Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: FL7j7NpEP5F0D2yN8XdnTiGRFYN6654obqsZSI6CKfQ=
Subject key identifier: 09:1F:B6:F8:EA:D2:B0:80:0E:8C:CB:18:EA:6F:89:D4:5C:72:7B:28
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 019DA4F95EE4C6CEC7969B675382A50081F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 09:01:39 +0000
Manifest this update: Sun 19 Apr 2026 09:01:39 +0000
Manifest next update: Mon 20 Apr 2026 09:01:39 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: nVgh8ssVADXIN+M9P+lAhinoAnxyJjShBUNgMzaClxQ=)
2: 1uX0D5LWNKsugIOiHmXXeEX9QKk.roa (hash: gvHTkDV5ycG/B3qdH64yHwOTQievfqOngQJwMYqbC/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:5e:e4:c6:ce:c7:96:9b:67:53:82:a5:00:81:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Apr 19 09:01:39 2026 GMT
Not After : Apr 20 09:01:39 2026 GMT
Subject: CN=091fb6f8ead2b0800e8ccb18ea6f89d45c727b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:87:21:6e:a8:21:bb:5b:48:41:6c:8b:e8:
4d:4c:11:8e:ed:a9:af:6a:ed:6d:65:b0:0f:92:93:
45:15:68:6b:90:c5:79:11:9d:07:e9:9e:8b:30:c1:
1d:d1:96:dd:f0:61:d8:e6:a1:3f:9d:86:a4:a4:e7:
11:12:6f:7f:0f:6b:3f:e0:66:d2:c4:b8:1b:7c:c3:
a8:a6:39:a3:bb:e5:94:08:72:b7:a4:80:5a:61:ff:
b1:0e:77:eb:9f:98:3c:96:5c:2e:a1:33:4d:4f:eb:
5f:a3:39:71:b8:d3:ad:d0:5a:91:cc:44:33:7e:ec:
d0:49:d9:b6:bd:50:3f:cd:14:bf:c7:54:02:e6:79:
a0:c8:5e:78:c4:80:c7:98:86:9c:28:e8:a6:85:cc:
5e:06:bf:8f:00:9c:60:91:16:30:3a:48:4e:39:f1:
fc:51:d1:9d:3f:07:6e:3b:ed:96:7a:7d:f7:e7:96:
d0:f6:93:74:92:06:da:9d:12:24:65:0f:f0:ac:e6:
8b:aa:9e:52:55:8c:45:f3:17:88:01:8f:c7:ac:f0:
8f:5a:aa:dd:e1:d1:06:d5:27:fb:5e:67:28:e0:aa:
d0:ac:44:10:b7:a6:f4:71:e7:94:c6:e6:d4:f9:a6:
87:65:90:a8:73:f8:af:33:91:e7:16:da:c5:ab:4d:
3c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:B6:F8:EA:D2:B0:80:0E:8C:CB:18:EA:6F:89:D4:5C:72:7B:28
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:86:27:87:f7:20:1e:ab:fd:4e:41:7f:3e:96:3f:d3:8d:1b:
bd:fa:02:5f:55:2e:59:ed:29:fe:a5:8b:7b:a7:fd:06:30:13:
9a:08:f9:90:aa:72:af:d1:dc:09:66:ab:5b:00:35:0f:c8:5e:
eb:b2:83:d2:13:e0:17:c8:8a:e2:24:7d:61:6e:76:8a:3f:b4:
1d:b4:82:df:52:8c:69:bd:f1:b5:bb:c8:15:75:10:f6:cb:c5:
05:09:22:bd:29:d0:cb:0a:67:dc:66:56:91:d7:96:47:d0:5c:
bd:56:05:1d:75:bc:1e:42:2c:1f:cc:a0:fc:2d:e8:c4:b2:52:
5a:70:05:a6:8c:ce:cd:61:03:e9:06:03:1b:3e:38:9a:e5:15:
d4:b7:c9:39:e9:44:f5:7c:d1:bd:69:64:04:12:4e:2e:10:0d:
37:d5:1d:fd:44:1e:06:62:41:42:52:f7:3a:d1:45:1f:a3:d7:
ea:7a:93:9f:96:e4:4a:3c:9d:32:6f:7e:80:97:e2:6c:b3:93:
00:ad:bd:d9:be:62:de:26:e3:c9:0c:45:68:e9:04:41:03:34:
6c:6e:fb:16:e5:2e:89:1f:e1:69:d4:a9:ca:b1:5a:49:9b:81:
90:61:b7:e0:ac:43:cf:d2:ee:e0:b7:fb:3d:4f:15:1a:94:01:
1d:b3:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:13:15 2026 by rpki-client