Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: D8ktFTH86It20L+pBX+AM9opJvSdrRbmZaOYF+0yfNI=
Subject key identifier: 74:38:32:43:A8:D8:5C:95:62:F7:8C:DA:5F:33:12:C8:84:B7:34:EE
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 019D98F43E2280C61307A1AC830C00FA2D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:00:36 +0000
Manifest this update: Fri 17 Apr 2026 01:00:36 +0000
Manifest next update: Sat 18 Apr 2026 01:00:36 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: 35scs6znSz5BBYGd56j5m07mishM+/vmLqNwJzg4dyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3e:22:80:c6:13:07:a1:ac:83:0c:00:fa:2d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Apr 17 01:00:36 2026 GMT
Not After : Apr 18 01:00:36 2026 GMT
Subject: CN=74383243a8d85c9562f78cda5f3312c884b734ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:11:2f:e7:9a:be:38:70:30:1d:8e:33:4e:
f6:b0:ff:84:7b:18:82:16:b9:ee:7b:b3:72:e0:4e:
20:ef:50:ae:0e:c2:73:18:50:44:1e:89:da:ef:67:
79:60:1c:3b:62:7d:88:d0:17:08:b7:bd:ae:df:05:
7e:de:a5:20:f1:d2:ee:02:4e:3f:08:6a:29:41:aa:
0e:30:8d:0a:3d:27:48:54:7a:4b:1d:ba:75:11:95:
2a:c9:f0:7c:ab:bc:bb:ef:09:11:95:ab:8f:8c:6c:
d1:40:f9:43:cc:04:8d:5f:c9:79:0e:c1:8e:9a:aa:
4d:ee:7f:40:5c:34:f3:33:b4:86:50:13:0f:fb:3a:
f2:3a:e5:cc:73:e9:05:16:33:02:43:d7:67:8d:03:
8c:d5:b8:c5:90:e8:18:3f:6c:87:d2:18:2b:9e:64:
80:5f:ac:fc:1c:76:49:1d:27:26:a2:d2:8b:a4:a3:
79:78:3e:db:6f:5b:4b:9a:75:c7:c3:8f:d0:b8:67:
ff:2a:c3:47:eb:45:83:3f:c3:20:e2:a7:99:64:24:
53:80:2e:81:59:47:59:1b:c7:61:2d:60:8e:00:f8:
b3:ed:5d:f0:c8:56:c4:4e:43:9a:1d:df:98:50:13:
2f:5d:b4:63:8a:0b:fe:5d:69:ed:2d:38:c5:3d:5d:
9a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:38:32:43:A8:D8:5C:95:62:F7:8C:DA:5F:33:12:C8:84:B7:34:EE
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a9:41:57:ab:53:64:0f:01:b2:50:e5:c8:aa:ab:6e:e9:24:
c1:11:23:3d:20:3e:ef:b9:2c:ff:08:6e:36:b6:d5:6d:2a:e9:
3b:a7:20:d0:c9:d1:91:53:04:45:3d:ff:d9:47:15:b1:60:fc:
12:82:d9:10:b3:b7:eb:c4:a6:a6:65:e5:87:78:b5:68:8e:83:
8e:16:96:1e:e2:b1:73:65:bc:d0:da:85:47:35:0d:e6:ef:23:
71:99:9d:06:9c:96:07:a4:b9:1a:9d:5f:43:9e:53:95:1a:91:
61:3c:8a:21:7f:1b:e5:e1:27:88:8f:9c:da:b7:0e:f5:37:6e:
a6:c3:0f:52:d2:ff:2c:22:40:35:a8:af:2d:5b:a4:e2:1b:49:
4d:da:bd:b6:dd:77:4e:5c:ef:5e:4e:4b:af:01:20:07:ab:1a:
23:a9:2d:05:d9:42:3a:29:b9:72:1d:55:60:61:b2:56:31:44:
01:8f:37:92:e8:57:5c:2a:4c:6e:44:51:9c:ba:ff:dd:f0:37:
89:f2:76:52:b4:86:66:13:6d:60:91:c0:4b:3a:06:c7:a9:f7:
9e:b4:08:f7:7d:49:d3:45:c0:45:a4:78:f2:fb:eb:12:ad:58:
be:df:5f:4d:03:00:a9:22:56:dc:ff:95:57:59:8c:8b:c8:20:
06:60:6b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:17:56 2026 by rpki-client