Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: SSDNioywHUnUTyQpK6od59ZVo4bAFwdfTd8wLdUBe5k=
Subject key identifier: 69:4B:46:BB:71:1E:24:DD:B2:28:5E:6B:34:AD:BB:59:1B:5E:49:AB
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 019DA2D3490418407BD8297A8A7D11CAA077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 18C1
Signing time: Sat 18 Apr 2026 23:00:48 +0000
Manifest this update: Sat 18 Apr 2026 23:00:48 +0000
Manifest next update: Sun 19 Apr 2026 23:00:48 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: 8SpZ/N9xFnS80IMUI18N+LszclaUZYyuYODrMc0wbPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:49:04:18:40:7b:d8:29:7a:8a:7d:11:ca:a0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Apr 18 23:00:48 2026 GMT
Not After : Apr 19 23:00:48 2026 GMT
Subject: CN=694b46bb711e24ddb2285e6b34adbb591b5e49ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:a0:98:25:a1:af:d7:9c:00:51:19:59:32:
4e:43:91:30:34:18:fc:9c:84:b5:4a:4d:90:81:9b:
35:a6:4e:91:3b:c6:38:10:ef:21:03:4e:74:44:28:
d2:bf:f5:5a:78:bf:28:69:7f:db:f6:58:2e:56:49:
a8:41:00:e4:f2:28:a2:3c:64:98:6b:91:c3:f0:52:
a8:05:87:6e:c9:51:4d:a9:5b:b0:b7:d4:d4:2e:cf:
aa:14:b7:02:10:f8:cf:c0:cb:9e:1c:10:58:6f:fe:
1f:13:44:93:61:4d:76:56:27:b7:9b:40:e6:19:3c:
b4:a6:be:5b:4b:df:7f:12:18:69:da:40:3b:6b:e8:
4c:ff:d6:5f:1f:96:a2:bf:d4:28:38:63:9b:e0:33:
1c:fa:08:60:2d:2e:25:b8:47:d3:96:f9:ff:1d:ae:
67:24:c4:f7:9d:c9:4d:ff:4c:00:aa:9c:32:46:d2:
06:a9:93:c4:e2:3e:60:9f:d1:2b:eb:6b:be:bc:1a:
b4:76:31:2c:13:90:70:e3:9e:46:9d:b9:e8:1b:60:
6d:7b:92:01:a9:ec:b5:e0:56:3c:75:1f:67:25:a2:
ed:14:17:a3:0f:87:6c:6c:e7:42:17:62:62:6b:84:
fa:16:5a:29:95:dc:83:ad:8e:46:3c:ca:9d:c3:6a:
9f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4B:46:BB:71:1E:24:DD:B2:28:5E:6B:34:AD:BB:59:1B:5E:49:AB
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a6:e1:00:a3:d8:3a:95:a4:5a:08:16:70:ce:1d:71:a9:f8:
33:7d:2b:47:79:0f:b8:22:24:da:27:d8:27:73:a5:8e:bd:40:
74:cb:14:87:d7:b4:ed:c1:f7:62:24:10:78:38:a4:c5:69:d3:
c1:16:ec:1b:90:07:f6:9b:63:55:61:76:37:33:eb:f8:f9:fe:
6a:f7:cb:1d:6a:17:f9:7e:ef:f5:b4:41:0c:a3:e1:3f:7a:23:
e3:40:7a:c1:93:90:66:9c:6e:69:96:bd:66:b8:5a:72:d7:aa:
36:46:89:4b:3d:81:20:65:1e:9b:d4:65:0a:16:f9:86:f5:90:
cc:79:47:f8:e6:8e:45:14:4c:d7:39:40:70:10:92:e9:5b:c2:
ca:20:0f:2d:30:6f:c4:12:11:49:e8:fd:47:95:fd:b3:34:e6:
dd:95:61:ec:3a:fe:f4:a9:17:68:5d:17:fa:e4:82:8c:bf:7a:
81:0e:eb:01:2e:32:45:e7:a8:0f:f3:72:b5:c7:a0:54:09:81:
83:be:5c:10:5b:70:29:03:f0:9c:32:ae:92:1f:e9:3a:37:3f:
37:a0:3e:28:4a:77:16:0c:00:69:b9:e9:31:73:68:59:32:71:
8b:2f:28:34:9b:b0:d6:ae:85:12:17:a6:e1:8a:28:a7:65:40:
47:96:3a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i00kEGEB72Cl6in0RyqB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzY2ZmNjQ2YWRjMTljMDNmNjQxN2E2ZTJhMWM0MTgzYzZi
OGQzZmUwHhcNMjYwNDE4MjMwMDQ4WhcNMjYwNDE5MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg2OTRiNDZiYjcxMWUyNGRkYjIyODVlNmIzNGFkYmI1OTFiNWU0OWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSSgmCWhr9ecAFEZWTJOQ5EwNBj8
nIS1Sk2QgZs1pk6RO8Y4EO8hA050RCjSv/VaeL8oaX/b9lguVkmoQQDk8iiiPGSY
a5HD8FKoBYduyVFNqVuwt9TULs+qFLcCEPjPwMueHBBYb/4fE0STYU12Vie3m0Dm
GTy0pr5bS99/Ehhp2kA7a+hM/9ZfH5aiv9QoOGOb4DMc+ghgLS4luEfTlvn/Ha5n
JMT3nclN/0wAqpwyRtIGqZPE4j5gn9Er62u+vBq0djEsE5Bw455GnbnoG2Bte5IB
qey14FY8dR9nJaLtFBejD4dsbOdCF2Jia4T6FlopldyDrY5GPMqdw2qfiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlLRrtxHiTdsiheazStu1kbXkmrMB8GA1UdIwQY
MBaAFCPP9katwZwD9kF6biocQYPGuNP+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUt
MDIzOGM5MTBhOWJmLzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9jNDEzNzgtZGJkZi00Y2IzLTk2ZWUtMDIzOGM5MTBhOWJm
LzEvSThfMlJxM0JuQVAyUVhwdUtoeEJnOGE0MF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6bhAKPY
OpWkWggWcM4dcan4M30rR3kPuCIk2ifYJ3Oljr1AdMsUh9e07cH3YiQQeDikxWnT
wRbsG5AH9ptjVWF2NzPr+Pn+avfLHWoX+X7v9bRBDKPhP3oj40B6wZOQZpxuaZa9
ZrhacteqNkaJSz2BIGUem9RlChb5hvWQzHlH+OaORRRM1zlAcBCS6VvCyiAPLTBv
xBIRSej9R5X9szTm3ZVh7Dr+9KkXaF0X+uSCjL96gQ7rAS4yReeoD/NytcegVAmB
g75cEFtwKQPwnDKukh/pOjc/N6A+KEp3FgwAabnpMXNoWTJxiy8oNJuw1q6FEhem
4Yoop2VAR5Y6gA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:33 2026 by rpki-client