Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: K5GNF5bujkHDKoE7sg9SOudWogqXDmfNlYy0Y/n9Pds=
Subject key identifier: 71:96:C9:D5:C4:1B:13:9F:19:A3:E4:FD:B5:C4:8F:08:D5:10:4A:2E
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 019D9AE37175C72E5C95323E4267B2B05795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 1440
Signing time: Fri 17 Apr 2026 10:01:29 +0000
Manifest this update: Fri 17 Apr 2026 10:01:29 +0000
Manifest next update: Sat 18 Apr 2026 10:01:29 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: Aw3wPgM31RMhDQaw/ECykjTmioUyem5JRKzhx7dxex8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:71:75:c7:2e:5c:95:32:3e:42:67:b2:b0:57:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Apr 17 10:01:29 2026 GMT
Not After : Apr 18 10:01:29 2026 GMT
Subject: CN=7196c9d5c41b139f19a3e4fdb5c48f08d5104a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:2a:99:cd:b9:7b:cf:5a:45:92:18:5d:28:
d5:a1:56:9b:86:35:50:6e:cb:df:4d:40:16:38:52:
95:88:5a:6b:e4:85:53:62:87:e3:80:42:af:d9:58:
a5:47:9e:7f:a3:a8:63:99:8c:75:ef:b6:67:24:34:
bd:06:93:0d:15:dd:75:c6:e4:42:bb:b1:e5:72:5a:
28:b1:1b:3e:24:a2:14:a7:21:51:f2:53:02:9f:c7:
93:27:f1:fe:52:a5:62:cf:4c:96:1b:dc:65:d5:c7:
3f:0f:f9:a5:4d:20:b0:c3:17:14:94:e3:61:28:f4:
1f:86:0e:79:8c:3e:29:10:42:cb:db:ab:52:bf:8d:
f3:18:2d:10:21:57:2c:d2:9b:df:2c:33:8a:f8:5f:
09:e0:7b:37:bc:11:c6:72:68:26:23:90:ce:7e:ef:
72:d6:67:2a:a7:d7:48:0f:61:fc:4c:f7:84:fa:04:
2c:ff:18:44:b6:94:95:39:47:34:4d:c1:e4:2d:f6:
62:fa:62:56:ce:ec:9c:09:3f:91:58:a0:ff:f6:90:
54:5e:58:0f:a7:f7:0d:67:1f:4e:7b:7c:ca:59:17:
44:bd:05:08:be:7e:0b:24:4b:1f:45:ff:71:9e:64:
c9:6a:5f:81:60:c9:75:ac:ec:ea:62:94:7d:d3:c8:
ba:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:96:C9:D5:C4:1B:13:9F:19:A3:E4:FD:B5:C4:8F:08:D5:10:4A:2E
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:66:96:9a:3f:94:da:23:af:c2:7b:a5:90:dd:9a:36:cd:95:
21:11:dd:6f:e1:bf:cb:cb:cf:e5:1f:0a:7b:34:71:57:e6:10:
ed:53:aa:eb:a6:f1:90:7d:45:01:36:d7:bf:a5:ee:00:23:13:
f9:61:03:cf:b5:11:ac:3f:99:7c:36:60:82:57:a4:b0:b0:45:
0e:09:ab:9e:cc:c4:c2:fe:a7:7c:bf:be:e7:0b:54:af:f5:1c:
b1:b5:a7:93:a3:b1:e9:11:35:22:c4:50:a3:2f:87:68:12:98:
d0:e4:e2:28:4e:4a:c0:be:a5:95:11:68:74:79:b7:14:18:7c:
cb:c6:54:c2:06:47:85:2b:36:2e:a8:27:69:f6:81:5a:b1:27:
66:e3:4c:dc:6e:43:22:f8:e9:2c:26:4c:9f:f2:cc:ba:75:ac:
3f:5e:50:6a:0e:35:62:38:72:09:db:7d:79:9e:49:32:a6:49:
ae:9c:37:33:64:50:2e:b1:d1:22:d2:33:81:c4:5b:35:71:46:
09:14:78:3d:31:83:40:f5:c8:f5:6a:b6:00:9f:db:e1:cd:0e:
97:55:d2:ec:37:9b:a1:5c:d6:5e:2e:c8:d3:04:1d:53:5a:9b:
3d:76:77:98:42:fb:dd:3d:26:ec:cf:4e:7c:48:17:be:72:7e:
b4:97:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:00 2026 by rpki-client