Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: WBdlLUDzmj/HaboVykp10qj7agQp/cYQz2lJwdD2udM=
Subject key identifier: 8F:89:E3:80:BA:E1:37:B6:0A:DD:A2:8C:F0:16:60:6A:DF:EA:69:B0
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 019D97E18F1188598A66AF5381E9284858B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 18C7
Signing time: Thu 16 Apr 2026 20:00:34 +0000
Manifest this update: Thu 16 Apr 2026 20:00:34 +0000
Manifest next update: Fri 17 Apr 2026 20:00:34 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: PilcpUd9nvStGfzT8W6OD0mWIdjnALulWGLy29dugyA=)
2: iTc4QiTRTDUVzAoc9HgTQBj9vNk.roa (hash: M7YGFKI/ySmqCxDcz0c66t0IiUvrgr0f2weY7qCCabo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:8f:11:88:59:8a:66:af:53:81:e9:28:48:58:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Apr 16 20:00:34 2026 GMT
Not After : Apr 17 20:00:34 2026 GMT
Subject: CN=8f89e380bae137b60adda28cf016606adfea69b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:35:70:d8:81:5d:42:73:93:2f:0f:d8:f1:
a7:41:15:b4:6e:58:58:8d:e0:64:85:09:07:8a:f9:
09:35:3b:eb:70:9e:1b:a3:a6:a4:a6:79:06:f4:5a:
09:84:88:77:36:7e:15:f5:14:b2:9e:67:d2:e7:1d:
8a:2b:ec:6b:9a:08:4d:d2:dc:71:21:b7:5e:1c:e9:
cf:8a:0a:86:8f:f3:2f:a9:74:a4:c0:82:41:0a:53:
8e:30:57:6a:9a:9a:d1:42:a4:c4:27:3a:b5:29:ba:
16:c2:e4:d6:8a:2c:6d:b5:1b:82:d1:85:c6:4a:3e:
62:52:1e:88:d2:3d:d9:44:7a:c4:aa:95:5d:01:aa:
6c:a1:a6:03:a7:9c:0b:51:6f:40:5f:56:26:f1:bc:
f0:24:1e:46:3f:37:58:2e:9f:70:a9:95:fb:12:99:
1d:ba:4d:27:e2:ea:27:94:bb:49:6c:02:61:83:31:
3b:72:8a:e2:25:3e:83:16:ee:15:4e:a2:11:f1:fe:
2f:0a:c7:3d:28:50:9e:41:46:bc:34:26:6f:2c:c2:
ac:4a:06:6d:f2:cb:ba:c6:20:2f:c5:be:87:3e:cd:
5c:46:4e:eb:70:2c:e8:29:d1:04:27:59:9b:c9:3f:
3f:b9:c4:dc:6c:1a:09:4a:6a:d2:5c:c3:58:1b:dc:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:89:E3:80:BA:E1:37:B6:0A:DD:A2:8C:F0:16:60:6A:DF:EA:69:B0
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:a6:8b:38:c3:32:72:b7:4e:fd:ee:43:0e:b0:d8:39:4a:3e:
cb:b6:d9:9a:17:2a:ad:d0:0c:62:43:4b:17:cd:e1:2d:28:df:
00:66:bd:13:46:6b:d3:5f:34:42:76:96:27:f1:4c:a6:4f:3e:
35:28:cd:d3:3f:d6:bd:d9:9d:83:a1:81:aa:70:e0:1b:4f:49:
32:b2:33:06:b2:0d:fe:2e:c5:3f:c4:85:0e:a4:46:f1:ef:fd:
06:3a:68:a1:42:cc:90:74:b8:60:32:70:6e:bf:80:47:58:8f:
7e:d3:d8:d9:28:8b:c8:e7:c4:b5:e7:cf:ce:85:99:b4:ae:9c:
f5:bd:bd:92:de:78:3a:d2:79:4e:36:a2:fa:1a:af:6f:67:31:
87:72:61:5f:58:1b:ac:0d:78:f2:23:28:15:a7:e6:67:41:dc:
4a:4c:b2:71:47:2e:f0:a9:e4:b5:5f:22:77:ed:7b:23:cf:64:
d1:b6:ff:26:a6:ef:91:7c:ec:8c:38:fa:d8:39:ad:71:60:6d:
3b:12:cd:68:6c:cd:6c:63:cd:eb:ea:2d:e2:e5:05:ff:15:a9:
ba:86:c9:ee:80:fb:59:14:87:af:4a:98:68:3b:27:64:b8:cc:
8f:ea:84:b2:e8:eb:49:10:0a:f6:87:ff:26:e8:59:cd:42:1e:
45:15:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:22 2026 by rpki-client