Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier: 4tROG+XVpOWj/ICwKr9OSWlmM1Ih0bdpJWr/nd1LTQc=
Subject key identifier: 32:7A:50:1B:74:D2:49:63:97:8C:3B:90:B9:CF:BC:7C:4D:12:38:0E
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial: 019D98F4F08018E006BBB8BF801A4DD0727D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number: 1851
Signing time: Fri 17 Apr 2026 01:01:22 +0000
Manifest this update: Fri 17 Apr 2026 01:01:22 +0000
Manifest next update: Sat 18 Apr 2026 01:01:22 +0000
Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: YHnRtDBmIvH0qjzIYyJnO5ly2oW9KIqlNI+/mlBc7yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:f0:80:18:e0:06:bb:b8:bf:80:1a:4d:d0:72:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
Validity
Not Before: Apr 17 01:01:22 2026 GMT
Not After : Apr 18 01:01:22 2026 GMT
Subject: CN=327a501b74d24963978c3b90b9cfbc7c4d12380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:a7:03:5e:92:99:ba:87:cb:f2:9c:8b:cc:
79:d4:59:e6:3a:6a:7b:8d:c2:f2:81:1b:2f:bd:ed:
a6:b4:29:d1:21:f2:b0:31:05:eb:0d:21:63:a0:a7:
51:70:30:38:45:10:62:8a:86:d4:e3:bd:1c:c1:4d:
e6:4c:9e:7f:48:08:db:19:63:ff:5d:88:9d:e8:9a:
d2:b7:25:35:d3:da:8e:fa:18:c8:50:37:01:0e:f3:
69:60:9e:60:ec:bf:62:5f:bc:f5:23:55:24:a0:67:
be:a9:e1:2c:26:5d:1f:ad:b6:68:61:6e:fa:57:fe:
3e:44:ba:e2:04:71:78:e6:b4:4b:cd:55:b0:1e:dc:
d9:68:61:ec:d2:0b:63:73:91:c9:51:ea:e1:a7:3f:
98:35:cf:e0:14:57:c5:cd:96:55:4a:b8:83:7c:38:
d2:65:a5:2c:b2:ee:b7:a8:d8:5e:17:bb:c7:4c:85:
5d:92:ab:b8:a8:82:af:64:b7:fe:a5:8f:1b:cb:a1:
57:3e:5b:73:03:d8:66:69:f9:88:11:59:95:56:a4:
0f:3f:4c:f9:66:c2:d7:29:37:79:08:e5:63:d5:b0:
8d:3b:55:4f:ec:96:d8:0d:85:17:7c:0f:a9:32:b7:
ba:0a:8a:24:a5:d7:36:22:fd:01:d2:23:2d:d0:f0:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7A:50:1B:74:D2:49:63:97:8C:3B:90:B9:CF:BC:7C:4D:12:38:0E
X509v3 Authority Key Identifier:
keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5e:7b:64:07:3d:cc:de:f0:95:11:ed:ec:5c:a7:55:79:09:
2c:fd:eb:0f:73:bf:42:aa:f5:f3:f6:67:64:17:ea:90:93:bd:
bf:b6:ea:c9:5e:d0:a3:3d:c6:c1:f1:a9:38:b4:4c:19:7b:50:
a2:9a:cc:69:d3:d7:f8:fd:5e:20:53:78:32:4e:35:85:75:4a:
96:fd:93:74:dd:0d:85:81:97:18:55:bf:a9:8f:5b:be:98:bf:
09:a7:5d:c1:b0:2a:8e:63:53:22:3d:ea:9e:84:f1:91:22:f4:
c0:11:6e:62:73:46:6a:06:1b:3d:18:d1:3b:5f:a0:1b:83:a3:
c9:c9:49:91:b6:1b:1b:d5:47:bc:80:35:ab:c0:92:88:3d:1a:
6b:72:f6:d5:b7:f7:97:9d:0a:78:dd:4a:7a:67:01:13:84:46:
4c:cf:b8:a6:fc:97:95:12:32:1c:33:77:0c:46:b8:f4:11:bc:
a5:bb:6a:f3:00:18:4e:14:34:80:2e:50:1e:18:2e:bb:59:57:
8d:fc:6f:77:b4:3d:eb:be:24:09:88:6a:21:a6:e6:2e:7d:46:
2c:b9:6e:7f:3c:df:ac:c9:48:8e:e5:c9:63:44:63:51:9c:b9:
98:89:fb:5c:58:11:24:d2:e4:3a:7e:30:1c:96:2f:91:26:12:
28:42:00:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9PCAGOAGu7i/gBpN0HJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ODkxOGNhNjYxODBkZWUwNzliYWY0NTA1M2U0Y2ViNTc2
MjkyYmQwHhcNMjYwNDE3MDEwMTIyWhcNMjYwNDE4MDEwMTIyWjAzMTEwLwYDVQQD
EygzMjdhNTAxYjc0ZDI0OTYzOTc4YzNiOTBiOWNmYmM3YzRkMTIzODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0junA16SmbqHy/Kci8x51FnmOmp7
jcLygRsvve2mtCnRIfKwMQXrDSFjoKdRcDA4RRBiiobU470cwU3mTJ5/SAjbGWP/
XYid6JrStyU109qO+hjIUDcBDvNpYJ5g7L9iX7z1I1UkoGe+qeEsJl0frbZoYW76
V/4+RLriBHF45rRLzVWwHtzZaGHs0gtjc5HJUerhpz+YNc/gFFfFzZZVSriDfDjS
ZaUssu63qNheF7vHTIVdkqu4qIKvZLf+pY8by6FXPltzA9hmafmIEVmVVqQPP0z5
ZsLXKTd5COVj1bCNO1VP7JbYDYUXfA+pMre6Cookpdc2Iv0B0iMt0PB0NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJ6UBt00kljl4w7kLnPvHxNEjgOMB8GA1UdIwQY
MBaAFEiJGMpmGA3uB5uvRQU+TOtXYpK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQt
ZDJjZmQ1ZjIyZTdhLzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQtZDJjZmQ1ZjIyZTdh
LzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM157ZAc9
zN7wlRHt7FynVXkJLP3rD3O/Qqr18/ZnZBfqkJO9v7bqyV7Qoz3GwfGpOLRMGXtQ
oprMadPX+P1eIFN4Mk41hXVKlv2TdN0NhYGXGFW/qY9bvpi/CaddwbAqjmNTIj3q
noTxkSL0wBFuYnNGagYbPRjRO1+gG4OjyclJkbYbG9VHvIA1q8CSiD0aa3L21bf3
l50KeN1KemcBE4RGTM+4pvyXlRIyHDN3DEa49BG8pbtq8wAYThQ0gC5QHhguu1lX
jfxvd7Q9674kCYhqIabmLn1GLLlufzzfrMlIjuXJY0RjUZy5mIn7XFgRJNLkOn4w
HJYvkSYSKEIABw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:08:36 2026 by rpki-client