Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: Uf4QufsuDRyWSVzsuqQ/dMmOjf6HnyFUGZ+BMwlZuQM=
Subject key identifier: 78:B6:45:E3:31:C9:BF:47:5B:D0:21:47:7D:B3:42:FC:FA:EF:A4:C7
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 019D99D09F25AE999D172184F81E5256EC95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0EE8
Signing time: Fri 17 Apr 2026 05:01:19 +0000
Manifest this update: Fri 17 Apr 2026 05:01:19 +0000
Manifest next update: Sat 18 Apr 2026 05:01:19 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: VRIeAY898x59dpUObvNO2tVFsY+pfeaKWsLkYnXC/Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9f:25:ae:99:9d:17:21:84:f8:1e:52:56:ec:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Apr 17 05:01:19 2026 GMT
Not After : Apr 18 05:01:19 2026 GMT
Subject: CN=78b645e331c9bf475bd021477db342fcfaefa4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:e9:59:89:8c:1e:ab:fe:74:e3:f5:b3:3f:
74:9c:48:70:80:b7:d4:fe:83:a0:78:8e:47:95:bc:
7b:84:10:0c:3e:a0:3f:7b:b9:e4:d8:66:80:10:b2:
57:9d:0a:8e:1b:a6:1b:47:ab:a1:17:4e:89:2e:84:
67:29:80:f2:8b:59:dc:ca:9b:2b:1e:eb:52:2b:35:
29:ed:59:bc:5c:73:c4:5b:76:93:b4:0f:38:58:23:
a8:b5:9f:84:2b:38:bf:70:e0:e6:86:54:2e:b1:16:
1a:c3:7f:43:e1:31:e5:ce:f2:55:63:db:67:68:f5:
21:80:56:db:95:f5:44:ee:04:21:d9:89:cd:51:12:
95:6d:04:c3:17:68:e9:3c:ef:c4:32:1c:1b:b6:08:
49:f6:10:94:c6:ff:19:7f:9e:cd:f1:b3:56:e1:f2:
b0:b3:2a:fd:d0:c5:f3:ae:ac:73:c5:d0:21:0e:e0:
c4:8c:9b:7e:19:0e:bf:ab:70:28:9a:76:78:d8:0b:
43:7a:f0:51:4a:e3:8c:6f:41:d0:d6:ab:f2:1f:45:
33:af:50:47:92:30:35:88:d0:3b:99:d2:74:ef:3f:
0c:9e:1f:75:42:67:8e:68:53:d2:60:99:3d:5c:05:
c8:9f:f5:c1:01:86:4c:cf:41:a8:bf:01:33:21:e8:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:45:E3:31:C9:BF:47:5B:D0:21:47:7D:B3:42:FC:FA:EF:A4:C7
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d1:a6:34:b5:4a:f5:af:9e:8c:b8:89:74:b0:ab:22:66:0f:
77:8d:20:14:15:f8:84:81:09:44:3f:0d:2f:4d:86:c9:27:37:
1f:90:90:38:b0:fc:90:4c:e1:23:4f:5f:03:be:94:7b:b9:1a:
0d:a4:9e:c9:ec:fe:38:79:3b:c2:bf:6e:5d:f8:35:d2:8c:39:
36:a4:59:02:fb:3f:4e:20:4b:21:e7:6f:d6:62:2f:29:37:32:
af:45:4c:97:d1:70:29:6f:6a:78:57:8b:33:ff:0b:bf:cf:1b:
24:f2:7e:a9:00:7f:03:1a:81:eb:05:b6:42:ed:7b:af:47:e3:
54:0a:c5:1f:02:51:69:a8:bb:5e:ef:2a:de:9e:e8:b2:39:06:
9f:33:e3:80:2f:2c:fe:d6:b0:a2:57:ed:00:70:17:8c:44:36:
80:33:38:da:d7:9e:b6:1e:4b:63:fe:fd:c6:2c:10:67:cd:25:
a3:db:df:b7:3d:aa:13:f2:2c:56:48:b7:ad:95:14:8c:a7:58:
af:81:86:58:1a:db:3b:4e:51:09:7b:65:1e:ec:a1:47:43:46:
99:eb:dd:71:ce:6a:55:c9:c4:62:65:0b:32:08:d7:c9:6a:af:
3e:06:ce:1b:32:6c:e0:5d:69:da:f6:bf:3e:8c:b0:b7:39:99:
d0:64:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:27:48 2026 by rpki-client