Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier: u9pQk7b9Y409s2QlpyB+W4c7JTqvBKp4Y4z7c+e1jrw=
Subject key identifier: 66:75:5F:2A:C9:34:3A:1A:D4:C5:E3:FF:F5:53:FE:1A:85:A4:F5:A4
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial: 019D9AE2BCD8F94A4CFCF16F207755D8488B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:00:43 +0000
Manifest this update: Fri 17 Apr 2026 10:00:43 +0000
Manifest next update: Sat 18 Apr 2026 10:00:43 +0000
Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: CtRsysM7JO1E+Q/8Yu2HfC8zSbQ7mAXUlSusVbE/y2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bc:d8:f9:4a:4c:fc:f1:6f:20:77:55:d8:48:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Validity
Not Before: Apr 17 10:00:43 2026 GMT
Not After : Apr 18 10:00:43 2026 GMT
Subject: CN=66755f2ac9343a1ad4c5e3fff553fe1a85a4f5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:97:27:fb:97:62:4a:bb:5e:f7:88:99:e1:be:
b7:b7:49:87:a4:cf:71:6d:1e:67:6f:6d:e9:d4:a6:
58:ac:de:38:e2:97:d6:f8:ef:9d:be:9b:c7:56:d1:
32:b6:23:f2:25:da:ee:1e:22:a7:26:ec:e6:32:1e:
c6:8c:1e:c3:ff:a8:cd:66:b1:77:e4:2c:20:f8:e8:
9d:2b:32:2b:82:60:48:33:04:99:ac:cd:1b:39:43:
34:d0:5b:a3:57:19:67:92:d5:56:ef:19:dc:73:36:
86:2a:cf:54:3c:0c:36:23:52:69:c5:03:22:e8:7f:
28:f4:77:8e:89:0c:00:b5:04:bf:1f:c3:a7:a0:72:
26:a3:f7:0e:45:13:bc:22:95:7e:00:cb:15:92:51:
7b:cc:e9:d5:35:0c:b7:6c:02:63:e5:01:29:56:d7:
7a:de:33:30:e1:48:b4:ce:d1:8c:c0:d3:d2:86:59:
b3:8e:2d:17:1d:f7:58:69:fa:7d:ad:b5:ed:7c:3f:
2a:30:5f:72:a8:07:46:6a:bc:e9:72:67:8e:24:e4:
f0:24:f2:de:39:9f:9c:87:f1:85:a2:25:bb:9e:1e:
e5:78:6a:13:c4:16:90:c2:4a:f4:47:9d:b4:7b:07:
f5:cd:56:8b:f8:14:f8:f8:83:b3:eb:ae:a2:9a:c5:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:75:5F:2A:C9:34:3A:1A:D4:C5:E3:FF:F5:53:FE:1A:85:A4:F5:A4
X509v3 Authority Key Identifier:
keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:88:ea:5c:f4:fb:50:52:83:16:65:fc:67:29:86:82:b5:c4:
59:8d:8a:b1:d9:60:e8:cd:5f:c1:79:f8:d3:7a:7a:14:94:55:
7a:1d:29:3f:06:97:55:1c:59:e4:27:c0:e4:ab:a7:bb:2d:40:
19:a2:24:3f:f1:02:c0:57:34:17:1d:bc:95:8d:8b:35:e4:a4:
10:a8:16:51:40:87:a0:18:eb:f2:88:35:f3:31:71:f3:e9:2b:
4e:5d:06:22:1a:46:b5:59:cc:90:9b:c0:ff:3f:d2:79:82:91:
e0:64:02:02:f7:69:bd:cf:a6:23:8d:cb:f2:c5:6c:23:94:63:
30:8f:13:95:86:25:a8:8d:b3:a4:4d:d6:6f:4f:3a:4c:dd:61:
f0:06:03:80:fd:30:d9:d1:0f:d8:e4:bc:8d:3f:2e:05:8f:d1:
b5:1a:b1:56:a6:41:5d:6b:bb:dd:49:ba:f2:15:4d:3c:b1:9a:
5c:5f:36:cb:97:d8:e8:09:e8:74:55:11:d6:43:62:1a:a3:22:
b3:13:0f:85:fd:20:06:8c:ab:8a:80:e0:2a:47:34:84:90:fa:
8f:46:f0:95:35:c3:f5:d3:7d:58:f1:f5:b2:b3:9d:e9:ad:07:
55:60:37:c5:4c:50:56:75:8d:bc:43:19:74:26:d1:02:9f:c0:
88:e4:f5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:06 2026 by rpki-client