Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
File: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft (raw, json)
Hash identifier: 58WyTaPEfaPC5xuBbgU5aPIQYDpej5V34xCJdxBRxFQ=
Subject key identifier: 84:F5:9D:27:AF:FD:95:C8:B4:A5:D2:A4:FA:97:8B:DE:D7:45:8E:FA
Authority key identifier: 33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
Certificate issuer: /CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Certificate serial: 019D9A75242FE9D92673E932D2BC88945BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 08:01:01 +0000
Manifest this update: Fri 17 Apr 2026 08:01:01 +0000
Manifest next update: Sat 18 Apr 2026 08:01:01 +0000
Files and hashes: 1: M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl (hash: Xqpt5FCe3BpWX1MXvXINywmigjpv0apWEytQ0ZsWxE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:24:2f:e9:d9:26:73:e9:32:d2:bc:88:94:5b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33bb8fccc6d6ab72ba5294b09985de799ea06348
Validity
Not Before: Apr 17 08:01:01 2026 GMT
Not After : Apr 18 08:01:01 2026 GMT
Subject: CN=84f59d27affd95c8b4a5d2a4fa978bded7458efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:fe:e4:aa:02:e0:0c:13:36:a4:1c:06:b7:
69:42:dc:2b:77:aa:7b:6e:e5:4e:59:e7:f1:0c:35:
40:9b:1d:5e:5b:5b:81:af:fe:1d:1a:9c:1f:46:ff:
1d:e6:d8:cf:a0:37:06:76:4d:8c:26:1d:04:00:dc:
a1:05:38:7f:f7:b0:b5:bd:cc:b1:68:d0:55:36:44:
31:76:4d:2a:af:8b:21:55:97:6f:5d:08:8c:12:29:
41:0c:54:f1:53:c7:f8:56:44:8b:37:7c:89:d1:58:
60:70:52:24:bc:1a:26:32:0f:6d:bf:a0:5a:d2:0a:
af:8d:c0:f7:d4:79:1d:56:67:de:4d:48:19:56:e5:
fe:d9:24:fc:2c:da:b7:a8:f5:c5:a5:b6:16:dd:a7:
77:83:1e:cc:2b:37:95:97:b3:a8:85:e3:45:8a:83:
b1:6d:ff:a1:37:51:f2:a0:3f:71:b1:d7:a1:38:61:
b9:13:f6:e6:83:c0:6a:6b:a0:aa:ea:5a:f1:a6:b6:
2c:b1:3a:7d:15:5c:25:ae:89:e3:1a:39:f6:f2:dc:
23:8d:bd:79:05:78:2d:33:63:a1:7a:43:c5:98:8b:
e8:20:70:d5:a4:30:19:71:66:0d:c4:76:02:b4:7a:
2b:29:7d:4f:76:7c:69:f9:81:00:b0:db:08:fc:ea:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:9D:27:AF:FD:95:C8:B4:A5:D2:A4:FA:97:8B:DE:D7:45:8E:FA
X509v3 Authority Key Identifier:
keyid:33:BB:8F:CC:C6:D6:AB:72:BA:52:94:B0:99:85:DE:79:9E:A0:63:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/56b88c-ba95-47a7-8af8-12907c99fa49/1/M7uPzMbWq3K6UpSwmYXeeZ6gY0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:03:f1:a3:62:f2:ca:02:9d:30:85:fb:08:ad:a6:aa:06:b9:
db:35:7a:55:97:66:f9:29:cc:01:31:17:e6:78:05:83:92:cb:
8d:e6:6c:a5:e9:dc:36:05:bc:d6:8f:3b:4a:d4:45:80:bc:11:
17:ed:2f:23:c6:fb:1f:71:45:c1:1b:f5:39:53:f0:db:5b:15:
b4:18:99:7d:66:7e:fa:c4:08:cf:1d:a9:2c:07:4b:b2:b5:f4:
7b:9c:33:e5:8b:d2:0c:59:f7:63:ea:f6:33:df:a9:ca:96:7a:
b8:03:22:82:03:f5:35:d6:72:44:19:00:ee:11:87:f5:a5:f5:
cd:9d:96:fd:dd:1d:c9:1c:ca:0f:e8:f9:75:14:31:b6:ac:a8:
8c:21:de:cc:ee:e2:99:d7:87:2e:54:49:93:a3:ac:5f:a1:55:
5a:db:9d:e9:4a:53:2d:6d:9e:7e:8e:b0:df:a7:19:ee:db:82:
c8:10:b6:6d:dc:43:79:3b:0c:04:3a:ba:6d:d2:69:19:05:c2:
d9:3b:df:52:1d:1f:6a:fb:2d:ad:a5:8a:4e:35:e0:cc:65:ec:
f1:6b:de:9a:40:41:ef:ec:36:5e:2c:d7:34:65:52:0e:13:42:
07:56:2b:10:7b:cd:90:f0:99:8f:f0:dd:38:34:fb:50:e2:97:
0b:a8:55:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:16 2026 by rpki-client