Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: lQLdey2xtMO1u7NkNBODF8WukgFwOG72vUnewg7mluU=
Subject key identifier: B7:E3:7D:8E:8A:BF:00:AD:BB:E5:9F:96:18:97:C1:21:E3:F1:02:24
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 019D98F4CEE3601E232F30BEF11F20C0EB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:13 +0000
Manifest this update: Fri 17 Apr 2026 01:01:13 +0000
Manifest next update: Sat 18 Apr 2026 01:01:13 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: 8I1ECBSAaqXwx5WTQRtW5sMz5HHQgZtzE537/SIFaVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ce:e3:60:1e:23:2f:30:be:f1:1f:20:c0:eb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Apr 17 01:01:13 2026 GMT
Not After : Apr 18 01:01:13 2026 GMT
Subject: CN=b7e37d8e8abf00adbbe59f961897c121e3f10224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:b1:96:68:b0:0c:98:9e:42:d1:da:15:95:
8f:34:76:50:d9:0b:ec:09:26:c8:64:22:82:55:3e:
e2:76:df:03:03:55:b8:78:ef:85:75:4f:bd:a6:ba:
30:76:41:52:17:b7:b8:b6:3c:c6:38:bd:6b:a1:1f:
f6:de:c7:ce:e6:e3:17:d5:85:a8:99:4a:15:9e:6f:
39:1e:94:3e:03:fc:70:01:24:a2:71:4e:7e:67:42:
37:b7:d3:7d:6f:35:a7:c6:7e:b8:36:a3:09:61:de:
71:72:6f:02:e3:c9:56:eb:b4:7d:44:df:d2:36:a8:
41:df:ba:aa:13:e0:f4:ba:28:25:a2:8e:68:10:a0:
ab:42:0e:3a:74:35:c5:12:84:37:2f:d9:0e:f5:de:
db:ac:42:2e:20:90:84:a2:8e:2a:bd:c2:72:76:b7:
a3:e2:b5:bd:8b:57:71:2c:5d:47:67:94:19:33:70:
aa:20:2d:76:f2:1d:79:2f:8e:c5:12:89:90:c1:9d:
25:08:56:6b:59:89:b2:ad:e3:bf:87:56:5a:0d:54:
fd:5d:93:c7:e8:a2:40:1d:24:54:d2:19:57:e6:5d:
36:37:27:9d:02:a8:10:15:4a:2b:5e:59:24:a3:4e:
3b:c1:76:4e:17:4c:81:69:64:e4:24:45:8d:c8:ef:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E3:7D:8E:8A:BF:00:AD:BB:E5:9F:96:18:97:C1:21:E3:F1:02:24
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1c:82:6d:97:84:10:92:ad:8f:b0:53:fa:33:28:5d:25:b0:
4a:e7:a9:d2:ce:96:4a:33:3f:db:3b:b2:e1:b8:bd:e6:17:02:
26:c3:f0:46:da:6c:57:07:3d:06:de:1b:41:e6:74:73:94:36:
3d:e7:e7:25:91:5a:c6:a4:c0:aa:8b:66:83:0a:45:06:bb:87:
4f:44:9e:77:b8:c6:52:19:1c:a6:31:63:a1:8c:62:77:a5:3c:
57:31:4d:37:53:c7:73:c1:de:e4:73:a5:53:b5:35:e6:08:8d:
66:61:e7:1a:6e:21:34:9f:ea:ee:4e:e7:71:eb:e0:de:52:62:
8c:f8:f5:81:13:59:09:1c:56:6e:bc:98:1b:da:05:55:d2:de:
dd:90:6e:76:57:b9:01:41:bf:df:cc:70:87:3a:73:49:38:1e:
86:2d:74:7b:83:9d:9b:ea:7a:41:fb:7b:f3:53:0b:02:54:95:
f9:23:0d:a8:97:4c:6c:86:83:a9:68:3f:8a:48:60:54:4d:58:
0c:c8:9f:00:79:b8:3b:86:37:89:fe:b8:b2:a7:fa:4e:be:de:
a3:67:bb:f0:60:29:be:f2:ab:7f:4e:3c:33:23:bc:0d:22:98:
cc:f7:95:67:9c:4b:39:73:65:59:80:21:53:0c:9a:a4:d5:57:
a3:47:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:08 2026 by rpki-client