Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier: yN+8PhV5+Ugp5VKnFdhCcCOmlYv97cEqnnaRD5Pn8ZI=
Subject key identifier: B2:44:7A:4B:D0:78:ED:D1:F4:D4:83:F6:D2:C1:55:D7:ED:9C:C2:3B
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer: /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial: 019D97738B5647A238C0696470A939649B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 18:00:25 +0000
Manifest this update: Thu 16 Apr 2026 18:00:25 +0000
Manifest next update: Fri 17 Apr 2026 18:00:25 +0000
Files and hashes: 1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: GfgncgsMkqPeMc6fzPObnIk1uazPcfK6n3SjRrGeGZQ=)
2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:8b:56:47:a2:38:c0:69:64:70:a9:39:64:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Validity
Not Before: Apr 16 18:00:25 2026 GMT
Not After : Apr 17 18:00:25 2026 GMT
Subject: CN=b2447a4bd078edd1f4d483f6d2c155d7ed9cc23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:e4:c4:0b:dd:56:ac:ea:0e:a2:c8:12:be:
0a:7f:79:ca:50:ea:92:62:c2:4a:4f:45:cf:77:6c:
d0:a1:f5:9c:25:fe:53:d7:1a:ec:e6:ca:52:1a:da:
2c:46:99:01:dd:c9:23:44:5f:39:a9:58:ee:ad:7d:
ee:61:21:a4:4c:2e:2b:37:fa:7c:66:99:50:e9:81:
57:ca:ff:8d:ef:f3:8b:44:ea:ef:a1:ce:1e:1d:a3:
99:17:31:27:f5:27:55:07:97:13:09:01:2f:6b:b0:
59:19:57:33:58:a7:71:b4:ff:f9:1b:4a:54:dd:29:
8c:b5:b3:2f:e3:79:5b:67:85:4f:c0:8a:d2:b2:ae:
e6:8a:8e:10:83:25:e3:f9:88:ac:60:03:4b:f6:ed:
44:41:fd:d3:3c:3b:25:a8:0a:8b:ca:eb:15:d6:0b:
3d:87:a1:6c:5b:5e:77:4a:a5:dd:66:91:47:95:64:
38:4d:dc:00:b7:9c:6a:40:08:f2:9b:6f:b6:80:b4:
b7:d7:e6:d7:d0:cf:38:cc:30:81:74:d1:d9:c3:fa:
de:fa:da:59:1f:24:61:53:c9:64:9d:62:e1:4a:54:
d3:b8:43:d3:d3:67:da:19:e1:2c:be:1a:01:ef:31:
d8:2f:7a:0c:b6:2f:3b:6f:f6:2c:d8:e9:9c:ee:21:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:44:7A:4B:D0:78:ED:D1:F4:D4:83:F6:D2:C1:55:D7:ED:9C:C2:3B
X509v3 Authority Key Identifier:
keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:97:4b:78:86:10:5b:30:3a:5b:11:ca:4b:d5:a9:2d:dd:c3:
f2:1c:6e:6c:c0:0d:31:6d:29:76:1c:10:0e:f2:3c:14:10:ca:
ea:a1:81:2a:da:d9:1e:90:22:8f:3f:77:37:57:3c:fd:84:26:
f9:3b:7d:67:68:e1:75:66:e5:8c:0c:6f:a3:cd:d9:ef:86:ae:
b5:7d:1e:cc:8d:0e:e1:31:99:5b:d5:f4:d4:8c:d8:7e:56:69:
ac:b2:7b:d0:8e:e8:fa:34:83:95:76:7f:39:e5:5c:4c:10:5d:
ec:a5:2d:90:d1:15:54:87:51:6c:95:60:47:9f:00:78:c9:fd:
ff:02:1d:60:d7:07:da:5d:53:80:52:2c:3e:2b:b7:7a:e5:f9:
db:73:ea:9c:dd:a8:9b:fd:74:cb:1f:8c:8a:4d:a6:1e:ec:bd:
53:8c:21:63:67:38:73:be:63:41:ce:37:73:a6:00:3d:12:08:
47:1b:26:43:43:43:5e:ce:f1:48:44:a4:f6:c8:a6:00:f6:55:
4d:30:a5:3e:64:a3:6f:e7:0a:5b:78:99:eb:b3:fa:0a:26:82:
e9:0d:96:8b:b0:bc:28:44:2b:42:fd:41:aa:c3:1b:a1:62:2d:
32:37:c3:a9:e4:97:15:25:24:d3:81:8a:96:24:a4:51:6e:cb:
36:49:a4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:23 2026 by rpki-client