Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
File: 1-cEFknmJ7EHAiQOtjNVqidrovl0.mft (raw, json)
Hash identifier: x9wT/v/Y/yFd+XOaNF8kLaO13/7OudotBL48MT4AAd8=
Subject key identifier: DE:74:F1:E9:91:66:F5:95:C1:40:A3:A1:46:C5:4C:4A:13:21:9D:49
Authority key identifier: F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
Certificate issuer: /CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Certificate serial: 019D9AE28E7A9940A1FEF72F260F05AFEA2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:00:31 +0000
Manifest this update: Fri 17 Apr 2026 10:00:31 +0000
Manifest next update: Sat 18 Apr 2026 10:00:31 +0000
Files and hashes: 1: 1-cEFknmJ7EHAiQOtjNVqidrovl0.crl (hash: qgckMgo+/qKAj+vScNk2pdTyG8SKTA2vrMkDEk1Fx2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:8e:7a:99:40:a1:fe:f7:2f:26:0f:05:af:ea:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c105927989ec41c08903ad8cd56a89dae8be5d
Validity
Not Before: Apr 17 10:00:31 2026 GMT
Not After : Apr 18 10:00:31 2026 GMT
Subject: CN=de74f1e99166f595c140a3a146c54c4a13219d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:d4:cc:25:e1:dd:c9:08:48:10:c5:d0:38:
3f:fe:f0:e0:7c:76:16:b7:50:1c:5d:a8:00:1e:28:
cc:1e:8e:08:0b:06:32:65:7e:b6:05:93:25:e4:77:
11:6e:d8:85:72:d5:a5:00:38:1e:8a:93:cb:cf:01:
73:4e:08:8e:c5:6a:5f:8b:e6:1b:ff:a9:57:40:68:
7b:e3:5f:91:91:29:bf:12:c4:b7:97:e5:eb:d1:64:
26:ff:07:e1:b3:ec:c8:17:7d:78:3e:62:0f:01:59:
ba:64:a6:7a:2f:ff:bb:f4:11:9d:99:0d:c6:8c:a5:
68:8c:54:00:59:e9:a5:64:c2:51:a7:a5:5b:e7:b6:
41:df:d6:1c:38:84:c7:b4:49:e7:c2:3c:c4:77:42:
09:dc:c9:7d:5b:3a:d9:4d:69:d2:9b:84:36:0f:a3:
1c:c8:df:d8:3d:42:da:c2:a4:a4:c4:6b:fe:e3:d4:
35:be:21:bb:57:1e:ff:c8:ee:4d:3e:a1:8f:7e:82:
92:d4:cf:ea:92:13:f3:bc:01:36:58:96:c0:94:91:
10:91:7d:b3:73:69:05:d9:54:f5:7a:01:cd:6a:1c:
cb:ac:2f:15:04:19:a4:f3:35:f1:70:26:71:9d:7a:
60:93:99:7e:b2:ba:57:cd:01:ae:70:8b:65:15:80:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:F1:E9:91:66:F5:95:C1:40:A3:A1:46:C5:4C:4A:13:21:9D:49
X509v3 Authority Key Identifier:
keyid:F9:C1:05:92:79:89:EC:41:C0:89:03:AD:8C:D5:6A:89:DA:E8:BE:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cEFknmJ7EHAiQOtjNVqidrovl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f62ef-32ef-44f7-b412-1b186b6fcf41/1/1-cEFknmJ7EHAiQOtjNVqidrovl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:62:b5:90:a5:a7:f6:db:a2:2c:44:4f:50:a3:b8:95:0a:ef:
1e:b5:7f:64:03:fa:84:1d:0a:db:1a:ff:a3:bf:98:76:b8:1c:
9b:e6:77:67:42:f7:31:da:4b:86:71:2f:6b:3e:c7:8b:db:40:
a1:4f:9a:f7:e7:1a:0e:6e:d5:70:ce:32:f7:41:85:21:68:e4:
ac:2a:f2:1b:6c:af:b2:71:d7:2a:62:9e:03:1c:1e:df:43:33:
9f:aa:07:93:34:4b:dd:0e:c9:57:29:25:8d:a1:fc:92:e9:ab:
3c:16:e0:88:34:1c:56:1c:8c:16:79:d5:d0:9b:ca:30:49:19:
c3:52:24:74:be:e8:cb:60:1f:19:bf:b8:7c:84:46:f1:10:10:
a4:1d:a8:84:8d:65:e0:be:27:72:9e:68:63:47:7b:92:7a:7f:
fb:eb:f3:4e:ff:03:b2:d8:8b:2d:20:f7:12:37:e6:9e:6e:7b:
26:67:c7:9b:b8:e8:af:51:93:0d:37:61:a3:d5:83:4c:65:32:
15:72:93:7e:3c:75:a1:49:7a:3c:0a:19:29:11:5a:bc:c1:f9:
3a:ed:0d:e4:a5:f0:bb:ae:bc:e8:90:1b:24:87:af:64:e3:11:
49:1b:49:0c:f8:fe:aa:59:a2:71:c5:93:6a:f4:74:6b:6e:be:
35:f3:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:17:52 2026 by rpki-client