Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: mzkKK7QNdprxxveHI0kCgpo/oXpx/M4civ556BwtV5U=
Subject key identifier: 2C:B2:ED:35:C2:11:9B:D0:7E:FE:A2:38:EC:AF:44:47:D7:31:EF:B2
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 019D9BBE74CEBC79C1B5956EB463E069FBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 0718
Signing time: Fri 17 Apr 2026 14:00:43 +0000
Manifest this update: Fri 17 Apr 2026 14:00:43 +0000
Manifest next update: Sat 18 Apr 2026 14:00:43 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: Z6YVMRutEe2mn0bGR/5CaWkDg/q1R6zbVk+lCRU7+J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:74:ce:bc:79:c1:b5:95:6e:b4:63:e0:69:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Apr 17 14:00:43 2026 GMT
Not After : Apr 18 14:00:43 2026 GMT
Subject: CN=2cb2ed35c2119bd07efea238ecaf4447d731efb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:4e:93:13:2a:b2:1d:e3:05:1e:91:5c:8b:
85:53:1c:29:05:2f:5f:35:f7:f1:ad:a0:ac:aa:26:
76:2d:39:57:b0:01:86:1a:a5:cf:b9:1f:7d:99:04:
f8:82:59:6e:54:98:ae:3c:fc:91:f4:56:5d:f4:92:
dd:33:56:62:72:1f:4e:d5:d5:16:5a:35:a8:25:49:
23:c2:64:a8:91:66:7c:ed:31:94:b3:34:a8:46:f1:
85:24:b4:a8:c9:17:5d:79:88:1e:83:bf:aa:1f:28:
48:bb:fd:80:10:c0:32:c7:4b:aa:e3:0f:1a:0f:f9:
5f:bb:38:ab:d7:0d:d8:d2:54:02:d8:ce:22:4f:54:
30:d1:33:ad:99:97:cd:87:6f:6b:90:3a:5c:a1:43:
b0:30:81:20:85:ae:af:9e:14:b9:6e:88:6c:5e:df:
b6:70:f3:fc:18:6d:b2:4a:81:1e:54:9c:9e:03:41:
c1:97:ee:6a:e4:52:c0:85:ac:95:54:1b:8b:89:18:
0b:de:22:3a:74:e9:d4:5c:d3:f6:fc:9f:34:f5:34:
13:88:5c:91:93:a1:23:45:1b:cc:64:fe:eb:1a:e3:
5f:0d:28:a3:48:64:26:2d:a0:52:a3:39:d0:e5:9b:
a1:d4:e1:0c:d8:3e:17:63:c8:56:7f:bb:e5:f4:8d:
87:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:ED:35:C2:11:9B:D0:7E:FE:A2:38:EC:AF:44:47:D7:31:EF:B2
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f8:83:7e:76:e1:ee:8e:27:ca:7a:c2:b2:d5:30:2a:77:c7:
64:16:4f:1b:6f:a9:92:56:eb:e5:5b:e8:63:94:e1:d8:e4:d6:
9a:02:7e:1a:a2:b0:a8:19:e5:32:00:e1:f8:5f:06:eb:66:6d:
c9:b2:36:f5:3d:e6:5b:52:ba:a6:3b:e2:e2:89:bb:98:3d:6c:
26:a4:b7:65:48:25:48:3a:83:0b:86:bc:31:90:ef:65:3d:08:
4a:3c:ac:32:b7:3f:9e:f1:da:23:f7:7b:fb:3f:39:32:14:2f:
2d:3f:f2:d8:55:74:93:68:7c:25:1e:5c:5b:7a:3a:88:fa:61:
c2:8c:ef:98:81:a8:8b:af:fb:03:3b:9a:9b:d9:90:d1:b4:e9:
8f:81:76:ed:65:59:70:3d:9e:60:ac:39:57:62:22:55:5a:f1:
71:dd:f7:a2:6a:18:1a:ad:ef:15:33:73:09:43:42:d9:56:5a:
90:10:bf:fb:aa:a3:38:1d:8f:76:14:a8:f5:9c:db:5d:54:b4:
1e:00:14:3c:65:3e:03:58:46:ec:33:72:d0:d1:fa:58:2c:8d:
86:84:b8:85:6d:71:69:8f:3b:64:a9:54:66:2e:96:e3:52:5e:
03:20:a3:0e:a2:6f:c7:05:79:87:a0:90:37:78:ca:88:77:38:
5f:00:fd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:57:49 2026 by rpki-client