Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File: 1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier: L6RcMgsPeorsjkWBfPAFpo0cp3YKjNv3eLLmufTRCOQ=
Subject key identifier: 95:C7:14:98:FF:B9:BD:19:2D:59:9C:D9:22:FB:BE:3B:D8:8F:2A:66
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer: /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial: 019D9AE33C69B406D25387A4C020C67E3350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 10:01:16 +0000
Manifest this update: Fri 17 Apr 2026 10:01:16 +0000
Manifest next update: Sat 18 Apr 2026 10:01:16 +0000
Files and hashes: 1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: gSBmWh7bGMfSPurDxoe27Dn/iotQxeBJ8bkzhJEFP0w=)
2: 6tWtabdt5bSrtsaHQ9QBo4ICycQ.roa (hash: HsNpK7hPj6W6BnASMw5ZiyHooADbT1D1N/LoEYfC8k0=)
3: iQJQC_oWujo-15_GL75EM-stwEc.roa (hash: VM81RK3ZU1AzMrmtbRjQdCVVrAt7gS8cQsTq2NJoc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:3c:69:b4:06:d2:53:87:a4:c0:20:c6:7e:33:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Validity
Not Before: Apr 17 10:01:16 2026 GMT
Not After : Apr 18 10:01:16 2026 GMT
Subject: CN=95c71498ffb9bd192d599cd922fbbe3bd88f2a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:f0:56:c3:23:b7:a5:ce:49:94:cc:b1:2a:
50:2b:f3:9c:75:60:23:ff:02:15:d3:4f:d3:78:ae:
08:a5:75:ab:09:38:f5:ce:fa:a3:1c:33:ae:58:87:
72:bd:c7:43:27:93:21:e4:1c:00:70:62:1e:a3:d1:
6f:49:5a:4c:0a:e7:e6:67:03:26:4f:f2:4b:1b:83:
11:af:07:e2:bb:8d:a8:7e:4e:e0:81:35:7a:17:e0:
bc:2a:d0:0d:f3:9e:26:42:8e:52:46:2b:09:0b:f4:
46:83:c1:b0:ea:b7:89:00:42:df:1d:dd:97:55:f2:
0f:ce:cf:c8:58:74:35:ad:e0:77:59:c7:15:61:cd:
18:66:41:7b:34:0a:15:50:71:b4:b0:4b:9f:b9:54:
f5:5d:29:fa:70:6c:86:71:ab:9e:d6:aa:46:1f:e0:
fc:ea:e0:1b:d7:e1:55:98:56:d2:cb:4f:65:c5:78:
f4:91:d3:4d:97:4a:47:ca:68:e7:ed:5b:d0:5c:6e:
db:f8:9c:01:75:8c:9a:36:d8:d6:10:43:2a:6f:e3:
ae:0a:79:97:aa:77:92:83:54:61:e3:2c:80:a0:c5:
aa:c1:92:a9:43:f1:66:92:18:d6:54:5e:28:70:98:
ea:65:50:d0:30:24:9b:24:bc:55:c1:9d:08:43:92:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C7:14:98:FF:B9:BD:19:2D:59:9C:D9:22:FB:BE:3B:D8:8F:2A:66
X509v3 Authority Key Identifier:
keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b9:b5:2f:91:e3:db:3c:6f:32:60:8c:31:73:e4:f7:06:46:
7f:5c:27:83:06:99:92:54:25:54:67:02:d8:f4:0b:c9:c8:7d:
7e:c4:7c:e0:5d:57:29:16:46:57:68:26:b3:be:d3:f6:cf:5c:
5b:8f:f8:2d:1a:88:0f:63:68:6c:23:e4:1d:83:8a:1c:19:74:
07:0e:35:c2:c7:c2:ee:47:f5:d0:f2:ef:b1:ee:0a:44:f5:0f:
a8:00:48:05:a2:78:08:d7:f7:e2:9f:99:4c:fd:d8:a7:31:d5:
04:ad:1d:84:7b:98:46:88:23:99:ab:be:8f:c4:d0:44:de:c7:
3d:f2:4b:ae:3e:4f:c0:49:9e:7f:e6:2e:3e:6b:77:06:2e:e6:
57:18:4a:00:64:fd:74:73:84:7c:8c:ad:84:c5:2f:a0:22:2e:
9e:b5:df:2e:72:de:a2:6a:bd:b2:52:7b:07:b2:77:bb:48:15:
b6:e1:53:c1:65:e7:26:cd:39:6c:c7:13:e1:b9:e7:8f:93:ad:
86:6c:bb:d0:f7:b7:26:4f:52:4b:fa:1a:c7:55:1e:70:55:9b:
3f:08:90:36:59:72:b4:36:25:a6:8a:88:0b:31:db:da:4b:75:
7c:38:af:2a:a1:15:16:75:fc:17:14:ff:9b:83:29:8b:ed:5f:
2a:cd:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:20 2026 by rpki-client