Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
File: _CwEhVQA8w2Ng82ayoVo_H9KAYg.mft (raw, json)
Hash identifier: hQ4mL/napAieT7p+8dapxyn4jf1oBqODesNWUr07zHI=
Subject key identifier: 21:77:81:05:69:C5:97:68:14:AC:37:3C:4B:0F:5D:B3:8A:68:0F:02
Authority key identifier: FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
Certificate issuer: /CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Certificate serial: 019D98F42982739F6B5349C68B465ECEA677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
Manifest number: 15C1
Signing time: Fri 17 Apr 2026 01:00:31 +0000
Manifest this update: Fri 17 Apr 2026 01:00:31 +0000
Manifest next update: Sat 18 Apr 2026 01:00:31 +0000
Files and hashes: 1: _CwEhVQA8w2Ng82ayoVo_H9KAYg.crl (hash: 4yHTIGUXjk21/o5pfYQrEA3HbKDNuJWEpXaBYD5c9FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:29:82:73:9f:6b:53:49:c6:8b:46:5e:ce:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2c04855400f30d8d83cd9aca8568fc7f4a0188
Validity
Not Before: Apr 17 01:00:31 2026 GMT
Not After : Apr 18 01:00:31 2026 GMT
Subject: CN=2177810569c5976814ac373c4b0f5db38a680f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a8:16:e8:1c:ca:77:d7:aa:96:27:86:98:9d:
5e:c0:14:bf:61:be:b2:88:cc:40:30:e2:e7:71:31:
ee:56:f4:b9:88:4e:d4:0c:dd:78:47:55:08:89:37:
a7:89:f6:c0:64:ea:6e:1f:fe:8b:55:24:05:d9:35:
36:70:b9:de:60:e0:8e:e9:9f:79:fd:09:7c:bf:66:
b3:08:40:f2:35:b6:bb:80:4b:0c:09:ad:a4:b6:2c:
34:c3:41:c4:4c:fc:12:28:94:19:19:1c:f6:99:0b:
bf:63:34:a0:9d:20:b1:2a:b6:2b:cb:f9:aa:91:11:
c4:b9:71:03:b4:71:75:ff:b6:d9:be:92:79:b6:3f:
cb:1b:74:03:b3:a9:06:b9:eb:13:88:61:15:5e:b5:
3d:76:cd:f2:d9:6a:e0:3e:aa:61:85:9f:31:ee:5a:
00:9e:8b:60:9d:d1:70:74:1e:6a:c3:24:cc:0f:4d:
b3:01:ac:51:ac:39:a3:7f:b0:c4:6a:92:ec:76:62:
b8:29:90:61:97:ba:9b:90:b8:1a:13:91:15:8d:a1:
04:da:87:02:3f:bc:27:83:b6:2c:52:e1:d8:26:51:
0a:0f:4e:26:a2:1e:62:0e:50:8f:6b:b7:ee:a2:5a:
6e:14:17:cf:88:41:27:79:52:3d:bf:b3:2a:6f:02:
98:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:81:05:69:C5:97:68:14:AC:37:3C:4B:0F:5D:B3:8A:68:0F:02
X509v3 Authority Key Identifier:
keyid:FC:2C:04:85:54:00:F3:0D:8D:83:CD:9A:CA:85:68:FC:7F:4A:01:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CwEhVQA8w2Ng82ayoVo_H9KAYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/e7375e-6ac5-4c8b-95f3-4eca4c9af4b5/1/_CwEhVQA8w2Ng82ayoVo_H9KAYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b0:24:1d:53:f3:24:62:64:b0:89:3e:16:5a:91:e7:68:64:
5e:9f:4e:b8:49:a0:37:47:56:d3:06:df:7d:86:a9:d2:a3:2c:
23:b3:a7:1a:76:76:77:6a:1a:0d:a7:9b:12:eb:b5:8d:1d:bb:
f9:f5:46:19:b9:9f:8c:9c:99:5a:7e:de:79:7b:49:84:94:bd:
52:2d:03:c1:04:77:83:d7:73:6a:f3:66:ae:a4:01:1e:42:58:
b3:ef:d1:b8:c8:ff:25:e7:b6:a6:7f:bf:b3:e3:e1:06:20:53:
0e:bc:50:cb:4f:c9:e7:e3:42:87:f4:c2:08:b6:de:6a:72:56:
ce:88:58:bc:53:67:9d:4a:f3:72:4d:8f:67:67:57:ec:10:94:
c1:06:93:55:c9:2f:b0:b0:73:ca:73:30:07:89:1b:09:82:a0:
1a:18:ce:a9:51:f4:da:54:fe:a4:ee:bd:95:ac:f8:57:80:7b:
3c:d9:06:78:a5:f9:8e:43:0a:a4:2d:4f:28:57:91:14:c8:e1:
49:a4:5b:24:76:cb:f1:9d:15:5b:3b:11:b1:79:fe:ad:0a:0d:
db:96:ec:d8:90:36:7d:ad:ea:bd:49:22:b4:a7:9f:b6:e2:75:
5f:a5:98:56:51:59:ab:c6:d1:1d:50:3c:06:f8:94:da:aa:09:
cc:b5:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:42 2026 by rpki-client