
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: qdkHBS1B3xC/mWqzW6ZM5HLMtB0k/gFSQcFGVVO35oI=
Subject key identifier: 0F:4B:8C:00:43:4A:30:99:D6:1E:85:73:60:86:56:D1:D5:8A:01:23
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 019D9B19BA89C24D43454316093CE11CCB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 11:00:47 +0000
Manifest this update: Fri 17 Apr 2026 11:00:47 +0000
Manifest next update: Sat 18 Apr 2026 11:00:47 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: DEIkJ4sGhdSisdOVKZKvREv4i1dplEVvbhX16qP/Cbk=)
2: a1yKgQiS1kQqWALGhb3azz9xPgM.roa (hash: QrlCwnjrUJMDarRIw4ovkDjdQhcibYW6n6I1xi7Yys8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ba:89:c2:4d:43:45:43:16:09:3c:e1:1c:cb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Apr 17 11:00:47 2026 GMT
Not After : Apr 18 11:00:47 2026 GMT
Subject: CN=0f4b8c00434a3099d61e8573608656d1d58a0123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:ef:4e:e3:d1:cf:91:d1:93:c6:00:f7:7d:
49:ae:15:0b:12:77:6e:51:61:ae:33:2f:6b:85:7b:
9f:a4:a6:1a:f1:d6:a4:30:6f:47:e6:98:29:cc:90:
40:6b:69:30:3f:24:9a:af:23:8a:a6:bc:5e:50:c4:
2b:1e:a4:c1:b9:1c:f5:bb:64:40:c6:17:0a:81:05:
51:87:d5:2c:c8:de:91:04:c0:34:dd:c0:21:c1:9e:
ed:0f:bf:e9:fd:d7:3b:92:0e:29:d7:a8:92:54:9a:
b5:0b:5d:37:a7:1c:b0:76:c2:e3:fa:05:03:05:2f:
1a:70:93:2f:7b:12:83:43:99:ae:25:5b:34:c7:93:
cb:29:a0:70:5f:1f:d8:a8:62:78:b3:bb:16:a8:1a:
6b:e4:06:54:c3:b5:09:f5:fb:0b:8e:10:b4:60:bd:
a9:79:38:fa:cc:98:46:77:a2:af:83:a9:21:e8:a9:
43:6f:68:5a:01:01:05:e2:38:ec:58:30:07:c7:a6:
83:7d:6f:82:71:0e:b8:9c:31:6b:46:ee:7f:57:1b:
7e:57:b0:a8:cb:84:a0:71:b8:9a:90:31:9f:1c:be:
c7:a7:81:46:b9:f9:4d:a0:1a:c3:c9:a8:9b:e7:9c:
f1:ca:25:fb:5f:5d:23:ba:79:e7:d8:94:af:73:9c:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4B:8C:00:43:4A:30:99:D6:1E:85:73:60:86:56:D1:D5:8A:01:23
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:20:8d:4e:22:45:82:67:09:f0:64:bb:3d:0d:64:51:f9:b3:
31:4b:7a:b1:e1:b1:6b:7c:83:96:b0:da:b7:0e:e7:13:2a:d0:
a5:ed:1b:cc:87:68:ab:5f:a9:7a:6f:4a:b7:bb:c4:cd:a6:0b:
09:7c:05:60:41:4e:d4:a5:8d:b2:89:3e:dc:33:86:e3:d4:c0:
77:a5:ba:07:3b:9b:43:d6:7f:ef:8f:51:bb:eb:a1:09:b4:0c:
0b:55:a8:9b:eb:18:c1:c8:c4:ef:05:66:a8:c5:20:2b:c8:07:
09:ad:3b:3d:1d:24:11:94:5c:38:f0:92:5d:e1:29:99:e5:56:
1b:fd:5e:99:c8:a7:ae:11:97:e4:0a:6c:dc:91:06:a6:76:ad:
76:df:9a:e5:15:cd:ee:89:ec:da:18:d2:c8:ec:5d:41:f4:31:
81:5b:76:d0:f6:46:a6:87:c9:93:bb:12:2d:25:14:c9:2e:65:
a1:5b:e5:f6:99:4b:3e:88:a1:27:48:4a:fa:00:6c:f5:4e:b2:
58:ca:0f:e4:03:5c:d0:2f:84:e6:82:5b:17:76:52:fb:9a:d6:
cf:52:f7:18:9e:9d:72:e0:71:79:24:b6:a5:4a:60:60:9b:dd:
fa:ad:b0:ae:f5:bd:d8:dd:93:7b:39:28:75:e7:94:bf:24:8c:
54:9f:08:16
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2bGbqJwk1DRUMWCTzhHMsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYjI2OTUyYjEyMTNmOWNiZDFkOGM5NjcxZmIyMjM1N2Fk
OGQzMjIwHhcNMjYwNDE3MTEwMDQ3WhcNMjYwNDE4MTEwMDQ3WjAzMTEwLwYDVQQD
EygwZjRiOGMwMDQzNGEzMDk5ZDYxZTg1NzM2MDg2NTZkMWQ1OGEwMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMbvTuPRz5HRk8YA931JrhULEndu
UWGuMy9rhXufpKYa8dakMG9H5pgpzJBAa2kwPySaryOKprxeUMQrHqTBuRz1u2RA
xhcKgQVRh9UsyN6RBMA03cAhwZ7tD7/p/dc7kg4p16iSVJq1C103pxywdsLj+gUD
BS8acJMvexKDQ5muJVs0x5PLKaBwXx/YqGJ4s7sWqBpr5AZUw7UJ9fsLjhC0YL2p
eTj6zJhGd6Kvg6kh6KlDb2haAQEF4jjsWDAHx6aDfW+CcQ64nDFrRu5/Vxt+V7Co
y4SgcbiakDGfHL7Hp4FGuflNoBrDyaib55zxyiX7X10junnn2JSvc5w7lwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA9LjABDSjCZ1h6Fc2CGVtHVigEjMB8GA1UdIwQY
MBaAFPuyaVKxIT+cvR2MlnH7IjV62NMiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03SnBVckVoUDV5OUhZeVdjZnNpTlhyWTB5SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvMjU5OThkLTRiN2EtNDJiMi1iNDZk
LWRkMjMyOTFmN2ExOS8xLzEtN0pwVXJFaFA1eTlIWXlXY2ZzaU5YclkweUkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1LzI1OTk4ZC00YjdhLTQyYjItYjQ2ZC1kZDIzMjkxZjdh
MTkvMS8xLTdKcFVyRWhQNXk5SFl5V2Nmc2lOWHJZMHlJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiCN
TiJFgmcJ8GS7PQ1kUfmzMUt6seGxa3yDlrDatw7nEyrQpe0bzIdoq1+pem9Kt7vE
zaYLCXwFYEFO1KWNsok+3DOG49TAd6W6BzubQ9Z/749Ru+uhCbQMC1Wom+sYwcjE
7wVmqMUgK8gHCa07PR0kEZRcOPCSXeEpmeVWG/1emcinrhGX5Aps3JEGpnatdt+a
5RXN7ons2hjSyOxdQfQxgVt20PZGpofJk7sSLSUUyS5loVvl9plLPoihJ0hK+gBs
9U6yWMoP5ANc0C+E5oJbF3ZS+5rWz1L3GJ6dcuBxeSS2pUpgYJvd+q2wrvW92N2T
ezkodeeUvySMVJ8IFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:18 2026 by rpki-client