Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
File: c4i9uc1_a6So9hjFpCp2quiSWc8.mft (raw, json)
Hash identifier: 18VTON4HShMFhhT0LSDeTXZkP+EIAPyRe6VxRY7WkGQ=
Subject key identifier: 1F:E4:9B:33:11:2F:FB:2B:1B:74:6E:A7:88:90:8D:86:4D:00:B0:DA
Authority key identifier: 73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
Certificate issuer: /CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Certificate serial: 019D98F50AD673A583BEC4E37A383F8B98EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:28 +0000
Manifest this update: Fri 17 Apr 2026 01:01:28 +0000
Manifest next update: Sat 18 Apr 2026 01:01:28 +0000
Files and hashes: 1: c4i9uc1_a6So9hjFpCp2quiSWc8.crl (hash: Ul50HGa1zUF8TdTvkK5uoIJZG8+2IQxDCOrbDXfVzDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:0a:d6:73:a5:83:be:c4:e3:7a:38:3f:8b:98:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7388bdb9cd7f6ba4a8f618c5a42a76aae89259cf
Validity
Not Before: Apr 17 01:01:28 2026 GMT
Not After : Apr 18 01:01:28 2026 GMT
Subject: CN=1fe49b33112ffb2b1b746ea788908d864d00b0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d8:3b:9b:10:79:5e:d0:15:e7:c4:83:2c:40:
fb:e1:78:c5:1c:c0:c9:5e:73:f6:60:a9:a3:94:20:
2a:9c:91:f9:50:44:4a:9c:6f:e4:0c:4b:cd:fd:85:
4c:56:9d:9e:ec:ca:8f:8d:8e:1a:9a:c0:f0:9d:2a:
08:3a:11:13:2b:53:31:41:2a:53:1c:de:55:82:7b:
28:a5:ed:58:3e:ab:00:49:83:f4:38:c7:68:56:51:
bf:ed:2d:af:c3:c0:d5:5c:44:e0:b2:d8:c7:be:30:
f4:dc:65:4d:c4:bc:b5:c1:a0:23:3d:c9:79:c3:4a:
7e:d1:1d:a5:15:e7:e0:92:83:8e:56:26:8e:57:d7:
b6:5e:2c:19:e5:b4:f2:bc:da:1d:fd:71:f7:ab:61:
97:2e:3a:11:b9:f4:53:9d:27:50:0d:ea:ce:ac:71:
5f:36:05:d6:e7:f2:07:34:5c:aa:f1:8b:ad:90:da:
ff:9b:cf:65:dd:22:12:6e:d8:16:88:d4:a0:13:fc:
21:26:29:a1:b6:96:08:f5:74:4e:d6:0d:b5:fc:1c:
8b:08:1f:2d:92:b8:fd:3e:4b:f4:a4:d2:ee:83:07:
84:76:3c:af:25:5e:cd:72:0e:3c:9b:8f:7a:f7:11:
5d:70:a8:06:ba:58:ea:cb:e0:49:3a:09:be:0f:60:
e6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E4:9B:33:11:2F:FB:2B:1B:74:6E:A7:88:90:8D:86:4D:00:B0:DA
X509v3 Authority Key Identifier:
keyid:73:88:BD:B9:CD:7F:6B:A4:A8:F6:18:C5:A4:2A:76:AA:E8:92:59:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4i9uc1_a6So9hjFpCp2quiSWc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23e440-865e-4f4f-9fc9-108d5b148f0c/1/c4i9uc1_a6So9hjFpCp2quiSWc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:07:5d:f2:5f:21:a3:13:50:23:e1:ab:29:22:c8:13:5b:
ef:64:ff:51:34:c9:d0:18:f9:a0:9c:12:02:1b:32:65:85:17:
70:b5:c2:c0:87:18:e3:fc:80:69:94:4a:4a:99:68:e6:4d:37:
e1:e2:04:ad:05:59:9c:d4:f4:fe:f9:95:62:b1:c2:2f:fc:49:
23:81:a6:8b:48:3d:fc:90:cc:af:52:a9:7c:82:6c:e2:b6:f6:
b4:37:6f:ab:88:82:5e:59:99:da:67:73:68:de:aa:30:6f:1a:
63:6a:ae:4d:fe:1e:66:90:60:07:1f:97:bb:e2:e5:d5:cf:f7:
d5:55:01:18:ba:45:d6:51:18:9b:85:04:1e:30:bb:97:df:1d:
0a:4b:bc:e2:a2:1d:bd:5d:db:df:53:44:13:e9:56:9e:ec:01:
b2:e7:6d:d1:e6:41:f3:48:a9:1d:ed:15:20:dc:2c:45:a8:af:
3b:c8:61:72:e5:99:34:92:a1:e6:a1:59:1c:7a:d7:9e:fc:93:
3c:f5:ca:4a:3e:ac:8a:f6:30:7c:d6:76:9d:8e:91:f4:c2:af:
4b:f5:ee:69:cf:78:6d:05:5a:ec:92:c1:35:2a:c9:02:d3:2e:
df:d2:0e:3a:3e:0d:eb:dd:58:0a:7e:08:d1:21:30:16:c1:e7:
8d:fc:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:03 2026 by rpki-client