Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: nxZv/EQY7bYFbVsGTd0XQrvjh/2Bsje5wRuoI7yxYZ8=
Subject key identifier: 7F:F7:18:A7:A4:DA:2F:70:2B:5C:36:B7:50:7E:73:30:EB:58:03:3C
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019DA48AE8AA1C5EAA3A092E5BC8BF06C747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0DF7
Signing time: Sun 19 Apr 2026 07:01:00 +0000
Manifest this update: Sun 19 Apr 2026 07:01:00 +0000
Manifest next update: Mon 20 Apr 2026 07:01:00 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: N7O/JKws8OE+tWRyB8D/SNvYHptjavUljKIRavZSlXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:e8:aa:1c:5e:aa:3a:09:2e:5b:c8:bf:06:c7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Apr 19 07:01:00 2026 GMT
Not After : Apr 20 07:01:00 2026 GMT
Subject: CN=7ff718a7a4da2f702b5c36b7507e7330eb58033c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:10:ee:d4:7d:73:17:8b:ce:fc:01:1e:f3:
45:8c:6d:84:05:25:4f:36:4e:7e:2c:22:19:2f:51:
6c:5f:0d:0e:51:12:3d:a0:eb:ca:f1:a4:3c:a0:93:
92:9c:a4:98:58:ec:26:fa:c1:e1:d0:7d:f1:5c:da:
78:44:52:1a:7b:2f:eb:8e:05:32:53:67:78:74:19:
53:67:46:a4:62:f3:ed:4c:f6:1f:c4:ac:08:92:ea:
46:5c:6b:7e:08:75:8f:ac:74:5b:b3:79:42:6f:c0:
98:74:b6:db:25:09:fd:2f:5a:87:38:9b:42:bc:4b:
e5:4e:11:d6:90:23:b2:1a:79:d6:8e:8b:f6:44:b9:
11:1f:c6:84:3d:86:1c:a8:c5:58:2b:a2:89:fe:e5:
2a:4d:6c:0a:70:27:7f:a4:f3:14:59:e3:a4:78:ba:
33:42:14:83:72:a5:9d:59:90:e1:69:5d:59:d4:59:
a1:7c:3a:9a:31:c3:c6:a5:c0:c2:e7:1a:34:c6:84:
39:a1:38:d2:61:aa:7d:74:f6:60:c9:d1:9d:96:d3:
e4:c9:ba:f8:2d:07:2a:55:09:15:5b:d0:df:a8:1c:
ae:15:12:22:72:fb:f0:48:25:3e:46:15:49:d0:d2:
d5:91:12:05:66:9d:d5:ef:df:91:3e:9a:ce:da:14:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F7:18:A7:A4:DA:2F:70:2B:5C:36:B7:50:7E:73:30:EB:58:03:3C
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:fa:2f:eb:93:b1:c9:c6:59:7c:ff:90:9d:b0:ef:24:92:
b6:39:07:6c:74:f6:b5:9b:61:d3:94:8b:f6:b3:79:d8:2d:68:
72:1f:b6:b2:36:ac:9b:47:1b:35:8c:20:6e:ea:14:5c:8f:7d:
e9:a8:16:93:c7:13:0c:22:45:9a:f2:f2:93:3a:4a:12:75:b3:
7a:34:c0:95:49:27:17:fa:19:01:e4:b0:5a:ce:17:ab:2e:03:
85:36:3a:c7:bf:a5:75:ea:70:60:61:9e:24:88:2a:4c:b7:7e:
8b:36:ff:90:38:89:82:4a:ee:0a:3b:49:de:63:b9:b2:c8:e1:
f8:41:22:86:cc:70:33:ea:16:08:6f:c5:2b:d0:77:89:01:68:
de:00:31:7f:a8:dd:4f:02:98:8f:19:0b:68:43:0d:3e:bf:8a:
bc:9c:fa:c9:47:d3:56:3f:f9:ec:1a:d2:bb:fe:a3:93:83:fb:
6e:4e:34:37:54:5e:50:68:04:ab:22:59:69:64:65:e6:84:5a:
2a:f6:c4:f2:f3:63:fb:b5:24:73:a8:04:45:d4:0a:14:9d:e0:
0a:2c:5a:18:c3:da:a6:81:1a:6b:50:f7:b6:b6:b5:e4:86:97:
be:a2:1d:20:6a:b8:1f:4d:2b:8b:e8:d1:c8:db:b0:72:90:bd:
b3:66:a7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:23:46 2026 by rpki-client