Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json)
Hash identifier: KrwEwPOwogJ3KA4uOdTG1Sig5p0uKUgqFnqgJztBI8I=
Subject key identifier: 2A:F1:00:12:2F:2B:68:19:D5:D3:09:A6:23:8D:EF:51:CF:43:2E:BF
Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Certificate serial: 019D992B1C49C92281120EA3F3B9D38E13E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:32 +0000
Manifest this update: Fri 17 Apr 2026 02:00:32 +0000
Manifest next update: Sat 18 Apr 2026 02:00:32 +0000
Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: 41LaXlNnP3e0Z5+V2iLZvSvNGDEdv37Ve2RaT4B/IVA=)
2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1c:49:c9:22:81:12:0e:a3:f3:b9:d3:8e:13:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Validity
Not Before: Apr 17 02:00:32 2026 GMT
Not After : Apr 18 02:00:32 2026 GMT
Subject: CN=2af100122f2b6819d5d309a6238def51cf432ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:4b:c9:7e:c2:b9:81:4f:e8:17:41:55:57:
67:d8:30:70:12:eb:5b:b1:a3:46:6d:43:83:e0:1a:
49:ba:03:79:af:bc:17:18:ab:47:91:61:9f:27:2a:
ca:cd:fb:87:0e:14:75:66:2a:af:f6:e3:16:d4:8c:
57:03:ba:a7:76:c0:0a:2a:be:97:f7:d5:61:52:f2:
52:66:71:35:9b:d2:3f:f5:b9:00:e6:18:a7:96:df:
de:2b:40:6e:09:07:d0:e3:92:44:fa:55:10:40:1e:
93:3f:1b:b5:02:00:a9:2e:d1:a7:2e:76:05:c1:e2:
aa:12:5c:6f:50:bf:a4:b6:7f:f7:7d:8e:12:5b:ec:
ad:73:30:49:05:e6:cf:bf:cf:77:a1:ae:f3:c7:cb:
ef:1e:10:d6:f9:bf:df:ee:57:75:8b:69:ca:d6:e2:
64:2b:42:fb:3e:89:37:08:56:80:d8:10:2b:1d:45:
d8:6a:2e:f7:48:e0:76:32:04:22:ae:f2:0c:de:04:
4c:c0:79:21:9b:ee:16:b5:5b:1f:ec:90:bd:d0:97:
7e:20:ab:4c:ef:51:05:56:d0:e9:7f:52:7b:64:ed:
86:b9:8b:46:3d:15:ea:a0:e1:25:85:8f:b8:ed:49:
28:b0:4e:84:a4:d4:f4:a9:12:3f:7c:c8:56:cc:40:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:00:12:2F:2B:68:19:D5:D3:09:A6:23:8D:EF:51:CF:43:2E:BF
X509v3 Authority Key Identifier:
keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1b:9c:c9:62:ce:88:75:53:e3:dc:ec:7b:65:b4:5c:48:4d:
4b:d7:64:00:9b:ed:b1:40:aa:26:0b:38:1e:03:fa:cf:46:2e:
81:dd:30:da:8d:03:81:33:5b:63:a0:fd:3f:f5:cc:d4:8e:0f:
e3:da:5f:18:cf:33:4a:4c:2d:65:ac:da:43:b7:6f:0b:4c:03:
eb:be:92:02:28:b3:5e:cb:c0:b1:01:aa:e9:da:f9:66:34:83:
3d:03:b8:97:85:1f:50:34:88:6f:d3:91:08:60:5a:95:aa:ae:
6a:54:1a:54:47:9e:1e:a6:6d:5c:34:4a:f6:c7:36:ba:a6:a1:
db:73:2c:9c:ad:53:dc:45:40:f6:b1:3f:0b:8d:da:18:65:63:
15:ab:48:6f:a3:e0:6c:f2:24:eb:95:1e:f2:37:be:99:aa:a6:
ca:77:6c:bb:7b:70:02:58:da:22:29:09:73:85:65:26:ca:59:
16:a4:f0:51:86:81:2e:9c:64:57:d2:d6:9d:ff:4e:ac:57:c1:
76:ae:f3:8f:b8:0f:73:88:d6:f4:6b:52:2b:4f:7e:0f:cc:21:
33:37:3f:ee:df:5d:32:76:1e:51:ce:28:99:2e:fd:c0:0c:ab:
32:90:af:9c:36:51:f7:12:97:c5:3a:c1:fa:f3:b7:52:b8:30:
b9:87:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:44 2026 by rpki-client