Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier: cRKvWQrFTjCDmONxrAAFCIHsQpJnQCX02tjUwMIvv40=
Subject key identifier: AD:B2:34:47:CC:55:3B:D1:0D:4E:D2:A8:28:51:5E:81:05:7C:B4:EC
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer: /CN=d422367433765b541a37390a998997b737c46472
Certificate serial: 019D98F4F734A49F1A886CEA0B14A9E55B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 01:01:23 +0000
Manifest this update: Fri 17 Apr 2026 01:01:23 +0000
Manifest next update: Sat 18 Apr 2026 01:01:23 +0000
Files and hashes: 1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: HFU652/NQfn9farCxzGq0rWqIGZd7PQgVl6jlN8ODUs=)
2: nmpthTHAT4WUcq8Q3IMochngGiw.roa (hash: WMNeejxSLtwCCkkRDHZIffdNUGROwkauBCQwzToW+EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:f7:34:a4:9f:1a:88:6c:ea:0b:14:a9:e5:5b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d422367433765b541a37390a998997b737c46472
Validity
Not Before: Apr 17 01:01:23 2026 GMT
Not After : Apr 18 01:01:23 2026 GMT
Subject: CN=adb23447cc553bd10d4ed2a828515e81057cb4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:f7:cf:d1:4f:51:85:75:b8:ae:ce:6f:65:
d2:06:6e:fc:0b:30:06:78:3c:b7:75:bd:3a:68:d8:
f6:f0:3c:b4:4a:d6:35:66:ca:7b:98:f4:8b:58:42:
32:47:1a:ff:36:bd:2f:2f:80:b7:13:12:c1:25:5a:
c6:7c:ba:49:2e:2d:13:97:af:4b:4b:6d:54:18:61:
5a:80:c2:1f:ed:c2:0e:58:c6:67:7f:d0:14:87:11:
58:7b:fa:10:8f:1c:8a:0b:94:2b:0e:e6:03:a0:3f:
b7:fe:2a:86:19:66:ae:f0:59:a6:4e:fe:91:cc:b1:
5d:d3:8d:08:24:9b:a1:b8:b4:2e:fa:0a:c6:12:b5:
2a:89:92:f6:40:1d:63:6b:26:da:7e:77:b3:9f:ed:
67:cf:25:35:ed:c2:51:ed:56:56:b4:d6:66:97:4e:
c3:5d:3d:b7:78:89:5f:c2:2b:2b:c9:c1:b4:4e:e3:
f2:00:67:cf:7a:15:19:ec:f8:83:57:dd:85:e8:7b:
65:0d:3b:70:47:85:89:7c:e8:da:6d:cf:9e:20:ab:
4f:8d:85:24:1a:c8:fc:0e:d1:e9:85:e6:73:60:f7:
47:ec:cf:0d:ee:55:4e:25:ca:79:34:b8:a1:3e:09:
5f:eb:ea:98:4d:45:18:fa:7f:1e:b8:e6:79:2c:5e:
b0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B2:34:47:CC:55:3B:D1:0D:4E:D2:A8:28:51:5E:81:05:7C:B4:EC
X509v3 Authority Key Identifier:
keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d6:3e:0c:39:86:ae:e3:5f:0a:3c:23:12:9d:76:a9:23:46:
dd:4d:4b:cd:ef:41:59:eb:09:74:ef:fb:5d:af:cf:eb:96:3f:
cf:66:f9:35:df:d1:ec:35:48:51:56:ea:a7:df:af:fc:1c:a3:
a4:7d:c9:93:c0:87:61:50:0b:73:19:a4:00:18:51:c7:69:c2:
1f:ca:55:68:38:aa:10:03:02:da:69:f0:d7:44:48:90:d5:a4:
ee:28:21:14:a2:3b:8c:f2:7f:bc:b0:54:93:d1:23:88:1f:cf:
02:e2:b8:06:56:2f:88:7a:20:54:6a:b4:4d:2b:45:4f:e1:01:
57:71:57:1e:bd:ba:1e:4e:38:8e:ff:b5:a1:8c:d8:63:af:a5:
42:95:03:ab:84:3e:5c:bf:93:43:f6:b0:8a:af:00:e6:f0:7f:
97:f6:dd:92:dc:4a:1d:2c:2a:9d:34:70:d5:7b:18:94:7b:0a:
5a:52:f6:0c:a1:ff:43:69:ad:d7:67:f9:11:df:7e:d0:a1:1b:
5d:77:3c:02:ba:be:1b:94:ad:99:a3:fc:76:a1:47:b7:83:eb:
93:a4:3b:64:83:a8:df:d2:b9:a0:1b:d9:3e:99:b6:10:7e:45:
ba:b1:8b:66:6d:c1:d5:ea:ed:fe:38:f8:0c:3c:78:82:88:4d:
b2:09:3a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:35:38 2026 by rpki-client