Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
File: C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft (raw, json)
Hash identifier: R0tHFRHDPu/V+ggOwZUwBX3sQ6Zh5rzkB0Rdm8/mO/c=
Subject key identifier: 0C:8F:55:D2:A1:AD:FB:2E:1C:5F:36:37:28:53:59:2A:68:4D:0F:15
Authority key identifier: 0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
Certificate issuer: /CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Certificate serial: 019D98F512684B65EED61A7B88891C9671DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 01:01:31 +0000
Manifest this update: Fri 17 Apr 2026 01:01:31 +0000
Manifest next update: Sat 18 Apr 2026 01:01:31 +0000
Files and hashes: 1: C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl (hash: pOTCONupE4mZasHWPoZy5fv2UDRG9YAypTw5PwFpiVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:12:68:4b:65:ee:d6:1a:7b:88:89:1c:96:71:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84a9dbe6310d7bfae838ba22fa047126b55458
Validity
Not Before: Apr 17 01:01:31 2026 GMT
Not After : Apr 18 01:01:31 2026 GMT
Subject: CN=0c8f55d2a1adfb2e1c5f36372853592a684d0f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c8:32:d5:df:dc:93:6f:42:a6:5a:16:e3:4f:
05:fc:a4:e6:ee:74:70:db:55:91:f5:3b:2d:74:2e:
9e:b7:48:3a:3d:33:c2:36:b8:a0:bd:3c:e7:06:42:
33:94:ba:de:32:35:95:c7:20:f7:53:79:b3:8f:3c:
c5:06:0b:88:6b:de:51:82:31:e3:1c:48:34:a0:3b:
9f:e0:c7:60:cd:04:5e:8b:95:fb:ef:c9:b7:d8:1a:
6b:b2:d9:86:23:06:06:18:c2:4e:1c:9e:be:12:a2:
35:02:ef:2b:33:b1:84:4c:e4:57:ed:b6:64:50:32:
31:42:cd:6d:e3:79:fa:3e:2c:67:35:3d:2f:5a:13:
d3:1f:79:f7:e2:33:ee:97:7e:4c:21:75:fb:98:d3:
39:ba:6b:d9:9c:88:34:5e:fb:2f:43:97:0e:0a:93:
cb:e2:37:92:b4:0c:e0:61:ed:9e:50:df:44:9e:59:
c5:a7:62:52:53:d3:8c:9d:05:88:9f:1d:34:eb:ec:
c3:da:38:d5:6d:1d:77:c8:a9:8b:39:c1:b0:ca:e3:
96:f8:d1:39:37:f4:04:40:54:e4:f2:5f:6e:06:da:
a5:c6:27:8a:12:73:e7:1c:52:55:b4:74:86:3e:d2:
f8:f1:ee:ea:ef:c6:fa:88:d2:e5:7a:a3:84:c9:61:
6e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:55:D2:A1:AD:FB:2E:1C:5F:36:37:28:53:59:2A:68:4D:0F:15
X509v3 Authority Key Identifier:
keyid:0B:84:A9:DB:E6:31:0D:7B:FA:E8:38:BA:22:FA:04:71:26:B5:54:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4Sp2-YxDXv66Di6IvoEcSa1VFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a7633f-2417-4e03-94a9-a85dde2145ea/1/C4Sp2-YxDXv66Di6IvoEcSa1VFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d1:e2:56:f7:db:c0:e5:04:45:e9:b1:1e:2d:fc:48:4b:c8:
13:45:ad:7b:bc:67:21:c3:da:24:b6:43:38:98:16:70:9f:11:
cc:2e:d9:c2:5f:18:84:f2:0f:1b:af:14:37:08:74:25:aa:a6:
a9:79:da:c3:fb:0b:30:a5:ed:b4:89:d5:33:59:89:d4:3e:5e:
f2:f2:ea:b9:a5:2a:ee:74:6d:b5:08:1e:76:a3:ec:48:79:69:
17:c6:cc:90:5f:dd:02:cf:09:13:43:9b:ed:7c:87:67:0d:7f:
05:9a:07:d4:90:aa:5d:ac:7b:b7:49:40:cb:74:84:5a:7d:0e:
20:83:e3:4d:53:ea:34:f8:3f:c5:9a:c6:c5:ce:66:59:3f:97:
73:39:21:47:a8:b7:c2:d5:a8:e3:18:c7:12:d2:f2:bf:7a:36:
3b:c6:3f:a3:bd:c4:a3:fa:e8:98:88:17:f2:0a:d0:76:a8:5d:
8b:ef:06:df:0b:0b:7a:1c:12:18:0e:54:3c:bb:d2:87:5b:70:
36:3d:4d:e5:e0:b5:ee:eb:d7:83:d6:c9:f4:cb:41:c1:2d:b0:
e3:c9:09:34:fe:5a:1e:fb:f8:49:ae:27:35:e6:43:90:27:a1:
a3:0f:eb:88:cb:6f:96:3a:8e:88:0b:12:e8:0b:c0:51:ff:6f:
86:ac:71:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:01 2026 by rpki-client