Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: 4O2bpB9P/Z2gjieaoQ/2TQ+d5757gjsjAoAN7SrMSL4=
Subject key identifier: 71:60:EB:57:05:E0:73:AF:E3:95:A8:33:3E:85:7A:0D:99:CE:E8:86
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 019D9B512992726C3E741982E476EEC9EE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 12:01:20 +0000
Manifest this update: Fri 17 Apr 2026 12:01:20 +0000
Manifest next update: Sat 18 Apr 2026 12:01:20 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: AKdMtbteIMDzRAQh9gWYhkiqDO5Ir7CbU2lWtWZzS8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:29:92:72:6c:3e:74:19:82:e4:76:ee:c9:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Apr 17 12:01:20 2026 GMT
Not After : Apr 18 12:01:20 2026 GMT
Subject: CN=7160eb5705e073afe395a8333e857a0d99cee886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:ab:c6:a0:a3:c7:22:ea:e5:d9:dd:b5:dd:
c5:e9:13:09:dd:f4:56:2e:da:92:7b:56:09:65:1d:
c6:aa:62:94:bb:23:e3:44:50:de:93:bf:7a:6a:67:
ce:69:d0:1e:70:04:d7:d3:cd:ad:46:db:68:09:e7:
a0:2f:0f:68:ac:10:39:0b:1e:63:e4:dc:c1:3a:d1:
16:c3:7c:8e:38:10:78:ed:07:9e:57:60:ca:84:79:
91:e6:8f:f4:7a:54:1a:8a:71:07:cb:d2:42:d3:fa:
9b:76:24:56:d4:6b:ee:80:5e:54:80:cd:c8:8c:dc:
ea:75:c1:fd:ca:71:b0:56:e3:f3:29:1c:72:14:97:
2b:be:38:bf:61:33:da:1b:0b:f1:96:d3:d8:6e:a7:
40:0f:ea:9d:25:90:1d:ef:02:f6:20:9f:a4:f2:50:
43:ed:f6:37:87:37:c6:4e:67:44:d4:da:e2:3c:af:
f9:6a:a1:f2:98:58:e0:ca:c0:73:39:37:3b:14:1b:
1a:8a:2a:e6:37:35:9a:87:34:eb:77:53:c7:47:d9:
73:52:ca:ac:22:2f:c9:52:c4:35:2d:1c:e9:d9:42:
b0:07:15:e9:2b:5d:d0:cf:3f:ed:71:c9:ca:e8:ca:
a9:ac:4c:6c:1c:93:85:da:ea:37:cc:9b:91:cf:37:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:EB:57:05:E0:73:AF:E3:95:A8:33:3E:85:7A:0D:99:CE:E8:86
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ac:78:0f:25:60:92:6b:2c:08:11:2c:07:4d:3f:28:59:b7:
90:b7:64:5c:65:f4:45:6c:8d:6c:a8:76:ef:ea:c3:84:0a:eb:
f3:4f:f7:dd:45:3b:50:7f:c2:ee:ee:be:99:7a:ec:a0:98:82:
12:a3:f9:3a:45:af:dd:13:df:b1:cf:56:b2:81:11:ce:f7:8d:
3c:23:01:29:1e:a1:7e:8e:64:0b:e6:01:02:7b:f9:2f:bb:a7:
d4:ee:38:52:f2:e2:5b:94:41:ee:96:b0:5a:dc:70:3e:92:41:
62:a1:be:c7:f6:f5:16:9f:a5:39:ab:12:70:62:7e:53:c9:36:
ba:1d:e0:3c:7b:6e:58:79:e0:64:41:36:12:8e:54:9f:3f:42:
ad:dc:3d:9c:14:6a:9c:ae:f9:0c:8e:46:c6:a6:5c:a6:85:fa:
bc:de:60:5a:ad:01:bb:d2:e4:02:51:19:9d:30:a1:c4:18:6d:
a0:73:26:c8:db:30:71:8a:c8:f3:9e:f7:08:41:86:b9:be:7f:
46:0b:aa:f8:82:c6:25:7c:d3:0c:ac:58:22:99:ab:36:e7:d2:
d1:45:6f:61:24:16:b8:4e:e4:ee:cc:72:a2:6e:ab:12:d5:df:
97:5f:3f:65:42:64:44:dd:c9:fe:21:7e:ab:b8:ff:ec:a1:f2:
ab:c7:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:59 2026 by rpki-client