Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
File: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft (raw, json)
Hash identifier: 3ZXbSkF0VgsMgmZ8/FDk7fVPYOIX7ZfbieDkROMl2N4=
Subject key identifier: E1:4A:F7:3C:01:81:DF:B8:4D:98:93:CA:CB:0A:05:0F:78:F1:51:38
Authority key identifier: F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
Certificate issuer: /CN=f32220b696e2e766516c05743d137dbbc17fd261
Certificate serial: 019DA48AC5EF9932E5EE05298C6F638DC83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 07:00:51 +0000
Manifest this update: Sun 19 Apr 2026 07:00:51 +0000
Manifest next update: Mon 20 Apr 2026 07:00:51 +0000
Files and hashes: 1: 8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl (hash: lEzbDEegejkoSKTZcqZbB3JiHVFdyfFycmg28y3zTLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:c5:ef:99:32:e5:ee:05:29:8c:6f:63:8d:c8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f32220b696e2e766516c05743d137dbbc17fd261
Validity
Not Before: Apr 19 07:00:51 2026 GMT
Not After : Apr 20 07:00:51 2026 GMT
Subject: CN=e14af73c0181dfb84d9893cacb0a050f78f15138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:db:a0:31:95:d5:78:46:f3:f9:24:6f:d0:
c9:02:c9:55:49:4f:b6:a3:23:ed:0e:19:76:5b:40:
b5:a0:7f:95:c0:7d:5b:93:42:12:ed:6f:d6:c6:d3:
b5:07:5d:eb:79:3e:70:9a:77:cb:a1:55:68:e6:25:
c8:78:07:79:eb:76:70:84:2e:11:b7:5e:0b:80:24:
27:c6:04:40:b4:34:47:d3:d9:f7:5d:93:94:67:22:
e7:55:25:1f:ba:2f:ca:6b:dc:96:28:15:49:e7:af:
84:a7:95:6a:90:b6:80:ea:80:90:73:2c:91:14:af:
d2:64:52:5c:33:dd:54:0a:30:5b:85:ef:cd:a8:fb:
b0:fa:7d:40:f4:b9:9f:b9:45:53:11:49:42:48:ed:
f0:70:e4:1c:1a:29:17:e7:dc:4f:37:82:c7:1d:19:
a9:b4:5d:30:00:3d:d1:14:f1:b0:24:f7:ad:3b:9a:
4f:41:00:f1:46:54:35:12:68:93:07:be:36:04:51:
36:dc:7c:20:b6:d4:7e:b8:86:13:e2:6e:51:af:04:
fc:7b:cd:24:55:88:2c:77:ca:5e:e0:45:68:8a:d4:
64:eb:9c:15:67:c7:26:92:d5:6c:d4:30:b7:09:a8:
74:99:86:62:2d:64:6b:41:ed:cc:c6:bc:a6:41:80:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4A:F7:3C:01:81:DF:B8:4D:98:93:CA:CB:0A:05:0F:78:F1:51:38
X509v3 Authority Key Identifier:
keyid:F3:22:20:B6:96:E2:E7:66:51:6C:05:74:3D:13:7D:BB:C1:7F:D2:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yIgtpbi52ZRbAV0PRN9u8F_0mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/493e20-7e17-4759-b345-0eb0b240b9b7/1/8yIgtpbi52ZRbAV0PRN9u8F_0mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cb:02:d9:05:9f:e8:26:28:48:53:75:8e:4b:39:48:e0:8f:
ea:a5:b8:c2:df:ae:11:2c:c0:10:fe:29:63:2b:f6:69:f2:41:
1c:ad:5b:c7:f9:7c:bd:2a:5a:1b:a8:af:f9:80:d8:1a:dc:38:
df:55:b2:f4:6f:a0:12:1d:60:14:00:21:9e:07:f1:42:21:d3:
d4:3d:b8:41:dc:d6:5f:30:c3:99:24:ba:8b:61:b7:99:da:7d:
a1:80:fb:34:28:db:dc:da:4d:7d:00:48:f1:92:12:0b:56:5b:
8f:6f:d2:a1:9f:96:99:67:7c:4e:28:74:02:2d:24:01:49:ee:
b5:d2:f3:fc:36:b5:75:fc:71:32:ec:ee:15:8d:cb:e2:d9:da:
d4:aa:23:10:02:a1:98:79:1e:13:2f:aa:f9:c1:13:c8:07:23:
0d:60:b8:b3:48:6a:f5:28:5c:d9:dc:dc:be:7f:f2:02:35:0c:
d8:9f:e2:1d:1d:17:d8:8d:2f:67:0f:39:f9:2e:04:c8:20:30:
fb:32:78:e7:90:a5:2b:5d:aa:96:6d:dc:d9:c0:dd:a0:97:79:
2d:ea:54:fd:8c:81:1c:5e:76:37:94:9a:1d:85:7d:c9:67:3e:
51:f5:83:cf:c9:4b:16:76:94:86:98:dd:31:37:1a:8e:9b:7a:
85:95:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:04 2026 by rpki-client