Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: JlSkbr6IongU+ihvjFrwahns2w4+98sYOgXIfn3YU/M=
Subject key identifier: 7B:33:C8:5F:2E:11:02:02:D1:CA:BE:4A:FD:B4:5E:31:9C:FA:4D:A8
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019D9BF5C73F6FB63CBC960DB0EC5E3FE9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 15:01:08 +0000
Manifest this update: Fri 17 Apr 2026 15:01:08 +0000
Manifest next update: Sat 18 Apr 2026 15:01:08 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: 4cuQ33gH4NMqLAKB2d9SR0Nq09Ekosg1sfkHkfmrTFs=)
2: gMgy66IeqRUWzHc_Tz_B5xCML94.roa (hash: alaMur7cm6u5buHk6RtnuNKVEJYn50JpsYiMrntsAII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:c7:3f:6f:b6:3c:bc:96:0d:b0:ec:5e:3f:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Apr 17 15:01:08 2026 GMT
Not After : Apr 18 15:01:08 2026 GMT
Subject: CN=7b33c85f2e110202d1cabe4afdb45e319cfa4da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:84:c8:36:8c:89:ba:41:a0:7f:e1:50:b3:0b:
98:f9:5d:db:a2:3c:91:44:53:b2:ad:f0:d0:83:e3:
cc:26:51:8a:b6:bb:b1:c3:ec:fe:c7:ec:6d:49:99:
7e:13:1d:12:a6:42:25:22:5f:63:36:b8:4c:e7:04:
d3:3f:24:de:f2:77:1e:cd:b4:0f:06:86:18:3d:3c:
88:13:d3:7f:c2:a7:28:48:ba:a3:79:b4:1d:39:c6:
39:c7:34:18:c5:59:e3:20:2c:a0:df:58:d1:88:ab:
5d:c5:6f:58:05:8a:58:e2:08:2c:c1:1a:3c:53:53:
75:cd:c6:e4:f0:d0:cb:3b:fe:03:9e:77:fc:08:be:
71:13:2c:58:2d:7e:0e:9a:fa:07:81:a1:6a:57:f8:
22:b7:2f:9b:17:b9:38:81:03:64:fa:85:69:53:85:
24:a0:41:30:80:63:e1:2e:3c:1d:f2:90:24:99:61:
20:ef:90:29:19:8d:39:8b:87:78:74:3c:6e:37:f7:
05:da:9f:8d:de:e8:6d:06:39:3b:c2:6d:f9:61:de:
7d:f1:78:f4:4c:85:96:1a:f1:b4:0c:80:cb:e4:b3:
4d:40:91:17:38:ac:23:40:93:a6:ba:f2:12:9d:9d:
35:15:95:34:69:5e:aa:77:24:32:81:03:b6:85:d5:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:33:C8:5F:2E:11:02:02:D1:CA:BE:4A:FD:B4:5E:31:9C:FA:4D:A8
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a4:ae:ca:1d:08:4d:df:ba:10:a8:3c:46:3b:78:d9:2d:a1:
eb:dc:c3:46:7a:01:2e:9c:49:f2:17:9a:1f:f7:85:d2:f2:d6:
5e:9d:17:3d:06:cd:c8:76:2c:52:0d:16:e9:bc:cc:1d:c0:d1:
5b:13:e6:39:7f:43:de:b5:7a:b0:ec:e0:de:a4:d0:1a:3f:20:
98:15:72:6d:80:72:e7:5a:64:01:89:7e:bc:2d:74:89:5c:6e:
c2:28:81:1d:ef:03:24:be:4c:34:75:b4:45:0e:46:af:1f:b0:
a5:aa:27:75:7d:cd:b9:08:0b:0d:d4:14:39:64:37:44:91:28:
50:1d:62:fa:d1:29:ee:a1:02:d1:e9:bd:bd:e4:26:eb:28:bc:
ea:c5:e3:d3:ae:d1:fe:14:fd:e8:28:d8:b9:be:4b:06:ec:6d:
c5:5f:f3:0a:6f:37:76:d9:74:a0:64:9e:f2:9b:13:30:4f:65:
ff:48:2d:77:90:bf:36:cc:55:24:5b:d0:e4:db:a8:9b:71:f9:
de:f7:6e:4e:3c:72:16:b2:bc:96:f7:23:49:f4:dc:c3:f0:1c:
3c:80:d9:d2:44:62:88:95:99:88:76:79:84:fb:a9:28:26:ba:
dc:a0:34:21:6b:6c:e4:1c:26:a0:0e:20:df:7e:9b:10:a7:c5:
2e:84:0a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:02:06 2026 by rpki-client