Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: nrR+cslWZpglZtVkp0LzVnuzhOdaJzLtLm4QNVjUujs=
Subject key identifier: CE:0E:2A:0E:42:7C:BC:12:6F:13:8F:DA:D8:A5:82:90:99:06:ED:77
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 019D98F408C23145867B0D6FF90741A9F929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:00:22 +0000
Manifest this update: Fri 17 Apr 2026 01:00:22 +0000
Manifest next update: Sat 18 Apr 2026 01:00:22 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: kzWVGvlimAgtz+kXEymTbWHOBFvd7Bw3V3zHuGFqEvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:08:c2:31:45:86:7b:0d:6f:f9:07:41:a9:f9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Apr 17 01:00:22 2026 GMT
Not After : Apr 18 01:00:22 2026 GMT
Subject: CN=ce0e2a0e427cbc126f138fdad8a582909906ed77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:f9:05:aa:53:33:b3:98:16:8e:13:10:30:
45:9e:f1:7e:b4:62:db:a2:9e:9b:5c:04:bb:ff:28:
06:63:20:fc:f9:63:e9:06:a2:ce:59:78:4a:46:93:
61:e1:76:14:cd:17:14:40:30:1d:62:5b:3f:07:2b:
0e:0f:14:5e:e4:f1:fb:69:3f:18:99:63:6b:bb:4a:
1d:b7:26:f5:66:44:9a:01:a6:e1:e7:3b:9c:90:1a:
e9:00:69:89:21:8c:65:84:9b:20:ab:2d:78:e3:8e:
43:05:7e:78:d6:43:36:65:0a:31:0a:3a:0f:b7:0a:
56:6f:80:43:96:2a:72:4f:7d:bf:a4:36:32:59:27:
83:05:f1:29:fc:db:4a:f2:73:b3:fe:b3:aa:a7:46:
41:4b:2d:01:9c:b7:49:fe:bd:e9:3a:27:57:2a:76:
a1:56:f1:7b:a9:85:81:85:1e:ab:04:e2:7f:b9:c4:
e3:75:74:7e:6f:3f:55:cf:4e:2f:01:39:4f:29:b4:
09:cc:e2:aa:39:a3:e3:3f:4a:52:6d:81:f5:74:d7:
75:c2:8c:f6:7b:f9:94:a8:bc:0c:a6:0f:13:31:f3:
85:d4:0c:cb:4d:91:cd:c3:5f:85:d8:5f:28:6c:ec:
90:95:22:13:39:7e:5a:da:d9:82:07:9e:c5:2c:7a:
75:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:2A:0E:42:7C:BC:12:6F:13:8F:DA:D8:A5:82:90:99:06:ED:77
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:44:74:50:1a:f4:80:0d:e0:a5:83:c0:4e:f7:b8:7e:8a:f1:
58:6b:3f:1e:da:52:a2:e7:2d:f8:82:9c:02:10:ee:9e:f3:1a:
3f:c0:89:7e:63:0d:32:46:c9:e9:a1:c0:19:9f:bf:38:0b:55:
c2:12:2d:3b:7f:ed:58:02:59:e0:9d:c1:7d:dd:d4:07:1a:3c:
22:97:ec:5d:a2:6f:8a:a5:79:d2:06:c8:5c:e3:5e:0b:30:72:
d8:d0:8f:70:ea:4b:13:a4:db:67:fe:07:8c:48:ca:00:f9:c2:
a9:53:12:ab:5d:9e:4d:a6:91:5d:96:f2:7e:0b:c8:95:a0:3d:
97:8d:1b:51:f9:b7:30:8b:be:38:b7:fa:30:f1:16:da:5c:17:
31:a1:24:38:6d:2c:dd:97:69:7c:4f:61:f7:c2:c5:a1:89:f5:
83:6b:c8:2a:37:23:be:8a:09:0c:8e:b2:6c:69:28:b0:b6:89:
e4:81:64:9f:4e:cb:c0:a8:70:97:ac:7a:e4:74:fa:51:dc:1c:
79:e2:4d:22:3b:01:40:3f:06:3e:03:47:c9:7c:cb:51:35:ba:
fa:75:b8:1d:f9:c9:d2:14:ab:dd:36:e0:ca:d8:bf:23:fc:4f:
19:e2:2c:50:77:bd:9a:d0:19:39:19:1d:57:b7:e0:5f:b2:5a:
cb:51:36:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:09 2026 by rpki-client