Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier: 4cslxTFy/VxtR4hzCmLM3vacXOFxrmKrSuCRzCvzn9Q=
Subject key identifier: 3A:FC:93:3F:69:18:20:69:5B:26:7E:17:AB:69:3B:1D:A7:4F:62:A4
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial: 019D9AABEB6182A52FEFE4688B9B83604C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:51 +0000
Manifest this update: Fri 17 Apr 2026 09:00:51 +0000
Manifest next update: Sat 18 Apr 2026 09:00:51 +0000
Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: L0Gr87/nQUHfe03ozgVdRlKVek4XX+raW3TW3gLKJIQ=)
2: RBLs6_JEMpJ2-E4f-zbgq3OA94g.roa (hash: YtzTgnRD0gPLAxf3Gvly0Fh3NIAfS3kf5OMJ5xYDEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:eb:61:82:a5:2f:ef:e4:68:8b:9b:83:60:4c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Validity
Not Before: Apr 17 09:00:51 2026 GMT
Not After : Apr 18 09:00:51 2026 GMT
Subject: CN=3afc933f691820695b267e17ab693b1da74f62a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:e1:5e:6b:6c:59:b4:90:b6:ac:91:a1:ba:
e4:e9:4e:b3:d4:46:d2:63:78:55:9e:ee:a9:b4:0a:
65:59:a6:08:ee:44:b6:f9:25:3c:9e:f7:fd:07:87:
79:fd:91:b4:c8:8b:f4:4e:31:13:cd:a3:1e:68:f9:
7c:83:8a:f8:35:55:4a:a1:f6:af:e6:22:09:5c:6a:
7b:83:1b:13:26:9b:dc:75:12:ae:1f:57:88:91:2a:
51:41:ab:d0:05:80:e5:e3:1a:86:b2:f5:30:ad:29:
3f:dc:ca:c2:9c:b1:bf:4c:c9:80:05:4b:10:99:bc:
03:9c:28:41:5a:21:28:93:d8:e9:4b:8a:14:14:07:
9a:ca:7c:47:8c:48:cd:26:53:8e:bc:26:10:d8:84:
cb:5a:03:5c:d7:48:f9:6b:66:5d:5f:31:66:65:4b:
9d:93:d2:8d:3c:05:7d:0a:0c:fd:c8:9b:71:cd:df:
07:56:a5:f3:99:e2:94:95:fa:64:70:dd:d5:ab:d2:
e0:c3:f0:75:63:75:55:49:42:e8:fe:2f:9b:50:d4:
10:48:fc:1e:1b:c5:e5:63:d2:98:f3:bf:06:cd:43:
e9:2c:92:94:1b:24:c5:c5:53:42:68:15:69:9b:17:
da:f2:52:01:e8:48:19:e7:1b:46:18:ac:9b:21:fd:
39:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FC:93:3F:69:18:20:69:5B:26:7E:17:AB:69:3B:1D:A7:4F:62:A4
X509v3 Authority Key Identifier:
keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b4:db:75:a5:8d:ad:45:87:ea:0b:15:0f:46:42:88:60:a7:
5e:66:c5:6f:d4:48:c9:83:0d:83:bd:d1:56:5a:a2:54:8a:43:
75:77:26:7d:fb:29:74:42:fc:f9:73:03:22:dd:51:ba:5a:05:
e0:89:b1:fb:c1:6c:c0:f5:cf:77:7b:8c:6c:b5:af:af:f8:6e:
d0:42:2c:21:af:d5:70:ee:54:5e:c9:ad:d3:1c:61:c8:04:cd:
09:1e:83:87:15:30:a3:1a:f8:fc:09:80:3e:3a:c7:8a:3e:dc:
b7:e0:8b:0e:b0:60:d7:7f:5f:c4:16:1a:8f:f8:b4:2b:d7:54:
8b:90:90:75:a4:4c:9a:e7:b7:2e:1b:c7:38:32:89:4c:96:6a:
58:74:83:da:94:82:a3:3e:23:0a:21:80:17:71:6d:61:22:25:
8e:7e:a1:fb:06:19:1b:8b:23:ca:0e:6e:64:57:8c:ea:6f:3f:
a8:05:ab:d7:74:bb:3f:f4:0b:9c:d5:9e:c7:7b:19:1f:6f:d4:
78:f5:c5:8e:30:36:64:71:c1:7a:b1:a0:3f:33:9d:98:84:9f:
18:f2:ad:d7:e4:9d:b7:21:01:55:b7:bf:ea:e0:29:d8:6d:08:
80:8f:71:dd:42:51:43:f6:cf:26:68:db:40:4f:e7:dc:98:57:
98:ee:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:14 2026 by rpki-client