Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: zE2aukeJiLVuI03rNGvoXlF2oF4sGwPq//PcSL+fEhc=
Subject key identifier: 1D:3C:E8:0C:6B:BE:3F:86:33:09:9A:15:20:1C:30:23:EA:4F:EE:57
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 019D9961FE51D25B60A6941C480C5C9431BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 03:00:29 +0000
Manifest this update: Fri 17 Apr 2026 03:00:29 +0000
Manifest next update: Sat 18 Apr 2026 03:00:29 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: hbafxH8QSJ57X29DXUY9P/oya1Q38xFbiU8zuhxZvWU=)
2: TphEoqHx74oTxzeHIHgNhG40Etg.roa (hash: eKwF4mECICMY1eNS1Z8I/zufgWJJE+arH3zmPUlUZ9U=)
3: kOKbG2uwlgUTF9jmaFzt7vMoGYE.roa (hash: XPUsHAjyze1ymKKQjjk6fHKi5djr0xICcWZpDJI1q+M=)
4: m8_a0R-In6zPsMQtCZU7ofRpJV8.roa (hash: 9Klia2LNkTjTOYme1PTO2tY3GfAWev/ji3owResFBFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:fe:51:d2:5b:60:a6:94:1c:48:0c:5c:94:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Apr 17 03:00:29 2026 GMT
Not After : Apr 18 03:00:29 2026 GMT
Subject: CN=1d3ce80c6bbe3f8633099a15201c3023ea4fee57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:95:25:4a:f8:9a:a8:b9:57:8d:8b:dc:22:
8e:db:d0:26:60:ea:39:c4:1c:cd:0d:e7:1b:3d:ce:
16:15:44:86:29:31:57:ab:cd:63:54:3d:ba:a9:3e:
86:23:b5:b8:49:34:22:53:4d:ea:9a:b9:92:40:d6:
a9:d6:84:9f:11:c3:e7:7a:68:06:5e:f3:d6:74:6b:
db:45:8c:76:f2:13:8f:af:cb:9d:4c:87:e6:7b:53:
68:86:37:51:81:39:e0:fd:b1:da:d6:59:ad:7d:ba:
76:22:9d:42:6c:88:5b:2e:98:bc:70:57:05:b8:ac:
6f:66:9f:a5:91:a3:b5:06:9a:41:af:90:ba:e6:67:
92:b6:20:f0:f0:df:7d:03:b9:78:98:ac:03:8a:aa:
63:c7:ad:31:ed:5f:b2:3a:3d:2c:3f:7c:03:7b:df:
fb:68:e0:96:5d:85:2b:8b:02:6a:89:fd:ed:a6:12:
64:2e:17:27:33:74:9e:da:b3:51:5f:08:0f:79:11:
87:e4:3c:64:9c:84:ab:7a:9c:4c:c2:92:e7:ac:25:
16:0e:d3:02:96:c7:60:fe:a0:15:3a:52:58:92:4d:
07:79:35:9d:ea:7d:67:6c:fd:38:f5:55:96:93:d4:
75:5d:60:2d:64:42:bb:40:f5:22:b9:c7:23:38:a1:
b7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3C:E8:0C:6B:BE:3F:86:33:09:9A:15:20:1C:30:23:EA:4F:EE:57
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:30:8f:9b:1c:63:b0:b7:24:54:86:51:84:d3:f9:b9:2c:b6:
50:03:e9:ad:30:e3:71:5c:c9:81:f0:af:b3:eb:ef:8f:06:f0:
bb:44:9b:cc:f7:81:94:b4:12:e9:66:e1:e8:b3:fb:73:0c:e0:
0c:8e:41:ca:03:95:90:5a:5b:b6:75:14:34:7a:5a:90:c4:c8:
77:46:29:cf:e0:ad:d2:00:c6:05:be:52:87:e2:a5:98:5d:ba:
f4:98:8b:90:59:00:48:57:53:de:ff:ac:4f:0b:6b:e6:bd:70:
78:b7:fe:23:98:80:1f:59:2a:52:14:ad:24:35:52:6f:11:59:
c3:42:05:e6:e2:bc:32:be:74:6e:c1:23:70:9b:6c:51:a7:42:
33:d1:35:b4:b9:17:52:5e:40:6b:b7:37:4b:80:7d:9e:99:4d:
d5:d4:98:1c:a5:0e:c3:7f:5e:ec:62:a6:d9:70:2c:2f:7f:3d:
9a:dd:da:0c:50:01:a1:b4:91:98:61:22:ec:fb:22:78:34:d5:
ff:5b:9b:b4:ff:c9:db:7f:72:61:05:2c:cd:92:1c:17:2c:5b:
3f:ff:b9:1b:6d:45:04:e6:da:4f:37:c7:37:64:f3:97:e4:e5:
d6:5e:65:a7:cb:92:8d:9d:d9:ab:84:ec:af:1f:da:a6:14:0c:
27:18:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:44 2026 by rpki-client