Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: oDnMVG9easINdy0zkoY0UDx285enA1M8fG9VatcI3aw=
Subject key identifier: CD:D2:E8:94:56:7F:5C:45:95:7C:9C:0E:BB:83:C2:04:2E:9E:CB:67
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 019D98F4D7E51FBAF758544B325DE84F2AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:15 +0000
Manifest this update: Fri 17 Apr 2026 01:01:15 +0000
Manifest next update: Sat 18 Apr 2026 01:01:15 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: VfkAfYUyBTe4FahlQdLiXdGN0/KIGpReBHbrA588gOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d7:e5:1f:ba:f7:58:54:4b:32:5d:e8:4f:2a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Apr 17 01:01:15 2026 GMT
Not After : Apr 18 01:01:15 2026 GMT
Subject: CN=cdd2e894567f5c45957c9c0ebb83c2042e9ecb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c8:a0:74:dd:79:79:c7:8e:b5:6c:66:2a:8a:
89:6c:3c:19:35:91:11:76:a2:7e:ee:dd:91:46:41:
46:ac:48:b8:87:4a:a9:c3:07:39:9d:93:6b:87:3d:
b4:3e:5a:52:45:68:38:d0:80:37:af:7b:32:22:d8:
a2:41:e7:a3:b2:7e:45:10:f0:0d:b0:bf:33:72:07:
37:6b:a0:22:e0:73:42:a0:85:e2:c1:d1:f9:8a:34:
90:81:91:54:f3:42:4a:cf:ef:db:4e:a6:e5:69:a5:
24:8a:a6:cb:fa:52:76:6e:ff:27:90:a8:5b:50:14:
ad:78:67:48:d9:f5:de:f4:b4:2e:a7:49:61:47:87:
a0:4c:ec:ac:d4:17:c3:99:8b:13:25:f0:e6:e2:8d:
63:c5:a6:cf:83:da:db:c4:f8:e3:6c:94:6b:b6:2c:
02:7f:f9:13:c5:8a:22:7b:64:5b:23:f0:92:a3:7f:
14:26:04:ba:b2:35:6e:59:7e:44:05:20:2a:ff:06:
48:d9:d1:8b:18:98:a8:c4:3f:78:2f:81:44:8e:c5:
ea:68:db:25:c4:ec:aa:da:53:30:0f:dd:7a:f1:e2:
94:66:c0:9f:42:4a:79:b3:f2:bf:f1:90:94:8a:ea:
47:d5:6d:39:6b:01:e4:a5:19:60:8c:d7:fb:b4:6d:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D2:E8:94:56:7F:5C:45:95:7C:9C:0E:BB:83:C2:04:2E:9E:CB:67
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:70:04:d8:17:d5:19:80:a1:c3:f8:3c:dc:15:43:79:c3:95:
8c:5a:71:bd:cd:aa:38:8d:f2:82:29:99:34:e9:8a:a4:46:ed:
af:23:84:2c:99:f1:ea:37:9b:cd:c5:1c:bf:4e:be:5b:50:6b:
00:2c:85:4f:7f:4e:b1:37:dd:9d:6a:64:e1:e8:fb:b3:aa:b8:
3b:9c:13:6b:91:c5:83:43:fe:8b:54:4d:74:95:ab:b5:69:13:
df:22:5a:98:81:18:01:7d:8e:b3:7f:e1:50:31:85:fa:76:85:
d4:d3:c7:89:c7:92:b5:a2:62:4a:05:af:77:24:1d:9f:c9:e2:
50:b7:b1:cf:85:e3:3c:2a:48:68:c0:0d:2b:ba:54:fd:cd:f0:
b0:71:ce:84:46:af:ef:3a:d4:43:1a:07:f7:05:a5:6a:87:7a:
0d:4f:3e:f8:71:75:a7:ad:cf:8c:5f:84:64:5e:d2:6a:f9:b2:
89:76:e1:64:1a:0a:07:33:a4:93:6e:64:59:43:c2:b5:e6:c6:
c2:53:22:2b:ec:31:9c:ed:96:7a:ab:92:8e:58:ea:65:95:80:
af:6b:44:e5:4b:0f:17:ab:12:03:7b:cd:cd:96:7d:e4:c4:f0:
d7:a6:28:6e:9c:24:7e:2a:87:8d:f6:8c:ad:12:cb:2e:d2:d2:
87:a9:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:59 2026 by rpki-client