Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: pZdrKdAjQ0rZ9EmcPWxFQUOoxfh7ChLFKgYGb5JXSgs=
Subject key identifier: 1B:66:06:90:43:A9:FC:9A:67:13:F6:45:8E:BF:E5:4C:67:79:1B:FA
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 019DA4F834D0EFF5B7BB0A209F9FA4779674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 09:00:22 +0000
Manifest this update: Sun 19 Apr 2026 09:00:22 +0000
Manifest next update: Mon 20 Apr 2026 09:00:22 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: S4E3tOYXjYWeuGyB6qtvhmYRp2YUpK/eNVoQz68lLOU=)
2: ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa (hash: PoyEOK64ZRkHmMkkLoFS8S4R0VxZJdJWksZdI9vklg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:34:d0:ef:f5:b7:bb:0a:20:9f:9f:a4:77:96:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Apr 19 09:00:22 2026 GMT
Not After : Apr 20 09:00:22 2026 GMT
Subject: CN=1b66069043a9fc9a6713f6458ebfe54c67791bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3c:13:8f:54:57:25:4f:8d:87:44:64:14:bf:
c8:be:9a:38:ad:91:e4:f4:69:56:81:19:15:fe:ad:
f0:0c:99:a5:d6:02:9c:9a:6b:1a:12:e6:f3:f8:58:
d5:b3:04:92:c8:66:cf:1b:54:c0:27:a8:e2:db:29:
0e:87:a7:d2:39:e4:6a:5d:cd:d3:ed:de:e5:d8:60:
01:14:73:a6:ec:52:87:1a:40:37:db:c5:be:c4:6e:
5a:50:a6:f4:75:98:e8:44:8b:f3:23:98:9a:c8:41:
9f:70:d1:dd:2b:5c:97:e6:c6:ef:e6:1b:e8:1e:3e:
0e:95:7a:69:5e:4e:51:74:d5:af:0c:11:f7:70:1a:
94:35:43:cb:d7:ba:18:8a:66:a2:f6:1e:9e:28:e5:
0b:fb:8e:01:98:82:fa:7b:62:46:cf:ee:37:5f:0e:
eb:e0:88:c0:25:0f:c3:f8:db:e7:5f:f5:60:58:48:
0f:1d:08:8a:65:7b:0a:82:ed:e6:14:07:84:e7:ab:
db:40:d1:ec:74:fe:41:e0:72:4f:cc:2c:7f:aa:31:
fc:31:15:ce:ce:9d:da:d8:83:62:c7:8d:17:44:8c:
a7:9d:a3:0d:a5:a6:03:a9:3a:f6:62:b8:28:e7:05:
60:98:3f:0f:b5:b1:f1:34:69:92:5e:73:7f:3a:cd:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:06:90:43:A9:FC:9A:67:13:F6:45:8E:BF:E5:4C:67:79:1B:FA
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:26:3c:23:55:b8:58:7a:96:85:6a:7d:8f:0c:67:d5:78:4b:
da:f9:81:49:9d:01:9f:17:cb:02:73:2a:bf:b4:76:8e:93:78:
eb:f8:ea:7c:7d:e3:99:4d:6a:58:33:97:c3:cd:4a:fa:af:f7:
eb:18:0d:ec:00:86:20:d3:43:67:49:48:e4:4b:cf:4e:c8:2c:
79:10:c1:b6:19:fc:d3:d4:28:55:16:0a:23:8d:1f:94:71:58:
ed:cf:df:2c:95:08:a7:55:8c:f4:b1:01:d0:55:53:61:31:87:
d0:e7:cf:c2:ff:7e:f4:b1:b5:16:18:c5:79:d7:a2:d5:74:85:
c7:5d:8d:aa:42:7c:bf:c3:f2:ec:36:06:9c:e4:14:c1:b0:3a:
32:e8:de:4d:80:1d:6a:0e:3a:fd:e4:d4:84:52:a8:ed:6a:12:
d7:8c:b0:1c:df:01:fc:66:8b:2c:0c:59:68:14:c2:45:6d:3f:
27:fd:80:70:d4:a9:e8:3f:49:32:be:c8:fa:fb:5e:33:a2:d4:
bc:7a:86:b6:46:28:9b:17:9e:cf:c0:f3:66:5a:90:11:9e:fd:
a7:b4:91:ca:70:db:31:c5:54:8a:1a:32:7c:35:da:84:a0:4b:
ec:c8:7e:40:99:c6:d5:88:5a:e3:50:8c:09:90:e9:a0:95:45:
09:4b:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:17:59 2026 by rpki-client