Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: 7UriOaX2hiJ0ygw8p1ckSt7qtSRLthXmbZ26s5re64s=
Subject key identifier: A7:6F:86:0A:8C:52:0E:14:E5:3A:78:2D:77:7A:7C:07:46:83:4B:28
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019D992B6B9C828DC6E34653D60CC9867BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:52 +0000
Manifest this update: Fri 17 Apr 2026 02:00:52 +0000
Manifest next update: Sat 18 Apr 2026 02:00:52 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: Jt1eUMDxjRqs19RuOhsJRZRNMXEBAxDGuYEuqzIP0GQ=)
2: OfoRzb83TiUr9JWnqSw8Nlujw1Y.roa (hash: C+NBqa/FoqkfVKSMS3H5Y1wqDnMMVE+Y4Fw4A7IWZm8=)
3: oRqwFe3VNX-nfuj7iUR3S7koSy0.roa (hash: qiTN878gqiER6fqTmD5j2cm3Ln1rDVHVTApMOMHVgtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:6b:9c:82:8d:c6:e3:46:53:d6:0c:c9:86:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Apr 17 02:00:52 2026 GMT
Not After : Apr 18 02:00:52 2026 GMT
Subject: CN=a76f860a8c520e14e53a782d777a7c0746834b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:26:c0:38:01:d0:de:13:2b:97:dc:a8:b5:
8c:06:d8:86:ca:4e:ca:30:dd:fb:60:3a:e8:64:d6:
3d:2c:c2:14:01:e0:14:b4:f4:0b:97:72:b0:2a:97:
03:86:64:14:09:5c:4f:32:b1:36:66:ea:e4:5c:02:
b6:c1:09:a4:a5:98:34:fb:2f:e9:dc:a3:ee:18:68:
0b:18:4a:17:a6:6c:aa:fb:fa:a3:d2:d2:8d:89:8a:
e8:d9:d9:73:49:71:d9:46:4c:89:fd:6a:93:b6:98:
08:0f:c7:a7:40:cb:78:58:d7:08:2d:6d:ed:d8:e8:
e1:12:4c:7b:7f:5c:d7:59:32:95:92:da:e3:3e:16:
0d:ba:3e:d3:e9:f4:46:34:4b:23:52:18:6c:73:d6:
45:19:2a:b5:75:17:59:4f:65:1e:25:72:38:6e:fb:
fe:03:0f:4b:db:21:d1:2e:aa:80:a5:2a:48:39:65:
3d:62:6d:b9:06:10:e9:e8:4c:e7:a8:30:a5:73:1d:
f8:61:60:b8:ca:94:a7:b5:54:38:92:aa:a9:ac:80:
65:57:9d:75:91:3d:c7:a1:15:88:46:d1:e1:55:87:
bc:dd:49:ce:8f:0e:b4:12:59:5d:f3:f3:56:25:7d:
e3:ee:4c:2d:89:78:e3:3f:75:2b:a0:32:7f:34:99:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:86:0A:8C:52:0E:14:E5:3A:78:2D:77:7A:7C:07:46:83:4B:28
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:06:f9:b2:63:3c:44:79:c2:ca:36:f8:c2:65:de:17:8d:d6:
ad:2e:ea:c8:1e:a5:b7:d2:9b:07:cf:14:4d:7d:c7:9a:38:3c:
d5:c7:0d:56:ca:fa:9a:60:15:36:6c:2c:aa:be:94:96:5b:5e:
fc:07:6c:3b:7f:9d:ba:81:db:36:bf:10:f4:3e:54:4a:b8:1b:
01:4c:3d:09:37:2d:f3:e2:7e:d0:5c:e2:2f:db:1c:c7:6d:73:
ef:84:dc:e9:ef:4a:17:2a:7b:f7:3d:c3:dc:be:5d:1a:97:3f:
0f:12:45:af:f9:e4:85:4b:c3:4c:6b:2b:3e:cf:92:92:9b:3b:
27:9b:46:2c:6e:41:e0:2a:1b:fe:68:c8:82:d8:2d:54:4a:a5:
7a:44:58:07:87:3d:aa:f9:39:9f:13:20:f4:ed:1a:5b:b9:71:
08:c0:8e:59:e9:2c:e2:45:2b:5c:21:8f:b1:b3:e5:e8:30:4a:
c4:65:7e:ce:fc:80:d3:93:3a:0a:75:46:51:3b:03:4b:b8:57:
a4:03:0c:92:2f:f7:14:ae:d3:05:9c:ab:e1:bc:18:1b:58:0d:
c2:dd:d8:6a:99:84:e4:4a:b0:14:9f:b8:54:95:9b:b8:ea:9a:
8b:0e:57:4d:1d:f3:0e:74:78:ea:ec:74:b4:6d:d9:2a:d2:3c:
4e:e4:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:33 2026 by rpki-client