Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: /Oh+iFP7C41HhWmTP1U+9wN6sOEzz4ILR2U/QVDFzjw=
Subject key identifier: 09:01:84:92:C8:34:CB:01:5F:78:3C:C3:D0:53:15:29:08:68:29:4F
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 019D9A3E43846486811D03E2D8F45EA8C2D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 07:01:04 +0000
Manifest this update: Fri 17 Apr 2026 07:01:04 +0000
Manifest next update: Sat 18 Apr 2026 07:01:04 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: +e8MUfd280f1iXSPH47GaRcEa4raE0pDK0iNYv0G63o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:43:84:64:86:81:1d:03:e2:d8:f4:5e:a8:c2:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Apr 17 07:01:04 2026 GMT
Not After : Apr 18 07:01:04 2026 GMT
Subject: CN=09018492c834cb015f783cc3d05315290868294f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:45:c5:4d:2e:9f:33:e1:18:ae:40:34:ff:
b2:b4:73:cc:0f:f4:ad:ac:ad:76:38:d5:4c:7b:25:
0a:fe:cf:82:88:99:79:c5:4f:ee:56:18:a6:e8:88:
db:28:9c:ed:c9:00:76:9f:af:3b:d6:a0:98:b6:83:
b2:32:17:a1:5f:09:b5:a1:c0:a8:3e:14:03:73:69:
cf:ff:e3:61:e3:e9:b1:37:fb:a6:0b:59:1c:1a:0d:
0d:52:14:e6:11:83:b1:2b:ad:37:a5:6d:cd:10:97:
66:42:12:ab:2f:f2:22:30:42:fa:8d:29:3e:e3:68:
d2:81:5d:d4:4c:1c:4e:5e:4f:48:4a:fc:e7:c9:d3:
3e:e4:08:f2:17:85:5e:22:bf:a5:ba:37:bc:5c:6a:
84:b8:36:4d:6e:c4:1f:cd:24:bc:b6:c4:ce:4a:c4:
76:90:23:45:f9:fc:32:e7:f8:00:b6:35:6d:dc:10:
7f:91:74:54:89:b1:8e:26:bb:b5:06:da:30:b7:94:
83:4b:41:5a:2d:fe:74:80:75:5f:03:42:72:60:50:
3c:4c:04:f1:32:0f:95:b1:48:80:97:5e:20:2a:3f:
07:09:8d:09:dd:f4:5f:14:15:f3:46:a3:e8:2d:c9:
47:79:f9:fb:86:ef:c7:bd:ac:0a:da:44:84:c9:ee:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:84:92:C8:34:CB:01:5F:78:3C:C3:D0:53:15:29:08:68:29:4F
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:96:62:a2:69:94:ec:71:2d:27:a4:fc:2a:8d:67:de:f6:d0:
53:25:e6:4b:c7:46:8d:13:d6:d1:ad:4f:27:80:e6:2c:3b:bc:
d5:06:5d:ed:6f:93:24:8a:7e:02:f8:5c:3d:0d:0d:e6:92:5b:
7d:03:49:a1:5c:f9:31:67:a7:80:12:15:de:1e:d1:74:ec:a7:
1f:25:a1:2c:b5:89:76:62:32:46:f0:47:47:c3:c5:d9:9f:61:
b9:37:fd:e6:0b:df:1d:21:ad:ae:61:a2:f6:e4:08:b0:a7:d5:
1f:bb:5c:f7:a8:98:2d:b3:8d:3f:cc:8e:4b:96:34:34:ab:3e:
fd:7b:72:f4:8c:d5:12:68:4b:13:c4:76:3b:23:5d:37:63:54:
17:0d:d2:c3:6d:42:13:72:1f:70:79:2f:d8:ee:3f:85:f8:3d:
a7:e2:44:27:d1:7b:e8:6d:08:80:00:c1:11:ac:33:4d:35:ff:
df:e0:82:be:a1:08:87:54:59:ff:49:90:0a:cf:ab:30:5b:0e:
2d:f2:40:72:9e:26:ff:c7:ee:a4:5c:ea:90:78:6e:0a:9c:50:
64:83:38:c5:24:70:ef:71:f2:23:36:08:b3:9a:ae:ac:9c:95:
e4:b0:90:ce:7a:c0:c9:e7:4b:2b:c1:64:5e:7b:10:7d:39:97:
e6:ae:34:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:25 2026 by rpki-client