Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: gpPwLOPf22X0aRXdT825sXZOMYCqOQLi/zFafqOZrbI=
Subject key identifier: D0:49:9F:58:AC:F6:2F:F4:0C:C7:3B:93:9B:F6:9D:75:6C:44:5E:B0
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 019D984F80E31E454CEAC7869B653AC2903E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 22:00:40 +0000
Manifest this update: Thu 16 Apr 2026 22:00:40 +0000
Manifest next update: Fri 17 Apr 2026 22:00:40 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: YF8GfPiy0YCXA6EYYBGo+u/IDEm/cViPvyqtCxzwE1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:80:e3:1e:45:4c:ea:c7:86:9b:65:3a:c2:90:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Apr 16 22:00:40 2026 GMT
Not After : Apr 17 22:00:40 2026 GMT
Subject: CN=d0499f58acf62ff40cc73b939bf69d756c445eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:05:1d:8f:91:9e:3a:b2:ab:f1:a5:ae:42:
2d:31:6d:1e:e1:9a:11:64:2c:4b:e5:c7:87:66:83:
ea:b4:42:25:22:dc:b1:f7:58:e7:9a:c0:6a:54:af:
5f:f0:8c:05:04:32:b0:43:fe:2c:5c:a0:50:34:ae:
1c:b8:3e:23:c4:18:b9:e6:a9:99:52:88:f8:07:a3:
5e:63:9d:fd:fb:7b:8f:38:6e:67:10:8e:89:6a:1f:
73:2f:f9:fc:c3:42:8a:b2:1e:e8:d9:51:3f:d7:cc:
94:93:c2:c8:e7:bc:a8:e1:4e:ea:ff:74:e5:7d:55:
22:00:cb:13:0b:fc:48:f3:1c:b8:ad:d8:40:bc:f5:
c8:1e:cf:2d:4e:14:bb:7e:e4:ac:4f:cd:ac:87:41:
66:dc:69:ca:bf:77:e9:c2:36:29:1c:a5:87:06:d9:
38:6d:62:cd:8c:71:74:51:c3:08:83:76:3a:62:c1:
f3:23:e6:9b:49:34:31:a2:da:06:19:a3:1e:03:07:
cc:f2:f1:fb:eb:b5:f6:a6:84:76:a7:50:2a:01:12:
51:23:05:9d:49:4e:2d:b2:01:78:cc:04:f1:9a:8f:
6b:9a:48:b9:41:d4:09:37:d8:a2:85:e8:e1:03:2c:
af:0c:2c:04:c6:94:c0:34:bc:6d:45:9e:df:09:e6:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:49:9F:58:AC:F6:2F:F4:0C:C7:3B:93:9B:F6:9D:75:6C:44:5E:B0
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:b5:99:c5:f3:c1:81:7c:93:fa:28:83:d3:9b:6e:e3:1b:ff:
72:2e:76:a2:85:d2:76:b2:7b:b5:da:9f:3b:22:02:5a:8a:4a:
cc:58:b4:05:2c:60:4a:7e:4b:e9:4f:40:3e:91:0e:c6:9e:c2:
15:07:3b:f2:8f:3e:94:d6:75:24:30:4a:33:23:19:c6:dd:d2:
f9:2e:39:23:e0:d8:4a:0c:49:95:ff:5c:f7:e6:19:fc:37:cf:
a2:fb:77:25:0d:d6:83:6e:61:50:71:4c:52:8a:52:75:ee:12:
ab:64:af:b7:b3:5a:9e:25:65:8d:e5:a2:88:8c:c5:32:3c:82:
1a:6f:b3:53:59:7b:16:89:09:bf:2d:a3:b7:0c:39:84:c0:f2:
78:bf:cb:eb:26:1b:77:89:ea:00:e4:65:31:be:2c:16:fa:4b:
b7:80:97:68:bf:8f:ab:58:76:61:10:20:65:5a:5d:19:41:04:
10:ec:f4:3d:cb:59:e4:3e:3c:d9:4e:b3:76:88:37:50:a0:c9:
c7:43:0a:fe:c4:40:41:3f:e9:b7:55:ac:8c:fa:1f:8b:76:54:
2d:fb:18:57:7f:1d:6e:40:45:7f:33:bc:53:5b:74:b1:09:c6:
0b:d7:ee:dc:c3:3c:02:39:8d:41:da:09:98:6f:d0:09:37:a2:
89:7a:65:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:04 2026 by rpki-client