Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: IZNsaRixYYf+kGGIsiZ9iBPnLDgI3PxjlWAQ0zurcWE=
Subject key identifier: 10:27:3E:7F:53:29:D0:6C:13:91:DF:3F:1D:08:C4:70:B4:F0:DA:40
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 019D9A3EAAB06DEB08367ABD3960BF5B1B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 07:01:31 +0000
Manifest this update: Fri 17 Apr 2026 07:01:31 +0000
Manifest next update: Sat 18 Apr 2026 07:01:31 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: dRbxhDM7jf881v3RD/RnEpmtbUCJPD5zkzprvz88xPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:aa:b0:6d:eb:08:36:7a:bd:39:60:bf:5b:1b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Apr 17 07:01:31 2026 GMT
Not After : Apr 18 07:01:31 2026 GMT
Subject: CN=10273e7f5329d06c1391df3f1d08c470b4f0da40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:9f:4b:d1:5f:16:07:72:73:45:0a:6c:51:
77:20:32:6b:b4:0e:fc:c3:5e:3b:51:37:f7:49:f8:
c5:40:38:ae:15:cc:96:2a:5a:f9:65:7c:05:82:13:
ab:9d:ac:6c:04:ee:c0:7c:13:65:19:13:bb:f0:dd:
05:65:71:d0:9e:7a:9c:53:d8:ad:bf:32:d7:b9:d7:
09:ac:11:42:88:8a:17:b7:67:13:c0:00:c5:7d:16:
fb:e0:da:df:74:24:e2:74:17:06:36:d6:06:87:0f:
ce:52:19:e6:b9:5e:17:f5:c9:5a:c2:eb:8c:74:5b:
ce:3b:62:7c:98:97:6f:f1:1a:e4:07:83:54:d2:03:
18:b5:d5:b1:09:13:1f:5e:f0:95:c6:07:91:6e:f5:
6d:5e:00:3d:78:a8:d4:28:ed:a9:f1:f6:02:69:b4:
ce:16:d2:9e:ed:c4:29:04:26:e8:95:13:34:83:37:
34:f9:fa:f3:ec:6e:de:39:34:6f:2e:f9:17:f3:79:
95:51:dd:1a:9c:e8:ec:48:f5:05:62:cc:0c:6f:2a:
40:50:15:d3:17:19:aa:6e:6d:21:68:ca:c4:b9:c7:
0b:eb:c0:b5:28:de:64:39:dd:18:f4:0f:b6:6e:c2:
93:f1:1c:08:8d:ae:8c:c5:1f:24:60:0e:d2:8f:ca:
dd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:27:3E:7F:53:29:D0:6C:13:91:DF:3F:1D:08:C4:70:B4:F0:DA:40
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:34:1e:14:7a:2d:7c:4a:06:ff:2a:fd:05:e4:8b:a0:a6:96:
1c:7f:0c:a2:45:ed:b6:2b:8f:5b:88:bd:c8:a7:72:69:1e:8f:
19:90:d4:b5:22:95:26:e0:c1:21:8f:ed:8d:6d:1f:d1:6b:0a:
8a:a9:81:7e:8f:93:96:02:36:61:c3:b0:34:94:95:6b:88:a7:
63:c1:5c:a4:78:6c:1f:1c:02:b1:69:d6:14:3e:0f:fb:b1:e7:
62:dc:60:a8:b2:34:15:3a:c7:ad:13:7a:41:b9:47:d7:7f:16:
bf:0c:8b:7e:4d:07:29:6a:f4:76:96:60:4b:93:41:dc:08:25:
a8:c3:10:8a:4c:ea:bf:d7:34:b2:88:7a:d4:e0:e7:c4:59:64:
5f:e0:61:e5:99:de:65:e6:fd:c9:c1:8e:08:6d:6f:2b:f1:70:
0c:d3:af:51:ff:8e:e8:94:2e:92:25:73:0e:8c:ac:c9:6a:af:
35:14:95:d6:11:99:d5:16:5c:f9:85:9e:87:df:8a:ec:51:33:
ec:90:25:76:5c:03:88:b9:02:cf:08:67:cd:ad:8c:f8:4e:b4:
a1:79:e3:d2:73:ad:46:ab:0b:79:b0:df:4d:a1:7e:3b:82:af:
21:49:cb:49:2a:16:fd:a9:3d:8d:1b:fa:ee:c9:97:ab:3e:46:
5a:ca:a6:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPqqwbesINnq9OWC/WxsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZDRhOTZmZTFlZDAyOGQ1OTEyZDc3YTUwMGIwOTQ3OGJk
MTgzMjIwHhcNMjYwNDE3MDcwMTMxWhcNMjYwNDE4MDcwMTMxWjAzMTEwLwYDVQQD
EygxMDI3M2U3ZjUzMjlkMDZjMTM5MWRmM2YxZDA4YzQ3MGI0ZjBkYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3OfS9FfFgdyc0UKbFF3IDJrtA78
w147UTf3SfjFQDiuFcyWKlr5ZXwFghOrnaxsBO7AfBNlGRO78N0FZXHQnnqcU9it
vzLXudcJrBFCiIoXt2cTwADFfRb74NrfdCTidBcGNtYGhw/OUhnmuV4X9clawuuM
dFvOO2J8mJdv8RrkB4NU0gMYtdWxCRMfXvCVxgeRbvVtXgA9eKjUKO2p8fYCabTO
FtKe7cQpBCbolRM0gzc0+frz7G7eOTRvLvkX83mVUd0anOjsSPUFYswMbypAUBXT
Fxmqbm0haMrEuccL68C1KN5kOd0Y9A+2bsKT8RwIja6MxR8kYA7Sj8rdZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAnPn9TKdBsE5HfPx0IxHC08NpAMB8GA1UdIwQY
MBaAFP7UqW/h7QKNWRLXelALCUeL0YMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC85ODE4M2MtZWRjNC00NjRkLWJmNDUt
ODg5OWQxMDU4YjY0LzEvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC85ODE4M2MtZWRjNC00NjRkLWJmNDUtODg5OWQxMDU4YjY0
LzEvX3RTcGItSHRBbzFaRXRkNlVBc0pSNHZSZ3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzQeFHot
fEoG/yr9BeSLoKaWHH8MokXttiuPW4i9yKdyaR6PGZDUtSKVJuDBIY/tjW0f0WsK
iqmBfo+TlgI2YcOwNJSVa4inY8FcpHhsHxwCsWnWFD4P+7HnYtxgqLI0FTrHrRN6
QblH138WvwyLfk0HKWr0dpZgS5NB3AglqMMQikzqv9c0soh61ODnxFlkX+Bh5Zne
Zeb9ycGOCG1vK/FwDNOvUf+O6JQukiVzDoysyWqvNRSV1hGZ1RZc+YWeh9+K7FEz
7JAldlwDiLkCzwhnza2M+E60oXnj0nOtRqsLebDfTaF+O4KvIUnLSSoW/ak9jRv6
7smXqz5GWsqmrw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:20 2026 by rpki-client