8:f7:c4:5b:d3:ae:1c:d9:33:64:9f:
bf:6c:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:27 2026 by rpki-client