Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json)
Hash identifier: vXBz+lodH+vc9yXSTNagrnU1tcDxAgmAPqh/xg+EjTk=
Subject key identifier: 32:31:9B:85:F2:0A:9A:49:7A:CF:5A:D5:E8:3C:F9:09:25:49:C3:6C
Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Certificate serial: 019D98F46B5251D76D9BF676F0BC5E9AF83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:00:48 +0000
Manifest this update: Fri 17 Apr 2026 01:00:48 +0000
Manifest next update: Sat 18 Apr 2026 01:00:48 +0000
Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: 4b3PxEkMyfs/mhs0iwhCeW4Ih3rIdVUfAF3TpRofSWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:6b:52:51:d7:6d:9b:f6:76:f0:bc:5e:9a:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Validity
Not Before: Apr 17 01:00:48 2026 GMT
Not After : Apr 18 01:00:48 2026 GMT
Subject: CN=32319b85f20a9a497acf5ad5e83cf9092549c36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:b7:aa:20:51:76:1d:28:ab:b2:81:88:1a:
11:d3:4e:f7:74:c0:da:3d:07:e7:10:ec:3e:77:a7:
e2:1b:28:03:19:97:c7:9c:db:7e:12:23:c8:01:73:
44:94:a5:4b:28:9c:90:8c:61:f7:06:7b:92:bf:8c:
d5:77:df:35:9a:b0:20:47:db:5b:f8:59:e0:bb:39:
d1:5b:2a:ed:09:06:67:3b:0a:2e:f4:e9:09:57:e1:
46:b1:c4:91:86:a6:5a:2d:56:d1:6f:9a:4b:55:35:
2d:8d:c4:7b:c5:d3:f3:11:6a:16:cb:e9:e9:df:87:
a0:d2:79:07:3b:74:f0:21:bc:c7:e6:24:66:d8:bf:
73:14:a0:25:cc:fc:f7:a8:40:96:99:5b:0e:ee:ea:
78:e1:b9:a6:fb:8d:48:4c:78:e5:60:1b:10:f4:0b:
d6:65:18:31:f5:5d:71:28:2a:3a:5f:a1:e4:d2:49:
ed:ff:ae:41:c8:b0:dc:6b:55:79:0d:ac:90:4d:29:
5d:bb:40:97:10:5a:d3:4e:e6:a9:36:cc:aa:4f:a9:
f4:e9:33:5a:a6:0f:5b:93:1f:a3:43:84:bf:7d:e8:
5b:3e:a2:28:d8:5d:f6:84:87:ab:dc:05:42:e0:63:
3a:b1:ba:5b:51:21:cb:eb:be:e3:46:4a:9d:fc:1f:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:31:9B:85:F2:0A:9A:49:7A:CF:5A:D5:E8:3C:F9:09:25:49:C3:6C
X509v3 Authority Key Identifier:
keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:aa:38:5b:60:17:e9:83:31:00:79:06:e4:ab:a9:e2:34:4b:
b2:dd:e0:5a:e8:d9:e5:9c:c2:a5:82:c1:88:89:04:6c:d4:0b:
11:15:cb:b2:25:a8:9c:98:ef:73:87:2b:69:f5:47:09:64:92:
76:b3:93:25:8e:12:6a:0d:36:c6:f6:0c:54:88:75:68:7a:ab:
4b:01:e4:ff:8c:16:19:a7:64:2b:9a:d4:c5:cc:00:cc:07:c0:
b7:45:db:2a:16:3e:c9:da:a3:47:0d:25:4a:40:72:68:c3:32:
f3:45:2f:3d:17:23:17:91:a7:50:3a:ac:84:d0:29:fd:15:44:
4b:ce:c5:19:03:13:72:c6:1f:bb:c2:f0:6b:82:77:f0:ca:1b:
63:05:88:a2:c9:53:21:44:e4:40:29:87:59:77:88:c7:b3:83:
83:84:22:8a:0a:f2:60:c0:e4:34:bb:c0:f7:ba:dd:0b:00:e9:
88:5b:9e:54:ea:e9:81:74:f2:32:37:1b:da:6e:ee:bd:1a:d3:
7f:ff:0f:c5:65:e0:69:a6:ae:31:c3:0e:1c:78:a2:d4:be:bc:
02:84:12:da:7f:85:a9:04:ec:d2:af:d7:8d:46:ea:f0:58:e1:
6e:f2:93:8e:f1:00:2f:16:c2:f1:18:ed:a8:87:ab:99:9f:ce:
2a:f7:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:08 2026 by rpki-client