Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
File: Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft (raw, json)
Hash identifier: DBLUsthd+c3+jEjXXSGdewJjA+UEf+qlrwlTeydpzz4=
Subject key identifier: 3B:96:0C:CF:D2:E2:A7:40:E7:8B:B1:C0:9B:61:EF:F9:29:E8:EC:94
Authority key identifier: 46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
Certificate issuer: /CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Certificate serial: 019DA52F1C29F2E32768A32CC4065C1CAAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
Manifest number: 1584
Signing time: Sun 19 Apr 2026 10:00:21 +0000
Manifest this update: Sun 19 Apr 2026 10:00:21 +0000
Manifest next update: Mon 20 Apr 2026 10:00:21 +0000
Files and hashes: 1: Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl (hash: MnEohlNpheuAvdyuOqaJPbmR63o/puYZ0RRUssFuLdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:1c:29:f2:e3:27:68:a3:2c:c4:06:5c:1c:aa:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467a388112e68f4c7d4d80c32d37cfcd6cd23a45
Validity
Not Before: Apr 19 10:00:21 2026 GMT
Not After : Apr 20 10:00:21 2026 GMT
Subject: CN=3b960ccfd2e2a740e78bb1c09b61eff929e8ec94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:95:d6:bd:7a:52:41:e0:51:37:68:92:d3:85:
3a:61:0f:81:d3:86:36:16:d5:46:50:c3:bb:02:76:
0f:c3:a8:2b:e3:3b:3c:81:fb:7b:dd:07:07:5d:74:
8f:c4:03:f4:f3:34:54:d1:83:4f:13:6d:c2:ed:ad:
10:3d:d6:8a:a9:3d:8e:0f:83:29:a2:5c:b8:71:64:
34:a9:86:ae:f7:f1:b0:e9:54:6b:3b:81:a5:71:5f:
51:88:9c:b3:b6:03:31:72:a0:d4:2e:77:07:84:67:
1f:1d:1d:8c:fd:c6:51:a6:47:f7:2f:ef:04:66:67:
63:bb:98:63:c6:e7:a8:60:6e:7d:2f:0c:06:42:f2:
5f:e4:84:60:96:c7:96:93:3b:16:78:f8:56:6e:21:
55:87:ae:a7:e2:d0:31:3f:f7:42:ff:34:4a:f5:6d:
df:7c:12:02:b3:fe:d7:4a:11:f7:cd:74:74:e3:fb:
24:0f:a8:98:70:71:05:be:e7:5b:1d:5b:c2:a7:3c:
89:8e:6a:54:9a:61:07:6b:af:ec:39:70:67:cb:3b:
e4:a4:bf:17:47:fc:40:55:85:9b:74:c0:dc:c7:ab:
f3:3f:d0:2c:29:b7:c0:96:c4:b5:bc:c7:ab:88:b2:
92:ed:c9:d9:d2:b6:71:cd:79:45:57:b8:a8:64:47:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:96:0C:CF:D2:E2:A7:40:E7:8B:B1:C0:9B:61:EF:F9:29:E8:EC:94
X509v3 Authority Key Identifier:
keyid:46:7A:38:81:12:E6:8F:4C:7D:4D:80:C3:2D:37:CF:CD:6C:D2:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rno4gRLmj0x9TYDDLTfPzWzSOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/1d7727-a4de-4ae8-b6c5-c71845a01749/1/Rno4gRLmj0x9TYDDLTfPzWzSOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:92:3f:72:aa:68:ce:fb:47:86:f5:bc:ef:9e:b0:4d:49:3b:
34:03:9e:61:e7:19:09:12:27:cd:55:d4:0d:c4:1d:2d:82:82:
02:62:3f:32:44:35:0e:d7:03:5d:5d:ae:0a:bb:c5:4a:06:f7:
3d:a1:af:8d:98:d1:3d:42:e9:7e:fa:3b:96:07:ad:6a:d0:e5:
df:e7:ff:af:e5:b3:2c:64:40:58:3e:da:f0:c0:bf:7b:88:c3:
64:b1:62:36:51:2f:39:00:f9:0e:66:40:93:0d:44:52:99:69:
62:2d:1b:8c:5a:ca:8f:e9:9c:13:d4:82:98:5f:6d:08:56:c8:
99:6d:ac:e4:38:97:bf:04:26:32:0c:b2:40:6e:b8:a7:1b:26:
d7:d8:9a:d7:93:66:97:ff:fe:b4:f7:ef:bb:61:30:36:81:cf:
5f:1a:b2:b6:ce:cd:48:d0:a6:75:b5:c7:77:75:93:18:8d:83:
b0:7a:57:f8:06:5b:c9:af:9d:c5:dd:34:c6:2e:86:45:5a:a3:
5d:09:37:f1:de:16:01:6b:78:45:5a:8d:17:2e:6c:c8:28:02:
92:00:2f:0d:2d:06:38:7f:c6:18:db:6d:f6:bf:b0:4e:a5:b7:
ea:bd:79:da:78:98:50:c3:1d:1f:29:65:be:b2:4d:07:01:e5:
04:25:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:44 2026 by rpki-client