Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft (raw, json)
Hash identifier: PuCv8q6hEQgKrWO3xXD4UkHuwoYUTFAmDv700if+4E8=
Subject key identifier: E8:9A:DA:8B:86:28:19:96:CD:1B:78:9B:F0:12:D6:71:BB:F1:D9:73
Authority key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Certificate issuer: /CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Certificate serial: 019D98F4B9C99BDC23EB4B23CCE8C6A136FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:01:08 +0000
Manifest this update: Fri 17 Apr 2026 01:01:08 +0000
Manifest next update: Sat 18 Apr 2026 01:01:08 +0000
Files and hashes: 1: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl (hash: 5Gx0isTnAzvfqpWDDxP7QSGvONBHeXLxXI49QQX5Nvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b9:c9:9b:dc:23:eb:4b:23:cc:e8:c6:a1:36:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Validity
Not Before: Apr 17 01:01:08 2026 GMT
Not After : Apr 18 01:01:08 2026 GMT
Subject: CN=e89ada8b86281996cd1b789bf012d671bbf1d973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:ff:f8:14:fb:1f:54:f5:9f:43:49:a4:c8:
79:3f:10:87:1a:28:f0:71:ed:1e:29:97:0e:7d:ed:
93:3c:b1:b6:c8:62:2c:4e:7f:66:66:06:10:45:de:
e0:00:18:a0:28:36:b5:32:53:86:b9:bb:49:b0:eb:
fd:17:1e:43:77:23:72:21:a7:ac:70:c9:3b:6c:74:
1c:81:06:71:a7:1c:2c:5c:90:47:3d:99:55:ed:9f:
ce:22:78:6d:b8:19:7c:81:46:78:d7:58:60:db:c5:
99:35:b6:86:4f:98:69:b0:3c:ad:78:ea:af:dc:16:
08:23:1d:4d:8b:d1:63:87:37:40:1d:87:92:44:9a:
8d:61:df:5a:60:5c:4c:77:bf:7d:60:be:98:2e:04:
62:38:7c:06:08:14:da:05:05:1b:07:18:96:2e:4a:
f5:1f:07:35:9e:22:9d:53:79:2e:b0:22:47:4d:18:
4c:50:33:fc:82:64:cd:96:48:1b:4f:35:8f:dc:6e:
1b:90:d6:d1:a3:89:03:9e:a8:a5:bd:d9:93:b7:1c:
c3:ad:91:f6:b9:32:8c:a6:2a:46:b3:8e:43:94:2c:
19:b4:63:3e:fe:5a:03:4e:34:64:50:c6:15:ea:fe:
90:46:85:e4:bd:87:f6:b8:b1:a9:66:3c:22:4b:53:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9A:DA:8B:86:28:19:96:CD:1B:78:9B:F0:12:D6:71:BB:F1:D9:73
X509v3 Authority Key Identifier:
keyid:D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:30:12:f9:de:91:73:6d:09:b2:43:77:e3:89:0a:e0:a8:50:
6a:f3:c5:6b:b3:99:12:62:db:f0:3d:e4:63:c3:f1:d7:6c:0d:
cb:5c:fd:ff:63:8f:57:7a:73:33:d1:54:01:54:8e:f1:4c:d5:
f5:82:54:7a:41:9f:25:00:e8:e1:62:8c:14:1c:ba:00:23:a1:
ac:c2:e5:20:7c:9b:c2:b0:94:f3:b3:67:01:8c:1e:36:8b:89:
1e:f4:ed:48:43:2e:3b:24:e2:9e:a6:db:bd:49:b6:4c:dd:88:
97:f3:39:b8:95:fb:65:38:5c:37:a7:0a:67:49:bd:4b:5c:de:
cc:f5:fd:27:d3:0c:c1:8e:78:b8:fe:d3:02:a6:ef:ef:3f:14:
93:b9:55:1c:d8:8c:6e:6a:68:04:13:12:e0:c9:96:4d:40:b9:
bf:80:62:ee:8a:a5:7d:13:1b:31:ab:61:8c:0e:ad:78:53:df:
db:5e:d5:0f:01:9b:2e:e4:83:e4:be:bd:ca:fa:b2:e3:16:8d:
2d:ca:03:25:a6:eb:03:de:79:52:f8:15:a7:ed:0c:e0:2b:0d:
00:ac:7e:4b:8c:db:0f:a0:36:fe:96:72:09:0a:75:24:24:24:
50:64:92:45:2b:f6:d8:ef:75:8e:f0:bc:a2:44:d8:9a:c6:b2:
a1:c0:17:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:41 2026 by rpki-client