Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File: msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier: oDUkBrsoFjI0g/mYcM7HmADTNvuOOS9ul7ZZhk2ABOM=
Subject key identifier: EE:35:F9:74:D1:32:54:E3:81:BC:B2:AA:67:20:15:62:E6:44:29:F8
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer: /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial: 019D98F44901E1014CC2DD112B5FF741CA00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:00:39 +0000
Manifest this update: Fri 17 Apr 2026 01:00:39 +0000
Manifest next update: Sat 18 Apr 2026 01:00:39 +0000
Files and hashes: 1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: TtGqScot1BaepsbnaSLGgt7jrNVlOF0scP3b+VVaaaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:49:01:e1:01:4c:c2:dd:11:2b:5f:f7:41:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Validity
Not Before: Apr 17 01:00:39 2026 GMT
Not After : Apr 18 01:00:39 2026 GMT
Subject: CN=ee35f974d13254e381bcb2aa67201562e64429f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:60:23:c9:f8:cb:5d:f6:05:f9:35:3e:e8:
bc:64:75:75:68:fa:af:45:6e:3e:64:3e:82:a7:1b:
94:45:f0:22:ee:0e:f3:31:15:1b:54:0f:21:da:4c:
ae:31:43:5d:2c:93:62:06:a9:d5:6e:87:61:42:18:
fe:12:41:eb:ec:72:8e:f8:2b:0b:64:11:b7:76:86:
25:96:84:3a:d8:54:f7:5b:ff:7c:49:2b:02:2d:0e:
61:9d:ef:ce:99:12:f1:05:15:0e:17:39:5f:58:00:
89:ff:79:50:89:1c:71:4d:25:d3:2a:f7:07:a7:6e:
85:d2:dd:21:f4:69:3c:71:b0:dc:64:64:d7:b3:82:
f2:61:07:68:9d:88:de:b7:15:39:1b:0b:70:5c:f5:
73:86:70:f1:92:f2:27:b9:9a:cd:72:ae:a5:64:93:
de:4e:ee:ce:f5:7e:45:41:ab:18:ff:fd:8b:75:b0:
b1:a4:6b:03:af:19:16:dc:b6:15:e0:2d:db:39:7a:
c2:fb:94:cf:cc:c1:8f:ad:a6:5d:f4:2e:81:c7:e9:
29:03:ba:1c:2a:4a:10:24:08:64:83:4c:7e:51:cf:
e3:73:aa:a9:06:7b:8f:45:55:c1:e5:35:9b:43:70:
47:0b:1a:46:15:f3:e9:be:db:67:aa:f3:fc:5e:f4:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:F9:74:D1:32:54:E3:81:BC:B2:AA:67:20:15:62:E6:44:29:F8
X509v3 Authority Key Identifier:
keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:08:03:ca:09:68:96:b9:56:f1:ad:7a:26:e4:fb:49:60:ea:
1d:c6:1a:99:6c:2d:50:32:9f:d7:48:67:3a:2c:0c:e8:ec:1b:
1c:7f:0e:f4:5b:08:88:ce:b9:9b:01:df:0a:93:aa:61:df:ff:
ea:de:46:14:9b:ca:7f:39:3f:c2:c3:b8:21:bd:c9:15:79:20:
a4:aa:8c:a2:c3:95:de:d4:10:dd:45:05:0e:1f:0c:05:97:a4:
d9:c1:2f:35:81:67:8c:ee:eb:ea:1c:61:c4:f1:8c:1b:24:98:
e4:6e:e4:75:46:81:6e:6d:7e:7c:ca:d9:80:ac:0c:04:5e:35:
3b:b3:b1:4e:80:e9:c4:9f:41:67:ba:00:d9:83:fb:e4:2c:fc:
47:fa:fa:ec:14:f8:3f:5b:bb:b3:d0:f0:4b:6e:a5:e6:75:3b:
7d:7e:4a:15:5c:55:9c:8f:c0:83:ad:25:1b:0a:9e:96:9e:93:
85:eb:8a:4e:e1:2b:ff:db:44:96:d6:d5:27:99:14:be:9c:d0:
50:49:11:4e:10:9e:9e:45:bb:6d:c3:70:7a:23:96:bd:a7:c6:
bf:d3:b5:cc:c8:a2:92:81:af:69:49:22:72:ac:3f:0c:e4:46:
3d:03:51:67:14:4e:b2:28:db:d4:a1:e8:8a:5c:4e:e6:05:ae:
47:40:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:21 2026 by rpki-client