Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
File: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft (raw, json)
Hash identifier: ouTPsXcHlSQ1KwMS0hQ8U8q+haHo8NTKt2x4D72p20g=
Subject key identifier: 5A:0E:B3:E5:15:16:A6:87:DB:6C:E4:F1:94:30:D9:6F:7D:F2:6E:5D
Authority key identifier: F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
Certificate issuer: /CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Certificate serial: 019DA48B1055329F3184CDB9A343E42376C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 07:01:10 +0000
Manifest this update: Sun 19 Apr 2026 07:01:10 +0000
Manifest next update: Mon 20 Apr 2026 07:01:10 +0000
Files and hashes: 1: 1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl (hash: KRLRh2FN5JMJekEsTvdxFqMRmoTLIEC1cR8rahYlba4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:10:55:32:9f:31:84:cd:b9:a3:43:e4:23:76:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89c9a69234527b786948b2eb4c6509db0a4d5a8
Validity
Not Before: Apr 19 07:01:10 2026 GMT
Not After : Apr 20 07:01:10 2026 GMT
Subject: CN=5a0eb3e51516a687db6ce4f19430d96f7df26e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:ae:40:2b:1a:50:3a:b9:04:ae:e0:35:ab:
cc:05:ae:de:1a:61:d7:ab:3f:b9:d4:ad:2b:c0:8a:
31:d2:c9:c9:c6:a1:e5:a9:3e:c1:61:5b:b5:95:b7:
7a:3d:bb:a7:b2:42:08:e2:0a:8d:52:49:bc:31:e5:
d8:82:53:f3:3e:00:f8:3f:f2:8f:2b:6f:67:c1:f6:
25:8c:b1:42:96:ca:e7:0f:1c:bc:2c:64:5a:8d:e9:
4e:ca:8a:e5:ba:0a:89:d9:5b:48:45:3f:b2:e5:8e:
03:9e:17:aa:9a:f6:be:6e:ef:71:aa:77:a6:8e:7d:
2e:f4:cd:52:76:5c:64:4e:73:7b:4f:5d:c6:00:5c:
93:0f:1c:55:8b:d0:7f:8c:1c:ae:f4:67:47:2a:57:
36:4f:d6:2d:a5:aa:0a:32:9e:f4:79:2c:ef:ea:d0:
8e:bd:8c:c1:f4:85:ac:02:d7:7c:1d:f2:fa:bc:c0:
b0:e5:f1:cf:73:bd:7b:28:73:f5:26:7c:fe:69:8e:
61:79:25:1b:c3:d9:7d:21:b9:47:db:2e:71:43:56:
52:a9:7b:9c:80:51:e1:54:1f:57:3b:60:1b:8e:00:
a7:ae:60:b8:8f:e6:67:75:3c:35:1f:c6:d5:c0:f8:
25:95:b8:0b:e7:49:71:7d:80:71:d0:64:7d:d9:a9:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:B3:E5:15:16:A6:87:DB:6C:E4:F1:94:30:D9:6F:7D:F2:6E:5D
X509v3 Authority Key Identifier:
keyid:F8:9C:9A:69:23:45:27:B7:86:94:8B:2E:B4:C6:50:9D:B0:A4:D5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9992c2-0cdd-4361-9c03-c2ccce6c47a4/1/1-JyaaSNFJ7eGlIsutMZQnbCk1ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:36:a2:77:fc:49:fa:fa:9b:3e:9d:61:da:af:94:fc:69:e6:
3a:57:0f:1e:5f:27:93:57:e1:8d:e3:7c:98:7d:6e:ba:8b:a8:
97:a3:24:0c:fa:c5:fe:b3:02:a9:90:91:a4:8b:4f:83:cd:06:
df:c5:4a:2c:5e:58:28:e4:62:d5:ee:1c:c5:b1:2a:96:24:e6:
1a:81:96:11:fe:70:ee:e8:4e:42:7f:51:6d:eb:89:8f:48:fd:
20:89:a0:30:97:c7:35:41:14:0f:b6:2b:d9:cf:11:11:e3:0d:
61:be:0e:60:ea:5c:3e:57:00:9c:fe:58:29:45:e8:cd:a9:e8:
fb:d8:09:66:77:76:70:2c:e1:e2:a4:f1:e1:ba:15:f5:00:50:
8f:6e:c5:32:8b:b4:64:e6:b1:d1:47:30:93:4b:15:48:f9:b5:
3a:a4:29:96:31:ea:32:02:7f:f9:82:86:72:59:c7:40:90:c0:
7f:d0:56:d6:bd:69:f5:07:64:20:fa:b0:be:b0:e3:b5:fb:31:
fc:98:21:4e:3f:a1:2a:cd:8f:32:d0:d1:03:f3:29:7f:d1:97:
ea:6f:0b:2a:df:50:8e:d0:37:96:67:43:a7:68:2f:49:b0:f4:
a6:56:be:64:2c:a8:c9:cd:13:00:02:f8:97:a1:9e:d3:52:8e:
1c:5f:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:43 2026 by rpki-client