Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
File: 1-cuQlMt82hOL0BABPrnswzGQMEE.mft (raw, json)
Hash identifier: 8PueXHEYVzdYpyi3DDE1umkKpABvZFIJhPm+7fVH5Ng=
Subject key identifier: AF:AE:54:AC:9E:27:CE:E4:65:67:A6:3C:A6:7A:3A:9F:B7:71:C8:5C
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 019D9A0755B34FD06A08BB7DAB8AF0516526
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 06:01:05 +0000
Manifest this update: Fri 17 Apr 2026 06:01:05 +0000
Manifest next update: Sat 18 Apr 2026 06:01:05 +0000
Files and hashes: 1: 1-cuQlMt82hOL0BABPrnswzGQMEE.crl (hash: UYI/cwvVzQNR1q3CSx9EGAlc9NsW+BAJ1u6gW8VMMBk=)
2: Qk5MpNdRL52qvitv9k0XvdvcapI.roa (hash: vbB6JQXbd3WJ1/NPtyFdfR5AK1sMZwRoGAo5/Aa6H5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:55:b3:4f:d0:6a:08:bb:7d:ab:8a:f0:51:65:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Apr 17 06:01:05 2026 GMT
Not After : Apr 18 06:01:05 2026 GMT
Subject: CN=afae54ac9e27cee46567a63ca67a3a9fb771c85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:15:30:38:c0:17:9d:ff:17:5c:2e:d5:9a:
38:a9:fd:df:01:72:ed:64:95:29:64:0b:ff:be:93:
28:7c:00:6e:2e:08:1d:54:78:7c:09:88:6a:e3:fa:
2e:62:b1:f9:6c:ae:7e:48:d8:2f:4b:93:b5:77:f0:
6b:b1:47:f6:a5:81:5f:e7:58:74:24:8b:c3:93:f0:
80:c5:d9:6d:cb:6f:f1:4d:a5:1c:bd:0d:52:b3:dd:
8d:bd:f1:de:8a:b1:78:78:ef:90:22:d7:70:74:2a:
45:19:db:ed:9c:75:56:16:30:21:9b:60:89:58:36:
4e:b8:38:3d:70:ee:a6:a1:77:ad:52:99:34:11:62:
b3:8d:fe:d2:3e:b9:f4:47:ed:c0:b2:72:87:65:57:
18:e8:4f:96:eb:c8:e4:f3:7d:8d:e5:78:99:27:6f:
82:ca:7e:e9:f3:96:30:d0:8a:68:68:52:1c:51:1d:
ba:25:6d:4b:0b:20:ea:3d:af:7d:95:e8:fa:f3:d7:
6e:be:6b:17:9f:ee:ff:c9:81:9f:56:4e:58:c8:13:
9b:1a:64:8e:a6:76:30:47:d8:5c:06:9a:34:82:28:
0d:16:f2:ee:6e:e0:40:1b:39:ce:38:01:57:95:42:
de:a1:23:e9:05:81:fa:43:c9:15:54:3c:67:71:37:
ca:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AE:54:AC:9E:27:CE:E4:65:67:A6:3C:A6:7A:3A:9F:B7:71:C8:5C
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7c:b1:fd:f3:dc:ba:b2:ff:2c:f5:d4:c5:e4:9a:68:2b:fe:
b4:fa:05:0c:12:c4:ea:33:fd:70:bd:6b:86:c1:2f:0a:95:4a:
91:01:83:0c:7d:0c:2c:09:b1:37:e1:53:1e:90:3e:2c:7b:b5:
41:f2:4a:2e:18:09:5a:e8:f3:5f:a1:68:31:48:73:95:4b:90:
60:94:72:4d:85:cd:2c:b3:02:18:4e:c8:e2:62:8f:90:e4:8d:
43:19:bd:52:bc:67:4c:46:49:57:ef:65:06:aa:d0:b0:da:d7:
7a:ad:54:c4:7c:f1:00:43:51:b7:1b:45:62:b0:38:6d:70:39:
65:20:b8:7c:43:7c:45:76:e7:26:7c:54:68:30:20:3b:98:67:
25:82:7a:5c:d5:4e:5f:65:bd:14:27:01:47:1b:89:08:34:de:
96:46:85:aa:46:2c:69:5f:6f:1d:c2:ce:64:e7:be:ee:7f:c5:
a4:3a:53:8c:21:94:bf:f7:fc:c7:fa:2d:40:3e:3b:8d:55:72:
b8:82:4f:d0:50:ef:f5:47:3d:84:7f:42:82:5b:71:99:37:35:
3c:52:6c:c8:40:33:67:09:ff:99:c5:96:8d:6e:3e:65:12:0e:
4a:99:6d:cb:2b:86:0d:fa:c6:e1:8c:39:b5:5e:56:a8:96:83:
3a:57:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:48:20 2026 by rpki-client