Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
File: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft (raw, json)
Hash identifier: EL4WuidNnXoohOllrkb2EwyRfDw8S6ZarsYZoCM8Ypo=
Subject key identifier: E3:FA:D8:FA:98:7A:B5:C8:12:78:A2:CB:85:35:35:F6:7C:62:CC:04
Authority key identifier: FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
Certificate issuer: /CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Certificate serial: 019D9A3DE75A39561D5B63E9CAFA02AE6F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 07:00:41 +0000
Manifest this update: Fri 17 Apr 2026 07:00:41 +0000
Manifest next update: Sat 18 Apr 2026 07:00:41 +0000
Files and hashes: 1: 1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl (hash: cAAEgARSjZ0e8YuLMQgVFMccIm64h0q4+R9zhLY+VsA=)
2: gR91LIxxnbU08v57AUEvFf010vs.roa (hash: SbAN6voQ5c1qkWMDRn5E0Sl0vR5PwgTVIGlVOQ/CsHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e7:5a:39:56:1d:5b:63:e9:ca:fa:02:ae:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad1863cbdec1b596daceeb901a0853d6c87e756
Validity
Not Before: Apr 17 07:00:41 2026 GMT
Not After : Apr 18 07:00:41 2026 GMT
Subject: CN=e3fad8fa987ab5c81278a2cb853535f67c62cc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:aa:4d:af:7b:3f:c5:99:96:8c:c7:4f:14:
00:27:54:93:6d:13:64:c7:70:36:3d:c8:2d:e2:6c:
c8:8f:41:40:a8:e7:47:f3:ae:7c:75:01:79:3e:ff:
e1:17:f4:8a:63:bd:5b:ae:2b:93:bb:30:79:31:54:
44:1e:c5:5d:26:d3:81:ae:8f:0f:6f:84:a4:1d:a4:
0e:ca:67:54:0c:96:b1:be:c9:99:ee:4a:5c:28:39:
c4:6f:6a:d0:70:ab:8b:f0:06:c1:0e:dc:cf:a9:8a:
00:1b:3d:09:e4:0f:08:8e:f9:e6:10:49:94:13:75:
5b:6b:14:61:ba:8e:7f:b7:27:2a:e3:27:f9:a6:dd:
c7:50:60:11:bb:fc:8c:0e:6f:59:1f:8a:aa:ea:4b:
e3:ff:02:89:ec:fc:2a:d2:cd:4f:88:2c:33:2c:44:
31:c6:dd:ea:48:fa:5d:8f:b4:16:ad:b6:b1:01:f0:
0c:62:ec:fa:a8:b0:1a:eb:25:bd:90:ba:92:7e:10:
bd:6d:8a:ed:ad:07:43:40:1b:3c:cc:26:5e:a9:e2:
26:fa:f1:91:cd:d1:ca:09:1f:38:bf:0a:55:11:40:
78:74:c6:04:f8:dc:b3:03:c4:a6:cb:dd:98:f9:ab:
bc:ff:bd:c1:8a:ce:69:3c:bd:3b:39:16:29:e0:ee:
2f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FA:D8:FA:98:7A:B5:C8:12:78:A2:CB:85:35:35:F6:7C:62:CC:04
X509v3 Authority Key Identifier:
keyid:FA:D1:86:3C:BD:EC:1B:59:6D:AC:EE:B9:01:A0:85:3D:6C:87:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tGGPL3sG1ltrO65AaCFPWyH51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ddda7e-a037-4d38-9555-0a110c49749c/1/1-tGGPL3sG1ltrO65AaCFPWyH51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:97:3c:94:84:88:dd:00:cd:c4:dc:b6:2f:f6:a0:be:f9:8c:
9e:7e:a6:32:1d:85:9c:02:b0:79:c5:63:24:dc:2a:66:f6:d5:
7b:25:d1:36:ba:f7:4a:0b:77:6d:13:02:11:df:34:e1:fe:56:
c1:bc:f2:ec:b9:6b:85:ea:86:3d:ff:f1:b5:bf:b1:ba:e6:21:
d4:e0:1c:7b:a7:95:79:af:41:2a:8d:12:93:bc:7c:c9:6c:38:
98:0c:37:88:19:5b:1f:68:49:d8:c9:f9:b4:51:a5:1b:46:87:
dc:1c:f3:1e:8b:cd:ac:c5:ab:0d:d2:ae:a0:57:88:70:cc:14:
50:7c:26:e7:32:a2:a8:3f:ce:6f:f2:f9:96:d9:37:41:73:84:
31:ab:57:e3:b6:49:63:59:be:6c:b6:ec:b2:24:06:8b:55:8d:
80:cd:77:a9:5f:da:01:22:5c:3d:99:2f:29:fa:92:d9:d4:65:
96:cd:a7:b7:e5:17:0d:df:5f:22:59:34:f3:ac:03:38:82:06:
8b:1a:ca:15:a4:0d:01:af:ba:14:21:76:2d:cf:e5:3c:c6:d7:
53:6f:ab:67:2d:a6:a3:ac:63:58:6c:60:9b:2c:10:8e:66:1d:
fe:2f:dc:bb:36:49:57:56:b6:d0:dc:47:9c:83:85:d0:c9:72:
8d:8b:09:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:50 2026 by rpki-client