Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
File: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft (raw, json)
Hash identifier: YgBrkGLri34m2vTlnN9xet3yxw0KQtiUIGQCAV4o6iU=
Subject key identifier: 24:67:3C:41:D7:52:5D:38:97:10:3E:B9:7E:49:D1:68:26:CB:37:E8
Authority key identifier: 0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
Certificate issuer: /CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Certificate serial: 019DA4540AE3E067CDDE8C2CCD527455CF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 06:01:04 +0000
Manifest this update: Sun 19 Apr 2026 06:01:04 +0000
Manifest next update: Mon 20 Apr 2026 06:01:04 +0000
Files and hashes: 1: C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl (hash: X9IMpZ22GEWyKk6VLLWGEiSexZupacH3TsAyEnctHik=)
2: Sa-P59ilAaBoROu7JXxgieqHHuI.roa (hash: klYsPIaTsQM9yUBEbb86aHfmxgUEhKSfXO+ZQhF9TNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:0a:e3:e0:67:cd:de:8c:2c:cd:52:74:55:cf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5a5390b8d68021803e7be9fcf5e8e1393ac043
Validity
Not Before: Apr 19 06:01:04 2026 GMT
Not After : Apr 20 06:01:04 2026 GMT
Subject: CN=24673c41d7525d3897103eb97e49d16826cb37e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:72:d2:0e:8a:ec:b9:25:70:39:f6:54:2a:4c:
7b:c8:9a:b4:ea:b6:c6:0c:54:e7:8e:f2:80:95:e4:
af:af:72:d2:72:4c:cf:10:81:0b:67:02:77:3a:ab:
44:55:08:f8:42:b1:2d:93:ae:75:c1:5b:28:99:12:
93:1e:80:34:17:17:b3:09:37:31:5e:3b:5f:2e:a2:
84:9d:94:e0:79:4b:3f:9d:df:5b:37:75:2a:1b:6b:
28:2e:d9:d3:63:3a:58:cc:08:55:71:91:d3:38:21:
9b:62:69:9e:6b:3f:87:48:2c:c0:95:90:68:4a:1d:
ab:ce:a5:5c:2f:95:ba:6f:36:73:ab:d8:2a:c6:d2:
8f:27:a4:de:8a:d8:2c:26:93:f0:dc:bc:6a:7e:88:
8c:06:1e:19:77:0e:f8:9a:06:d7:ce:fe:75:0e:57:
ca:23:ac:32:ee:03:06:0a:7a:fa:2e:5b:a4:ce:f5:
4b:99:00:7c:92:43:50:2b:51:b8:a1:cf:ec:30:9d:
2f:5d:8a:16:7c:7b:5a:a0:c1:76:f3:ca:f9:5b:4d:
6d:89:23:7f:7f:4c:46:be:3d:bc:fe:57:fb:86:87:
13:01:74:4a:e5:f2:60:13:d6:6e:3c:40:9d:cf:0f:
6f:7f:b7:51:0f:0a:4c:7b:d7:af:c6:d5:09:04:1d:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:67:3C:41:D7:52:5D:38:97:10:3E:B9:7E:49:D1:68:26:CB:37:E8
X509v3 Authority Key Identifier:
keyid:0B:5A:53:90:B8:D6:80:21:80:3E:7B:E9:FC:F5:E8:E1:39:3A:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/61cc6e-21f4-4e9c-a381-e7cd18855e2c/1/C1pTkLjWgCGAPnvp_PXo4Tk6wEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:09:a5:c1:5c:47:5e:75:75:9f:58:4b:15:a5:be:1c:09:39:
44:74:ae:fa:4e:e9:63:7f:d5:16:54:93:f0:35:e4:0c:f5:be:
5a:1c:06:e4:2a:b6:e1:67:c5:e5:1e:f8:26:28:ec:39:24:cd:
c7:17:94:81:45:01:12:e4:98:86:ed:ef:c9:a1:80:7a:4c:a9:
53:fa:b4:90:37:4e:f1:34:c0:5f:2b:ab:30:a1:70:b6:04:ee:
78:ff:69:3d:17:0f:34:af:c2:91:7b:39:2d:5d:69:fb:e5:b8:
91:91:99:b5:66:2d:f8:9f:a8:46:2c:21:5b:d8:df:28:8d:72:
52:ff:91:16:d0:b7:0a:65:48:47:ca:e6:50:30:4b:f9:2f:ee:
ea:ce:72:14:64:88:b9:30:a3:61:65:50:7c:ae:a4:c4:67:d8:
69:16:73:ba:c2:03:6c:8c:16:b3:a0:6d:84:b3:7a:85:62:b4:
94:a2:28:3e:c8:2f:46:99:a3:55:3f:57:a8:61:76:2d:28:a6:
e5:93:26:6b:6f:d6:d6:a7:2d:47:be:70:96:ab:d0:db:09:8d:
21:15:6a:b7:0f:30:67:cc:3d:36:b8:a1:8b:00:5b:fb:fe:90:
cf:fe:bb:06:c3:2e:1b:2a:7c:47:8f:88:4c:94:e5:cf:7e:ce:
79:3f:2b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:50:03 2026 by rpki-client