Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
File: rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft (raw, json)
Hash identifier: 6SS2cbkKNKow7GHa1eejbEUIJzivFNBHIYYEm8skQ4Y=
Subject key identifier: 4B:A1:02:B8:40:21:BC:28:7F:4C:31:67:FF:A0:7C:0E:2A:C1:D9:40
Authority key identifier: AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
Certificate issuer: /CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Certificate serial: 019D9AE2AA367B9ACE67006DE728F8351E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:00:38 +0000
Manifest this update: Fri 17 Apr 2026 10:00:38 +0000
Manifest next update: Sat 18 Apr 2026 10:00:38 +0000
Files and hashes: 1: rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl (hash: XFFXJLikYw0gWjt6nqtHCH4AZek6tn+5vOPeISuKro4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:aa:36:7b:9a:ce:67:00:6d:e7:28:f8:35:1e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad30fb4388ee67144ae04ddc86812d63e028f478
Validity
Not Before: Apr 17 10:00:38 2026 GMT
Not After : Apr 18 10:00:38 2026 GMT
Subject: CN=4ba102b84021bc287f4c3167ffa07c0e2ac1d940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:2b:a4:83:f2:20:a1:36:fe:1c:6a:72:70:
74:ae:d7:60:95:e6:7f:9b:1e:a2:27:06:fb:5a:e9:
10:16:31:1e:3c:8d:5e:f4:9f:e9:9c:75:2f:bf:5e:
4b:93:ac:89:60:fa:95:e5:be:a1:e7:6a:68:82:7b:
d5:98:f6:49:fe:20:e9:8b:ac:53:c7:23:ad:9c:1c:
f9:ba:a9:b3:51:17:3e:74:fe:d7:8c:d6:71:d5:c4:
f8:7c:08:25:01:ad:59:ec:19:75:c3:29:89:0f:91:
8d:a6:67:bb:ac:80:cc:50:72:b8:3b:6d:41:09:a9:
de:ac:fe:30:14:9a:1a:8e:2e:de:85:66:7a:37:fd:
14:3b:f2:1b:71:af:23:aa:95:c8:ce:49:0c:05:41:
32:bb:f3:b3:51:4a:a7:85:2e:26:23:2b:e0:2a:23:
de:9a:42:49:c2:41:1c:a6:a0:85:bc:1b:11:c2:c3:
00:51:8c:08:e8:9f:ea:cc:48:31:f5:8e:b0:ea:f5:
cf:42:9e:50:1a:82:08:3d:f3:fc:82:16:b6:b7:d6:
3e:10:ee:77:3e:3e:2b:eb:b9:cd:de:7f:3d:04:4a:
32:ac:6e:ca:66:ce:f5:5d:8f:e6:da:1f:50:b1:64:
4b:29:bb:88:d8:aa:0b:17:d3:c2:53:2e:f9:76:72:
02:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A1:02:B8:40:21:BC:28:7F:4C:31:67:FF:A0:7C:0E:2A:C1:D9:40
X509v3 Authority Key Identifier:
keyid:AD:30:FB:43:88:EE:67:14:4A:E0:4D:DC:86:81:2D:63:E0:28:F4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTD7Q4juZxRK4E3choEtY-Ao9Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d341a6-98a2-4b1e-9ba4-b66044adbcb1/1/rTD7Q4juZxRK4E3choEtY-Ao9Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5a:7e:2f:01:ce:44:3d:97:6c:ad:7e:cc:3e:43:74:a8:00:
13:78:31:79:a8:19:57:f7:9a:6c:87:01:bb:20:fe:f8:74:6d:
97:f1:13:7e:be:d0:3a:63:58:e4:92:3d:33:8e:74:32:a4:aa:
20:78:05:cd:6f:be:75:b0:5b:b3:2d:51:b3:2a:cd:3d:80:25:
e7:bd:e0:19:c1:33:9f:f6:a2:41:bd:82:97:a4:b4:65:13:ca:
82:99:ed:ec:f6:80:63:3f:e1:6d:25:c7:74:f1:64:a8:d8:83:
19:1d:02:67:3c:c0:42:48:ea:63:d3:7b:a7:09:dc:75:b1:38:
f5:cf:0f:f3:97:ff:67:51:45:2c:c4:e9:f7:9b:49:a2:82:e8:
9c:38:9e:09:f7:33:0a:f0:31:bb:2c:9d:db:0f:74:ab:2a:55:
7a:ba:cf:49:d9:16:2e:82:ab:20:0a:dc:fc:20:79:87:d9:ae:
90:4c:1b:22:32:67:43:4d:74:8f:94:0e:cd:db:db:5a:4d:5a:
ab:d6:7b:ed:08:8c:22:bc:7e:34:a8:9c:a7:0e:ae:bf:3a:8d:
a6:f8:df:4b:35:75:f0:a0:18:5c:cd:9b:be:03:16:77:21:b9:
e3:da:8e:04:a9:36:c1:02:1d:47:d8:13:9a:86:fd:b5:e7:bc:
90:5f:00:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:23 2026 by rpki-client