Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
File: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft (raw, json)
Hash identifier: UBpxmGJZ1y0F5WbAvmUbq8Xwqy27q1qKrVLb3I458Jc=
Subject key identifier: 1C:53:14:3E:34:B0:A1:83:DB:6F:77:7C:5C:4F:BC:7F:86:87:80:05
Authority key identifier: 89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
Certificate issuer: /CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Certificate serial: 019D984FCA02546768975E7248E4F225C04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 22:00:58 +0000
Manifest this update: Thu 16 Apr 2026 22:00:58 +0000
Manifest next update: Fri 17 Apr 2026 22:00:58 +0000
Files and hashes: 1: ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl (hash: +00v5DD6B7maCJcQArlEcHz4baWOcVPcmrC7yobLUlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ca:02:54:67:68:97:5e:72:48:e4:f2:25:c0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f1858cd37fb38b2acfa5cb4ef43e3c308d3d61
Validity
Not Before: Apr 16 22:00:58 2026 GMT
Not After : Apr 17 22:00:58 2026 GMT
Subject: CN=1c53143e34b0a183db6f777c5c4fbc7f86878005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:b3:cf:62:06:94:36:b2:e3:07:3c:a6:3b:
ee:fc:9c:85:db:f6:e4:4e:ce:11:7b:11:70:f6:ec:
40:ac:68:03:80:06:54:7c:97:85:7c:b5:c8:a5:00:
22:9f:a8:8c:81:09:6d:bc:44:43:03:1a:a1:1c:3a:
5c:66:68:7a:08:92:3e:11:51:95:55:d3:b4:ad:ba:
f0:2b:3d:20:41:4f:b8:f9:29:1d:1f:a2:a2:17:a2:
2a:12:0c:c9:d6:a0:f1:99:b4:fb:fa:18:51:23:99:
05:2c:75:3b:c3:80:00:e1:6c:55:ee:94:7b:99:a9:
6b:54:e5:cf:fe:f4:88:86:cc:36:a1:50:ef:e1:db:
49:0c:4f:f1:67:4a:cf:48:04:67:c9:f4:e8:10:88:
be:3d:c7:bc:44:d0:a7:a4:dd:6a:a2:b4:e4:72:7a:
e9:26:ef:82:fe:77:bc:70:8b:e4:21:3d:fb:23:5c:
aa:b1:49:1f:fe:66:8e:d9:d9:1b:3e:45:ed:b1:17:
87:b8:7a:18:ea:7d:e9:5c:07:be:62:2e:37:28:24:
bf:03:08:9c:7d:14:28:f0:da:cf:a4:55:4f:9e:a6:
a7:c7:6d:4d:b0:a4:51:1d:33:6b:af:3b:4a:38:b3:
04:30:8a:6b:9d:19:44:d8:56:a9:a0:6f:28:46:98:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:53:14:3E:34:B0:A1:83:DB:6F:77:7C:5C:4F:BC:7F:86:87:80:05
X509v3 Authority Key Identifier:
keyid:89:F1:85:8C:D3:7F:B3:8B:2A:CF:A5:CB:4E:F4:3E:3C:30:8D:3D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/383b70-dbf3-4ff3-b153-3fe4f7cbadab/1/ifGFjNN_s4sqz6XLTvQ-PDCNPWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:55:d2:06:5f:ca:e7:9e:40:ec:1a:31:10:02:49:65:92:9b:
58:3c:da:15:41:03:b2:50:17:23:06:5b:5a:9c:13:00:89:ff:
34:74:bd:93:86:a9:d6:51:fd:00:eb:cb:e5:76:39:fc:ee:9f:
89:1b:91:6b:81:63:2f:c8:c3:14:25:53:b9:66:d4:34:c1:b7:
8e:44:80:9b:4d:c9:ed:c3:ac:5c:04:20:8e:09:05:ee:40:5c:
4e:65:0f:4e:9e:74:0d:98:9f:b4:bf:89:a0:01:9f:16:6c:84:
c8:49:66:9a:26:58:d4:50:b6:a2:aa:c6:7f:d7:81:db:f2:0f:
87:58:c3:13:93:84:f1:9b:2a:9f:74:d8:b8:68:2c:f7:52:16:
9e:24:81:19:39:05:20:55:1e:0a:fb:e7:ec:ee:a6:1a:9d:83:
3f:99:73:72:c4:ae:05:8a:2b:a8:ea:80:60:05:5a:03:69:d7:
53:ae:db:84:fd:bc:19:d0:4c:87:9d:4d:df:64:1c:f9:71:01:
01:fe:ec:a9:60:25:50:f2:ea:23:9f:92:ba:cf:8c:10:6b:73:
7b:76:81:1f:af:3c:39:66:d8:10:28:50:27:f1:62:f6:14:0c:
47:57:73:1a:b0:2a:c7:49:54:5b:9a:df:eb:85:f5:bf:0a:74:
13:01:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:18 2026 by rpki-client