Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: K77xypWSNQ6sTYA3UU7LqQxBIqtemtsoLOPWfbjyqpo=
Subject key identifier: 2D:0D:6F:38:94:E1:DD:E0:31:DE:61:C3:B2:12:62:FD:30:27:EC:EF
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019D98BDF30E55D4F887DA51EEC8C5EDB7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0E42
Signing time: Fri 17 Apr 2026 00:01:18 +0000
Manifest this update: Fri 17 Apr 2026 00:01:18 +0000
Manifest next update: Sat 18 Apr 2026 00:01:18 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: akoGTMt8vIfCHRt5yv0hpfQJovF2u5qtEc9Q6S45Rro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f3:0e:55:d4:f8:87:da:51:ee:c8:c5:ed:b7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Apr 17 00:01:18 2026 GMT
Not After : Apr 18 00:01:18 2026 GMT
Subject: CN=2d0d6f3894e1dde031de61c3b21262fd3027ecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:25:06:d3:6b:76:bc:7c:f1:ac:44:cb:c2:
7c:4d:c8:c2:70:df:3a:4c:ee:dc:01:2d:fe:6b:34:
cc:ba:f4:1b:92:56:e4:b6:b2:b8:5c:51:1a:8c:d2:
5d:ab:b2:e4:c2:15:0b:51:6a:ec:cd:61:b2:42:8b:
7d:2d:1e:5c:8f:fe:83:28:2e:9d:93:e4:52:7a:19:
53:73:dd:48:24:06:70:68:93:b4:3e:b6:5e:18:a4:
09:5a:12:38:9e:41:d7:0c:00:78:14:17:38:34:b9:
55:b4:b4:d6:5f:d4:fc:27:ca:07:cf:c5:d0:29:70:
b4:7c:7a:01:52:d7:44:97:99:33:7d:95:88:ef:aa:
2d:66:93:94:ac:ef:ce:ac:d9:23:8f:bc:ec:9f:54:
80:93:ed:f4:19:74:08:3c:bc:f2:b4:7d:b4:47:cf:
a0:4a:cd:26:ce:83:63:25:09:ec:94:fb:2c:85:cc:
08:59:40:fe:21:63:b8:ae:05:e1:3f:c6:03:44:7a:
0a:e6:40:ca:e0:98:bc:ae:79:cd:56:6f:75:ee:69:
cf:d6:d0:31:78:5e:fa:84:1c:60:f1:36:39:47:ae:
cc:0e:3a:11:a3:77:7b:b9:65:64:c9:2c:d0:77:4c:
12:a3:76:29:c1:74:83:2c:9e:f6:3e:03:a7:ac:f0:
d3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:6F:38:94:E1:DD:E0:31:DE:61:C3:B2:12:62:FD:30:27:EC:EF
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:73:bf:16:f0:7a:f7:3b:dc:ae:0f:d9:e1:50:88:c9:56:8d:
d7:fa:16:a0:f1:a0:73:9b:e4:d4:70:2a:db:2b:46:fa:41:da:
ff:2e:e9:30:db:ae:f0:d3:ef:a1:8c:cb:33:8b:5b:04:5b:c5:
bd:7b:f2:1e:bd:99:1a:54:5d:d0:db:e7:a8:6b:b4:e6:bf:62:
4e:56:f6:9b:37:4a:c5:a8:fe:a9:8f:06:d4:11:30:61:d0:6a:
c7:1d:c6:0b:28:92:9f:c5:50:fb:d7:da:7f:0f:0c:91:18:ac:
26:63:b1:2d:1e:a2:69:fc:bc:07:1e:1e:ff:95:bb:d9:07:98:
9d:2e:c0:d5:21:2e:ca:f7:65:ae:03:d7:8a:cf:5d:f4:d7:78:
87:5b:56:44:04:fd:2e:b1:df:b8:7f:57:1e:e1:a3:53:27:bf:
7b:a8:5d:30:8e:28:42:0d:05:97:26:29:19:ab:d2:25:61:07:
4c:39:e8:87:30:cf:cf:c9:56:42:bd:c4:de:65:fa:cb:82:d6:
4b:e3:ac:94:79:7d:18:c6:c3:9e:8e:5a:89:0b:60:ee:d5:69:
8d:04:95:b1:45:c9:b6:b9:a5:f0:8f:e8:09:b6:64:47:96:05:
d5:82:9d:42:da:40:dc:42:45:11:b5:61:8a:9b:ea:61:c4:8f:
1c:a4:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:30:39 2026 by rpki-client