Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: c6rNtKUZBdV+YMHUewPQteAZgTkS+FEadyJ6hZMKeow=
Subject key identifier: FF:28:FB:52:EF:45:E9:38:C6:DA:D5:BD:C0:77:AC:36:A8:45:51:45
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019D9B509CD2FBEA3060E6B9C9FB2A45CFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 18D2
Signing time: Fri 17 Apr 2026 12:00:44 +0000
Manifest this update: Fri 17 Apr 2026 12:00:44 +0000
Manifest next update: Sat 18 Apr 2026 12:00:44 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: 1JhGfmOvqfemT7J0+lxEkTVUj9VcBWCEYiqhFd6qfF4=)
2: 1N-KhQzruMGSdoGiZ7CO4u7ckk8.roa (hash: FLfbiUatng7gGWOmNIMwpoiBvu3NsECWb2uDXnrhlvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:9c:d2:fb:ea:30:60:e6:b9:c9:fb:2a:45:cf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Apr 17 12:00:44 2026 GMT
Not After : Apr 18 12:00:44 2026 GMT
Subject: CN=ff28fb52ef45e938c6dad5bdc077ac36a8455145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:ae:78:03:82:f0:4b:e6:74:8e:f7:1d:60:
b0:52:63:75:f3:71:26:e8:d5:5f:35:22:23:d3:6d:
25:28:c2:31:f1:9c:41:ba:81:c9:74:3c:31:f8:45:
da:cb:0e:7c:ce:59:13:b1:c6:ef:6e:05:25:c1:60:
e0:0a:47:e4:40:7c:b5:9c:d9:3e:ad:c4:29:06:6f:
79:f4:fd:c5:6a:ba:e3:da:04:6e:16:1e:97:24:a8:
d9:5d:b6:22:74:c2:4b:59:03:06:d3:cd:c9:b3:7c:
02:7d:1b:10:6a:58:75:be:d6:e0:90:79:ac:dd:34:
98:3e:34:74:50:1b:73:3c:6d:63:40:70:7f:5f:ea:
b3:09:d3:3f:c8:3b:d9:14:93:e6:1d:7a:4b:35:3a:
91:02:0d:6a:ba:8f:bf:7a:22:d3:81:16:c6:43:a7:
a0:98:f1:77:5c:b9:50:2b:8b:e6:6e:8b:c9:5b:ae:
fb:08:10:46:28:b4:9b:09:4e:38:f0:56:2a:b5:33:
39:e4:bb:48:7f:dd:48:67:17:38:9c:2c:f1:8b:81:
af:69:3c:ee:24:40:1e:74:e6:19:38:73:77:d2:ce:
ee:c2:94:af:44:6a:32:d9:b2:5d:c3:c0:a0:ba:f9:
11:9a:2a:c2:ef:1d:28:b0:85:ad:ca:11:c6:7d:89:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:28:FB:52:EF:45:E9:38:C6:DA:D5:BD:C0:77:AC:36:A8:45:51:45
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:41:a7:f5:01:b7:a7:a5:b5:ff:d7:56:23:c3:34:51:fd:c3:
a8:d7:a0:45:46:32:31:d0:14:f7:4c:c1:47:92:d0:f6:d5:2c:
59:13:d0:d1:d5:05:00:43:2f:00:26:04:5f:46:79:a5:fa:35:
bc:da:a1:4c:ab:5e:8c:dc:1f:e1:31:27:00:bc:43:c9:2f:6e:
88:d5:e8:c6:b1:a0:d2:8a:50:8d:c7:9d:9c:f5:37:50:34:ec:
0f:65:f4:d0:5e:1a:5c:93:32:c5:d7:a8:aa:3c:71:c6:c8:34:
ab:e7:fe:93:0a:7d:43:25:b1:d9:2b:84:96:a0:f0:29:26:6a:
c5:ce:9a:ca:67:0a:eb:2a:ff:c6:88:16:81:1e:8a:a9:cb:ab:
c1:5a:f2:23:c0:51:06:81:d8:84:d7:af:4a:b3:fd:bb:7d:3d:
3a:7b:8b:d4:7c:78:d4:dd:50:17:d0:fd:4d:c7:83:2d:03:f0:
60:09:c1:b2:17:26:1e:e8:24:5c:02:9e:05:39:60:12:f8:fd:
dd:c4:22:90:f8:7e:c0:4b:2e:fb:16:ee:75:68:e0:01:b7:9b:
e6:b2:0f:6e:91:37:91:66:5d:16:51:d8:ca:1d:e3:e5:a8:71:
96:34:10:57:67:33:ce:ca:50:ed:70:cc:f1:3d:f6:9f:9f:c0:
2c:da:ef:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:56:52 2026 by rpki-client