Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: UKuyXjHfVbXD65mINPusafjapyNAGu/rbn5RCO6QG/E=
Subject key identifier: 1C:43:30:AF:8D:B8:23:8F:7E:E3:8B:0B:A9:89:B8:4E:60:63:C4:67
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019D98500A0CE7963E0F32958388513D10A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:01:15 +0000
Manifest this update: Thu 16 Apr 2026 22:01:15 +0000
Manifest next update: Fri 17 Apr 2026 22:01:15 +0000
Files and hashes: 1: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: s3INERlYiVp8+JKSy8373DTsZoHTrZPboroPx1+NnwQ=)
2: NE7pTp4QnaDUGUHHElFTbo-gDG0.roa (hash: r/+SGcFjTDLD6C4xVwjhnpDBi0wwxr0NEt4KOnZIJYg=)
3: p4Ci63x1biX5rkNwdgShagWDKiQ.roa (hash: +XOGwU+R4ACvZpm15Ra20YpWSpLTXsRXodHyyF4EiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:0a:0c:e7:96:3e:0f:32:95:83:88:51:3d:10:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Apr 16 22:01:15 2026 GMT
Not After : Apr 17 22:01:15 2026 GMT
Subject: CN=1c4330af8db8238f7ee38b0ba989b84e6063c467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:c0:cf:80:e8:f1:28:78:59:45:c0:d6:64:
b7:c3:0e:1f:fa:37:f3:54:d7:94:88:09:a1:a3:2e:
18:ad:6c:d4:5c:27:1b:f6:11:6e:3c:7d:1b:0c:47:
02:4c:c3:e7:65:6c:ae:e4:86:bc:b4:c8:62:b4:52:
27:ca:34:4d:c1:ed:21:7c:5b:c0:ea:b4:67:40:b2:
67:df:21:a8:2d:aa:44:54:08:15:17:35:86:ab:e2:
53:14:9d:3c:3b:81:5d:72:bd:41:a5:17:42:5c:dc:
08:f6:ef:2b:76:12:bc:30:48:e8:37:1f:a1:52:89:
64:b8:39:f0:81:40:f2:a4:16:55:f9:97:1a:6a:fe:
6b:0c:73:d2:ed:c7:e1:3f:4c:2d:1d:f8:7a:39:71:
bd:19:77:57:85:ff:7b:2c:fc:33:ab:b4:35:43:fc:
9c:22:24:1b:09:a2:00:a1:cd:78:dc:76:bd:c3:14:
8a:e0:95:4b:f0:8e:d1:bd:d8:55:e3:11:ae:3b:49:
05:4e:5b:e9:30:e9:e9:e3:6b:04:f6:34:27:98:95:
a5:6c:5e:1a:a6:dd:1a:f6:e2:12:42:61:bc:93:dc:
56:a8:22:36:bc:29:b4:df:bf:bf:68:85:5b:1e:84:
23:c3:f7:b4:b0:f4:f3:b7:94:74:47:36:5b:80:a4:
44:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:30:AF:8D:B8:23:8F:7E:E3:8B:0B:A9:89:B8:4E:60:63:C4:67
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e9:0b:0a:23:77:a0:c3:5e:ce:e7:6f:29:87:f9:5f:d9:5f:
54:0f:2b:d4:65:17:d6:e8:a4:c1:de:02:24:db:28:b3:4e:bf:
02:2b:63:5e:81:b5:3b:48:08:11:29:90:3c:9e:39:42:cc:22:
a2:fa:d1:96:b4:d0:67:41:55:83:2d:6f:e1:1a:6b:92:ea:9c:
1c:76:57:76:0d:80:e3:be:13:82:5d:80:b8:58:c6:08:15:b8:
aa:4d:fb:24:27:8f:5a:2d:62:e0:98:7e:ea:30:6b:18:1c:b6:
db:86:f0:e9:a1:66:39:f8:1c:32:d3:ee:e9:ab:03:dd:c5:8f:
47:16:2a:55:aa:9f:cb:9a:cc:29:6c:18:39:87:62:31:a0:ea:
55:f2:d1:a4:40:9a:17:13:90:b4:da:5a:13:33:76:f6:51:13:
e7:ce:29:fe:43:58:30:c6:33:b2:af:56:8a:ed:9e:43:93:c4:
05:1e:9f:b6:d2:40:f8:db:9d:fe:21:ad:b2:3b:7e:9e:2e:f9:
6c:fe:d2:d6:d4:d0:6f:a0:46:47:6e:21:ea:3f:10:0b:20:26:
d3:6c:16:47:4e:11:62:96:84:88:90:65:0e:c5:a7:65:b3:72:
e7:be:a0:6e:f2:65:b9:c2:01:46:1d:51:a8:b5:72:ce:81:84:
3b:74:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:07 2026 by rpki-client