Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json)
Hash identifier: bW18AtFdX2D1VwR/L6i/VGfDxcgG432LS3PK0tdd1XE=
Subject key identifier: A8:1D:AF:FB:3E:05:BC:8A:1F:2C:8C:F6:AF:D9:7D:85:FE:2E:9D:24
Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac
Certificate serial: 019DA29D0E512A47E8D5D12A17F1BA1B52C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
Manifest number: 0BF8
Signing time: Sat 18 Apr 2026 22:01:34 +0000
Manifest this update: Sat 18 Apr 2026 22:01:34 +0000
Manifest next update: Sun 19 Apr 2026 22:01:34 +0000
Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: f3z42CJpQRmVTznXANuniuUCGdErtQEVEWNdiyjJtUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9d:0e:51:2a:47:e8:d5:d1:2a:17:f1:ba:1b:52:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac
Validity
Not Before: Apr 18 22:01:34 2026 GMT
Not After : Apr 19 22:01:34 2026 GMT
Subject: CN=a81daffb3e05bc8a1f2c8cf6afd97d85fe2e9d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:ec:84:f2:c5:76:c4:4c:b1:4a:8c:33:ce:
ba:a3:b4:b2:c7:48:82:fc:64:bc:84:c0:eb:87:52:
24:b4:56:d7:96:a0:ec:cb:e3:8c:a9:8a:6b:99:43:
2e:b1:d3:7d:e5:bd:76:fc:4c:02:01:ee:89:5e:76:
74:61:7c:2e:2a:ea:e5:23:da:f8:fc:43:f4:b2:ee:
a7:77:1d:50:af:73:2c:36:9d:f2:ca:42:ff:68:41:
24:7e:4f:3a:7e:dd:a6:fa:ca:6e:61:eb:82:cc:da:
85:50:ec:88:f5:ca:a0:07:2a:ed:70:4c:0d:83:e6:
f7:02:80:27:6c:da:68:c8:63:2a:92:a6:bc:a0:d5:
1d:2f:13:69:cf:64:1b:7a:e9:c9:66:fa:7f:26:0a:
04:56:05:91:0c:1a:28:4c:21:d3:e2:f5:8c:a1:87:
40:6a:60:36:45:01:50:df:f5:15:16:8b:6a:ec:5c:
1c:6f:e5:62:40:10:a9:e8:f9:f5:d4:25:75:6a:dd:
e2:89:db:b3:d1:6a:eb:fa:b7:a3:c3:1a:8b:d0:a7:
38:14:94:ab:e3:c4:95:eb:c7:92:eb:06:bf:06:44:
51:3b:0b:db:87:b1:65:17:a7:19:00:cb:1f:92:a5:
f7:9b:7b:0f:f9:56:bd:64:4d:ea:14:ac:79:3c:77:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:AF:FB:3E:05:BC:8A:1F:2C:8C:F6:AF:D9:7D:85:FE:2E:9D:24
X509v3 Authority Key Identifier:
keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ee:c3:04:3f:88:b1:79:fc:a1:a7:07:98:ad:ab:de:43:51:
0f:aa:8d:e7:53:d3:01:2c:26:b4:37:57:4f:fc:17:43:9d:19:
42:00:2b:a5:74:92:2a:05:c4:3c:11:91:89:f5:e9:83:2b:35:
bb:96:08:b2:d8:e8:2d:de:31:aa:ba:00:ad:ba:11:7a:cc:28:
12:1c:d0:5c:23:c3:97:5a:1d:0a:a9:47:ae:25:11:ff:2f:0d:
4b:3a:65:1c:11:90:d9:01:7e:59:3e:a3:a6:ef:56:d8:1d:71:
c7:ed:37:8f:ed:ca:03:4e:9e:f3:b6:5e:5c:83:22:90:a0:ca:
ca:61:a7:7a:c3:75:f4:5d:42:48:4e:1d:db:75:9d:a2:87:c9:
58:13:40:16:d2:eb:b9:81:94:5f:79:06:d3:a5:c6:22:8d:6d:
f2:1d:da:df:3b:e2:15:d3:41:cb:e2:46:83:cf:23:d2:2f:ca:
01:f8:a6:a4:c7:f0:0f:ef:a5:c8:4b:a2:e1:0c:34:4f:80:64:
a1:ae:f5:66:27:fb:ec:70:ab:d6:2b:39:b0:c3:d7:39:ed:be:
c4:06:4d:99:f5:5e:16:9a:d4:95:9f:cc:5e:d2:cc:b4:d0:16:
61:e0:f8:02:0a:56:10:84:09:6b:01:f6:0a:2e:34:05:9a:23:
12:29:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:22 2026 by rpki-client