Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
File: _-rFP47j7k0UPHDf9nNVIDheTNE.mft (raw, json)
Hash identifier: Rxpn4uJru2ivUN0CKMp+E4Jt4Z0UP7i0/EGG0m+whMM=
Subject key identifier: B6:CE:0F:15:A3:12:20:10:16:E2:0A:0D:01:F2:29:57:8F:73:9B:E3
Authority key identifier: FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
Certificate issuer: /CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Certificate serial: 019D9AE32F58E118028B386946B3680DF542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:13 +0000
Manifest this update: Fri 17 Apr 2026 10:01:13 +0000
Manifest next update: Sat 18 Apr 2026 10:01:13 +0000
Files and hashes: 1: _-rFP47j7k0UPHDf9nNVIDheTNE.crl (hash: qvX8Qi5x4LdQtzL3maHMO73X1XqrCfpolMJmgEcaqb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:2f:58:e1:18:02:8b:38:69:46:b3:68:0d:f5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffeac53f8ee3ee4d143c70dff6735520385e4cd1
Validity
Not Before: Apr 17 10:01:13 2026 GMT
Not After : Apr 18 10:01:13 2026 GMT
Subject: CN=b6ce0f15a312201016e20a0d01f229578f739be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:2e:5f:eb:14:e1:cd:ae:aa:a4:88:ae:8b:
6c:84:d4:ff:7f:58:72:39:d7:e2:0b:3c:b0:49:f8:
23:9e:13:3d:ef:fc:a6:82:d5:fc:b2:c1:c5:af:77:
6e:6a:27:12:f2:cc:da:03:8d:38:d2:b0:8d:e7:90:
15:2d:e9:33:98:e5:4b:f6:62:c1:3f:4a:9e:a2:74:
4d:15:db:24:46:18:34:67:f5:fb:9e:16:65:ae:76:
e7:80:c5:e2:4f:b9:cd:94:c7:a0:24:d1:25:82:b5:
29:f7:8d:bb:ce:1a:21:75:0f:aa:4b:fa:68:de:7a:
ca:16:2f:6b:7c:63:1b:54:b6:2e:d0:63:e0:b3:e0:
81:fe:43:23:da:48:e8:b8:59:0f:69:54:a1:8a:fd:
9a:55:24:28:53:40:96:24:47:15:13:f2:4e:ca:c0:
43:de:c2:22:5f:65:40:e3:0b:37:ef:03:bd:a0:dd:
dc:80:39:94:13:91:54:de:8b:90:a6:d8:6e:68:e6:
e6:d5:5c:3f:da:4e:f2:c0:c6:e2:28:01:42:96:f8:
c5:96:63:4f:3f:ab:5a:4c:54:7d:79:e9:4b:b5:81:
5b:98:28:8f:91:ad:b6:89:c8:80:9b:cc:09:50:b9:
30:1d:55:ac:04:c2:e4:33:c1:c0:ad:07:26:c3:dc:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CE:0F:15:A3:12:20:10:16:E2:0A:0D:01:F2:29:57:8F:73:9B:E3
X509v3 Authority Key Identifier:
keyid:FF:EA:C5:3F:8E:E3:EE:4D:14:3C:70:DF:F6:73:55:20:38:5E:4C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-rFP47j7k0UPHDf9nNVIDheTNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ace8bc-ad93-4d59-9209-059742b352a8/1/_-rFP47j7k0UPHDf9nNVIDheTNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:53:54:47:36:28:76:d0:58:4e:34:85:d3:ec:6c:4d:a2:51:
6f:6e:3d:d1:88:cb:76:70:fa:a9:ac:3b:cc:70:4b:09:13:79:
1d:07:c6:1d:d9:da:e3:d5:84:f8:54:51:4c:27:73:2c:79:23:
f9:a9:69:b4:69:ee:b5:7f:2b:2e:71:18:e5:8d:59:a1:b2:f1:
a4:bb:f5:23:b2:c9:28:0a:5d:28:44:8d:a8:a4:c0:9b:cd:29:
74:8d:29:01:9e:bf:63:54:ca:8b:7a:53:15:ac:f0:8d:f5:cd:
19:a7:f0:e7:34:9b:c1:b1:bf:6e:5c:70:1f:60:1a:d7:37:49:
34:4e:6c:54:c6:36:32:fb:03:18:75:9a:db:bd:8c:21:4a:4d:
eb:e9:27:a1:0d:3d:3f:06:80:4e:d2:44:44:33:02:25:1c:66:
20:9b:9e:7c:36:96:11:ef:fa:a5:73:01:b8:be:18:85:d1:c1:
84:68:c8:eb:07:50:48:c2:86:08:3b:58:74:71:49:14:e5:f8:
30:13:ed:64:2d:35:43:12:27:81:47:b6:45:5c:43:9a:6a:8a:
56:b7:95:50:16:89:0c:bb:4d:8d:93:52:5c:e9:1c:27:68:0a:
bc:fe:4c:92:f8:ef:23:84:e0:49:c7:bd:da:2c:d1:0a:1e:aa:
27:d8:27:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:14 2026 by rpki-client