Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: anYp8O8anMYgfhdwqYrxMz5TZ4J4w6B1US0r3ZS8ooQ=
Subject key identifier: 2E:17:10:31:19:B0:84:F7:E7:B2:0A:53:AA:76:A9:07:92:2E:A9:85
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019D996259144694398BC7E77736808EA350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 03:00:52 +0000
Manifest this update: Fri 17 Apr 2026 03:00:52 +0000
Manifest next update: Sat 18 Apr 2026 03:00:52 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: 4qcy2+daR9jFDvSjdt4yYUOZ0aprlN7uM2ha2fBnY14=)
2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:59:14:46:94:39:8b:c7:e7:77:36:80:8e:a3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Apr 17 03:00:52 2026 GMT
Not After : Apr 18 03:00:52 2026 GMT
Subject: CN=2e17103119b084f7e7b20a53aa76a907922ea985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:42:cd:c2:42:86:52:10:81:6c:30:f7:f4:
85:95:f3:66:1d:75:fb:2b:32:bc:ca:75:eb:9e:16:
c3:47:78:aa:51:78:ce:82:7b:00:44:fe:c2:ea:e0:
e8:c9:9d:d2:e6:74:d3:64:85:0b:e9:0b:1b:96:bd:
8a:19:fd:dd:40:de:88:5f:3f:ea:03:22:ec:24:32:
c0:9f:9c:9d:bc:0f:3e:6d:89:2f:f8:0c:be:1a:b5:
63:a2:64:39:e5:0a:a2:fc:d2:e8:2f:a6:34:26:e5:
42:0d:1d:a1:0e:3f:dd:f9:51:12:34:ef:e6:72:5f:
e4:8f:4b:8f:af:c7:60:0c:1e:9b:91:a6:77:b6:0a:
70:84:7f:38:81:d6:cd:42:bf:fa:38:63:1d:cf:12:
61:47:28:d5:c7:03:29:45:8c:43:28:e4:1f:8f:cd:
11:c6:d9:e6:5c:4a:a6:03:1b:58:db:d0:7e:b7:ce:
82:42:87:c7:76:30:87:2b:82:b5:f8:16:28:6a:c7:
ab:e2:ae:3c:81:ac:ef:1b:b7:d3:11:60:2d:13:f6:
6f:b9:af:f0:8d:a6:c0:7c:40:8d:a3:d4:76:18:8d:
13:a8:9d:43:72:4d:8e:a4:42:59:ca:fb:5f:e4:4b:
24:5c:45:cb:ea:bb:99:f9:18:4e:85:59:8c:a0:0b:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:17:10:31:19:B0:84:F7:E7:B2:0A:53:AA:76:A9:07:92:2E:A9:85
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:2f:81:53:85:78:93:38:74:00:d0:44:d3:b3:95:bc:a2:ad:
3c:6c:da:8c:0c:95:ab:0d:27:6f:75:26:a2:26:c3:48:bd:ee:
58:77:48:66:9b:13:c1:77:ec:e5:3f:0e:fd:01:b2:56:c2:c9:
b5:56:9e:09:47:1a:9e:c5:d2:51:42:93:5f:92:56:38:84:06:
83:c7:d2:4d:3d:49:27:27:f2:64:a6:16:c2:61:94:ac:82:ae:
53:4f:0b:f5:e3:b7:4d:d3:5c:5f:46:20:57:04:cf:72:43:e3:
11:67:a8:2a:1a:26:43:b9:fd:30:61:66:6a:98:18:f5:34:af:
2b:35:88:9a:3b:2b:1e:af:6c:be:85:08:da:00:ab:3e:ad:49:
59:33:ba:a6:c1:2e:98:29:63:78:8f:e9:48:e2:70:8f:b4:e1:
c6:02:b8:5d:7b:95:b9:c1:df:b5:56:be:5b:9f:71:96:61:17:
27:c4:d0:e7:2c:e3:9e:44:96:73:7a:a2:3b:8c:09:43:b9:a2:
c7:cb:9e:80:3c:22:b6:97:bc:19:77:c5:dc:ee:e6:8a:f1:76:
a1:e6:c7:b2:e5:6a:cf:91:a2:ca:6c:1b:c0:cf:20:53:82:d9:
0d:e6:be:5e:bd:20:43:0b:1c:d5:42:d2:df:b3:d1:08:85:07:
83:93:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:35 2026 by rpki-client