Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
File: F3XdxSn1elmets19uiuSstN190o.mft (raw, json)
Hash identifier: T1zA1iGmQWSUDYchMOfqBtZ5R+4ek+wnUk0M+vTCTgI=
Subject key identifier: 98:5A:3E:B7:92:A0:C7:08:26:5B:B4:EA:AD:BB:DB:A0:BD:57:D3:B4
Authority key identifier: 17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
Certificate issuer: /CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Certificate serial: 019DA48AC54E626C13D6B22997CC0964DFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
Manifest number: 0AFC
Signing time: Sun 19 Apr 2026 07:00:50 +0000
Manifest this update: Sun 19 Apr 2026 07:00:50 +0000
Manifest next update: Mon 20 Apr 2026 07:00:50 +0000
Files and hashes: 1: F3XdxSn1elmets19uiuSstN190o.crl (hash: gZXi8eGVQm7s/e+4J58Y1pGMyMwKh2FGROlDQYzFQ5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:c5:4e:62:6c:13:d6:b2:29:97:cc:09:64:df:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1775ddc529f57a599eb6cd7dba2b92b2d375f74a
Validity
Not Before: Apr 19 07:00:50 2026 GMT
Not After : Apr 20 07:00:50 2026 GMT
Subject: CN=985a3eb792a0c708265bb4eaadbbdba0bd57d3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:fb:f8:b0:2c:b7:04:8f:ff:11:c4:3a:25:
08:b7:52:25:a9:0f:84:0d:79:9a:f1:66:f9:5d:10:
17:bb:58:09:54:63:be:71:86:06:e7:a7:b1:25:d2:
77:c3:73:56:b1:2e:9c:e8:e0:67:c0:91:68:89:c4:
d2:51:f6:52:3a:14:4a:4e:34:9c:4f:db:11:e6:3b:
40:53:2a:37:d4:0a:5d:f9:f3:a2:bd:3e:6b:07:db:
24:ee:c8:a6:64:fe:eb:e4:81:af:ff:f4:2d:98:e0:
30:4d:56:4f:00:c2:80:0d:40:08:9e:cc:e7:9d:b5:
f1:7a:89:03:31:f1:d7:74:57:54:91:a9:e1:a0:0d:
7d:87:13:b8:fe:8a:e0:72:bd:23:18:41:11:81:9f:
29:02:d8:a3:67:43:e9:c4:29:62:79:0e:57:16:60:
00:59:4f:63:68:ff:26:fd:52:7e:52:3a:82:ad:72:
75:30:8d:02:11:9b:0b:d0:da:b1:a9:05:a1:98:f4:
52:a5:14:1d:cc:b8:31:fb:2b:da:c8:6e:13:7e:2c:
45:44:4a:b0:7c:d2:f7:81:fa:7e:ba:06:7a:3a:11:
97:9d:97:5d:97:69:e4:89:00:ff:f4:ee:77:5a:e9:
66:27:67:b9:3f:5b:82:2b:54:48:f9:b3:2a:2e:20:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5A:3E:B7:92:A0:C7:08:26:5B:B4:EA:AD:BB:DB:A0:BD:57:D3:B4
X509v3 Authority Key Identifier:
keyid:17:75:DD:C5:29:F5:7A:59:9E:B6:CD:7D:BA:2B:92:B2:D3:75:F7:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3XdxSn1elmets19uiuSstN190o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e794b3-8a2e-4b76-8f0d-29a33902a76f/1/F3XdxSn1elmets19uiuSstN190o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a4:4b:f4:5b:5d:ae:6d:d5:00:e8:8b:17:b3:59:34:cd:6b:
6e:9d:61:75:76:3a:9c:45:8a:bf:bd:a3:29:82:80:7f:c5:c0:
d6:17:51:08:ef:04:1e:00:9c:7e:69:fa:28:b7:a8:18:5f:e1:
48:8b:43:86:e2:6a:13:cd:73:16:b0:f6:87:ea:6f:36:b5:6b:
d0:2c:cd:a6:ed:b1:0b:aa:bc:47:9a:ec:08:1d:a8:8b:22:77:
9c:51:5d:4b:40:89:f5:f4:87:d9:dd:d1:16:d8:4f:f3:25:91:
c4:27:99:5c:79:15:50:20:3b:59:33:78:74:96:92:7e:01:47:
0b:f1:02:4f:9d:ef:12:f5:15:cc:c4:09:ca:3d:70:92:06:a7:
89:d1:eb:89:0c:07:9c:6f:0b:17:c8:c9:bf:e5:f2:56:c0:dc:
de:d3:cf:64:a5:70:1f:1e:41:8a:17:97:00:0e:ab:3b:6e:9e:
1a:5a:17:0d:42:1e:3c:82:e5:ae:b2:17:16:86:f4:b0:dc:d5:
f1:ae:02:5a:97:db:70:9b:66:59:41:53:1a:82:dc:43:94:04:
3a:55:35:20:c9:51:3d:5b:b4:4e:4e:b7:27:ac:99:33:79:9d:
66:fc:36:35:82:4a:2d:f9:63:e3:a3:58:14:5f:aa:88:8d:5f:
f1:5a:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:15:07 2026 by rpki-client