Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json)
Hash identifier: T+cClCFo5n0ZoS4mmOeXgFK9yssvGTATYaoC/tUB3hw=
Subject key identifier: 6F:AC:A3:91:D1:0E:FF:3B:90:29:3D:20:81:61:59:F1:19:58:B8:7D
Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Certificate serial: 019D97AADF54D6F1A37D34B22B3E4FD2D820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 19:00:51 +0000
Manifest this update: Thu 16 Apr 2026 19:00:51 +0000
Manifest next update: Fri 17 Apr 2026 19:00:51 +0000
Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: 2IZaIFQ7EEgRdEmCHlJltJDDPdo7qcrRtv4GaPKLN6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:df:54:d6:f1:a3:7d:34:b2:2b:3e:4f:d2:d8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759
Validity
Not Before: Apr 16 19:00:51 2026 GMT
Not After : Apr 17 19:00:51 2026 GMT
Subject: CN=6faca391d10eff3b90293d20816159f11958b87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:4d:74:52:97:cc:72:81:d6:83:25:6d:b6:
36:4c:05:bb:8b:66:f3:01:16:e5:be:b6:16:b0:bf:
ed:a6:6c:56:a7:05:fa:aa:99:9e:17:cb:c6:e7:c0:
1d:20:e1:8f:46:0f:cc:c2:64:cd:40:ee:2b:24:42:
13:e4:86:c3:01:4c:ec:22:b8:b7:fb:69:a8:fc:55:
57:43:11:80:ce:68:8e:64:11:ca:66:0e:c3:1d:be:
6f:15:c0:da:85:ab:13:10:15:d0:d2:16:e8:c4:6a:
5b:c9:60:97:9f:a9:97:64:a3:c2:0b:ce:5f:34:3e:
d7:3d:fb:84:71:2b:ab:ef:4e:b1:a7:51:bc:97:46:
9a:9d:e0:5a:55:67:a4:2b:34:ec:f5:92:05:0a:c9:
4a:58:8e:40:4e:6c:6f:29:2e:f9:78:be:2f:08:e5:
9e:90:6f:c2:0b:34:0f:63:f8:70:8e:ec:ea:6f:59:
2c:2c:f5:ab:59:49:8e:1f:ef:50:fe:e9:5d:cc:1c:
d7:17:30:e1:f1:b0:9a:61:07:8b:ed:ef:dc:04:47:
46:8a:8d:db:bc:80:a4:29:ae:92:a5:83:fc:01:e2:
0f:5d:cb:d7:ac:d4:24:8b:0e:d3:bb:5f:38:73:4f:
b8:66:d5:3b:d7:e3:10:0a:0d:01:55:86:b3:c3:fc:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:A3:91:D1:0E:FF:3B:90:29:3D:20:81:61:59:F1:19:58:B8:7D
X509v3 Authority Key Identifier:
keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:14:24:63:88:54:cf:78:95:ed:c4:f4:6c:c9:5d:ad:b5:38:
54:52:17:6c:81:3e:c0:98:8f:95:ad:80:53:b4:7b:80:11:0f:
48:4a:93:9e:50:a8:8d:7f:20:b4:71:80:6f:8c:77:9c:9e:5b:
2f:b4:7e:64:1d:9a:78:c7:cf:10:70:12:ad:1c:55:53:df:82:
84:17:a8:4b:a5:6b:0d:03:cf:45:c0:32:d1:de:11:3f:89:57:
5f:af:85:2d:32:d4:46:56:43:4b:b2:76:2c:bb:e5:86:ee:3b:
60:ed:6a:58:96:69:70:a7:fe:b5:4f:f5:e4:e8:5e:b0:18:ed:
d9:da:a5:f8:b8:7a:6f:4d:23:dc:30:df:0d:7b:f7:28:14:99:
d0:fb:71:c4:98:93:68:34:88:eb:b1:68:52:b0:12:19:89:e8:
5d:19:87:2a:ca:54:89:49:9f:3a:64:5a:85:0f:26:ab:fc:fe:
19:6b:81:29:6e:cd:01:34:1b:34:e5:37:aa:21:13:27:32:77:
29:3b:5f:cd:e2:05:de:07:ef:1f:94:ab:c4:4d:2e:a1:3a:96:
a1:94:26:4e:4b:84:1c:0f:96:68:47:df:34:3d:09:cb:bc:ff:
45:f9:c3:59:3a:94:a6:a2:e6:78:6b:a1:e7:f5:10:ef:0e:79:
df:bb:52:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:04:00 2026 by rpki-client