Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
File: iFeQ87X0pUUjTzIwv4lmOFbge8c.mft (raw, json)
Hash identifier: 3oJmnKRUVwJy+mpkDWlrR7SAmrGHjLLhD8nj2rFfKT4=
Subject key identifier: 4C:72:58:F2:C5:B9:CC:91:94:8A:4E:26:4E:B6:32:B5:8F:52:09:43
Authority key identifier: 88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
Certificate issuer: /CN=885790f3b5f4a545234f3230bf89663856e07bc7
Certificate serial: 019DA48AAD3A52131FE06E3F1D43B8F59728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 07:00:44 +0000
Manifest this update: Sun 19 Apr 2026 07:00:44 +0000
Manifest next update: Mon 20 Apr 2026 07:00:44 +0000
Files and hashes: 1: iFeQ87X0pUUjTzIwv4lmOFbge8c.crl (hash: fP6JYiOwnv/xR5ffbUa//UBYsFMphYQ3OFqQXD8cnBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:ad:3a:52:13:1f:e0:6e:3f:1d:43:b8:f5:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885790f3b5f4a545234f3230bf89663856e07bc7
Validity
Not Before: Apr 19 07:00:44 2026 GMT
Not After : Apr 20 07:00:44 2026 GMT
Subject: CN=4c7258f2c5b9cc91948a4e264eb632b58f520943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c7:d3:76:a9:5b:e9:76:3c:4f:31:9b:ca:9d:
35:39:04:b6:0c:e9:b0:b7:70:a3:58:09:2e:7f:33:
d0:c6:fe:b5:69:5e:26:04:d3:46:52:58:71:40:17:
11:b9:22:a7:c6:50:a9:db:90:e1:d1:0d:93:04:24:
75:f9:a6:84:d5:bc:99:34:56:21:0c:df:29:d2:0f:
86:d7:eb:89:5e:3e:56:4c:64:53:79:84:be:05:2c:
52:de:2d:e3:d9:99:d0:7b:e2:cb:1e:55:6a:02:99:
81:a1:d4:50:d4:05:1c:b3:d4:5f:13:55:1c:70:47:
73:20:5c:8d:c0:1e:9d:d1:39:f8:4e:33:61:cb:3c:
e1:3e:be:f7:46:51:ad:10:72:81:4d:47:08:d2:90:
72:84:ed:83:4a:99:44:b3:bf:6f:35:3f:55:77:33:
65:e4:c1:2b:55:6c:bb:bd:d7:54:e2:03:d5:13:a1:
67:c3:3b:6f:f9:23:09:56:08:34:6b:80:56:59:1c:
2c:86:62:3d:9a:8d:72:66:bf:49:48:46:82:bd:f7:
97:34:bf:d8:bc:23:8b:96:07:5f:cf:d7:dc:0d:46:
37:90:23:8f:86:9d:50:5e:99:99:2e:51:2a:20:de:
6a:2a:2e:52:d3:e3:79:a5:8c:5e:47:a5:10:61:aa:
6c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:72:58:F2:C5:B9:CC:91:94:8A:4E:26:4E:B6:32:B5:8F:52:09:43
X509v3 Authority Key Identifier:
keyid:88:57:90:F3:B5:F4:A5:45:23:4F:32:30:BF:89:66:38:56:E0:7B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFeQ87X0pUUjTzIwv4lmOFbge8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a40bbb-556a-40c5-b97c-32b2be06222c/1/iFeQ87X0pUUjTzIwv4lmOFbge8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:65:15:cc:b5:f3:be:18:49:0d:8b:03:7c:f7:8c:0c:5d:24:
73:78:a9:d6:a5:d2:a4:30:55:5d:dd:89:a9:05:b6:5a:e4:54:
ed:cb:cf:92:fe:b1:62:fe:4b:79:47:1a:b0:61:0b:d3:d5:98:
a9:7c:83:a7:60:d1:0e:75:73:c3:ad:bc:e3:95:f4:85:4e:21:
61:6a:d6:cb:42:93:18:6c:87:f9:0c:46:08:dc:d7:ad:bb:fe:
78:83:5d:00:0a:c5:ec:46:70:3b:28:35:52:41:42:d3:27:09:
10:ee:c2:77:a9:65:77:16:41:d9:6e:c1:60:a7:54:57:d8:8f:
20:06:e7:c5:7f:45:dd:90:f9:1f:18:74:74:1e:0a:21:5c:3d:
e1:75:76:95:45:8a:0c:13:08:b7:cc:af:0a:60:1c:c1:e2:c0:
1c:fa:7b:fb:93:3c:b7:ad:0d:be:e4:31:12:c3:9c:39:9c:dc:
55:14:5e:b1:e3:d2:0b:3a:ce:ab:9a:49:62:bb:94:6a:7c:a1:
00:9e:5d:9d:62:b8:85:1b:20:a2:3f:fb:fa:f1:6c:5a:96:02:
3a:b9:be:10:bc:b3:37:7a:ae:ae:d5:34:a0:f4:56:47:c3:04:
04:23:0d:88:70:23:70:f3:d1:82:94:02:a8:e4:8b:68:a6:4b:
1a:e5:fc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:47 2026 by rpki-client