Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
File: 898KdcnvaBuNIzZ9vo7a0FPzvZU.mft (raw, json)
Hash identifier: FYmRWXNM+orn58WJEKUl+OliVHIMboOuFRAqi80Ow6Y=
Subject key identifier: C1:C9:B8:74:CB:9F:6D:D7:85:95:95:6A:A2:18:B3:55:FF:CC:90:9D
Authority key identifier: F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
Certificate issuer: /CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Certificate serial: 019D98F51F27A5D60BCD96A920EDF3053641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:01:34 +0000
Manifest this update: Fri 17 Apr 2026 01:01:34 +0000
Manifest next update: Sat 18 Apr 2026 01:01:34 +0000
Files and hashes: 1: 898KdcnvaBuNIzZ9vo7a0FPzvZU.crl (hash: 6pKUa2ZezDMc4iomHKJS+6i3AkNx+g3+G5dv3jomxsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:1f:27:a5:d6:0b:cd:96:a9:20:ed:f3:05:36:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3df0a75c9ef681b8d23367dbe8edad053f3bd95
Validity
Not Before: Apr 17 01:01:34 2026 GMT
Not After : Apr 18 01:01:34 2026 GMT
Subject: CN=c1c9b874cb9f6dd78595956aa218b355ffcc909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:e8:5c:a2:2b:00:cc:e0:0a:66:5a:25:5d:
55:39:4b:0f:69:06:58:42:49:56:67:d3:cc:b9:38:
8a:39:7f:e2:91:d9:fd:72:11:d7:be:30:d7:d6:65:
db:45:b3:80:48:c8:0a:95:29:b4:56:b6:fa:5f:b7:
64:7b:37:15:ff:0b:3d:2f:c1:96:78:2f:b0:ba:03:
8b:b2:d5:ca:fd:6b:12:20:0f:84:c6:63:ff:ed:90:
23:f4:35:3f:22:e0:fc:50:6c:5a:b2:c7:73:2e:3e:
ea:09:72:f2:06:ac:12:e5:78:7f:72:6a:2f:23:f9:
9e:b5:32:9c:1d:41:a4:fc:6b:f8:13:4d:9d:89:52:
93:49:f7:54:34:47:56:db:b8:b8:d0:07:87:32:0f:
3d:98:32:8e:c8:59:77:f2:5e:b8:87:0d:5c:1d:c7:
0b:c9:8a:a8:76:d1:23:df:25:af:e1:16:16:c6:e0:
87:7d:4f:52:f7:3a:4f:1a:3d:85:93:00:36:8d:0e:
02:a9:2a:db:80:bf:b4:61:38:06:c7:fa:e3:e9:4b:
57:30:06:a2:32:0a:b6:0a:29:dc:9b:bb:bb:ca:7b:
26:9a:d8:b0:8c:ea:85:2c:92:2c:6a:06:d9:25:e8:
3f:c5:5c:dc:7f:a0:b7:c3:c7:96:35:36:1a:e5:e3:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C9:B8:74:CB:9F:6D:D7:85:95:95:6A:A2:18:B3:55:FF:CC:90:9D
X509v3 Authority Key Identifier:
keyid:F3:DF:0A:75:C9:EF:68:1B:8D:23:36:7D:BE:8E:DA:D0:53:F3:BD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/898KdcnvaBuNIzZ9vo7a0FPzvZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4cb72b-3f82-46d2-bf25-ab8abcc69016/1/898KdcnvaBuNIzZ9vo7a0FPzvZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:03:93:df:98:30:73:22:3b:a9:c6:e0:ef:ae:9d:85:31:5a:
be:89:72:db:31:09:88:fb:38:95:75:c1:a3:c6:1e:95:6e:dc:
43:ea:a6:5f:42:24:d6:a4:52:08:db:cb:b5:9d:ea:5c:e8:68:
4c:63:98:0c:25:0b:6a:b6:81:fb:fe:dc:49:d5:de:8e:80:a2:
8e:9b:17:94:70:51:87:33:13:3b:81:40:08:ad:db:c9:47:85:
af:bc:54:88:00:16:a9:05:cf:de:95:cb:51:b2:57:d7:7b:14:
b4:d0:b1:6d:4c:00:e4:b3:69:eb:57:66:1b:fb:35:bd:62:2e:
5e:f0:30:20:47:70:2e:48:0a:ca:bd:6c:4e:a1:90:07:e5:68:
f7:c4:b5:ba:a1:5d:a1:3c:d4:72:23:59:5d:bc:48:d0:2f:a9:
25:9c:ad:96:6a:2a:e4:0a:fd:f8:42:2e:ae:c1:42:9f:8b:30:
10:26:a9:37:2e:63:b4:f7:ad:36:36:0f:d4:d2:a9:b4:e8:b1:
13:c1:6e:6c:54:af:b3:cc:eb:4e:2b:7e:cd:07:cc:53:79:67:
24:f5:a8:ca:22:ca:c8:c7:8f:bf:f0:0b:c7:9e:90:5e:de:af:
1e:5c:50:ca:a6:f9:33:ac:8d:42:3f:25:80:bf:b6:2b:cc:9f:
82:5b:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:35 2026 by rpki-client