Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
File: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft (raw, json)
Hash identifier: IC+bHWDtXeFZANQSS+Isrrva+6OqUidnleBz6Zvgs/I=
Subject key identifier: 03:C5:3A:80:FC:1D:AC:51:BD:BD:3E:49:B3:3A:35:96:79:CF:9D:9B
Authority key identifier: FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
Certificate issuer: /CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Certificate serial: 019D9962A0DF59F7918F198F836FA5FDAE15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:01:10 +0000
Manifest this update: Fri 17 Apr 2026 03:01:10 +0000
Manifest next update: Sat 18 Apr 2026 03:01:10 +0000
Files and hashes: 1: 1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl (hash: yHqnxjGBJVhXEJM52ZuBLCawa5qoQVBWm8g0gerLyc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:a0:df:59:f7:91:8f:19:8f:83:6f:a5:fd:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf549c1c09c11093a3733b8308ae0452ce624ba
Validity
Not Before: Apr 17 03:01:10 2026 GMT
Not After : Apr 18 03:01:10 2026 GMT
Subject: CN=03c53a80fc1dac51bdbd3e49b33a359679cf9d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:69:4f:c9:80:5c:8f:b0:53:07:02:a3:6f:
4d:0f:49:e5:69:79:02:ba:33:27:56:6a:c2:3f:00:
c2:b7:32:4c:e5:56:a0:40:b6:06:44:9e:ab:ef:88:
e5:88:5a:ee:ef:ed:58:7e:59:8d:3f:1f:43:6b:16:
d0:03:4e:aa:f4:db:78:20:27:e9:51:51:f5:50:96:
a2:c1:17:01:5a:ef:6e:1c:27:56:9c:2f:86:20:a9:
75:7c:78:73:de:4c:3d:11:bc:c6:41:e3:47:43:5d:
4a:4b:c5:f9:36:29:cb:da:7a:b7:f9:a9:11:80:f2:
c9:7c:81:69:be:af:fd:72:8f:9c:24:c8:ab:dd:8d:
4a:c5:73:c8:5f:41:2a:d6:b5:b0:03:09:7b:e2:34:
23:2e:e3:22:b2:cb:3e:5d:24:f4:23:38:19:ff:0c:
86:98:7f:be:a3:a4:1a:9c:59:03:a3:58:8c:6f:8a:
33:13:a2:18:04:03:4c:f9:69:fe:df:d4:aa:1c:95:
d2:4b:e3:ce:c6:a3:89:5b:5b:70:25:d8:30:b3:97:
05:24:94:05:43:fb:a2:c4:69:93:b6:e6:7d:50:0f:
fa:f0:6b:d1:05:7d:d0:62:14:34:20:c2:77:ec:1f:
a5:e9:04:1a:2a:85:e7:f5:1e:f9:10:2b:5f:d9:44:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:3A:80:FC:1D:AC:51:BD:BD:3E:49:B3:3A:35:96:79:CF:9D:9B
X509v3 Authority Key Identifier:
keyid:FA:F5:49:C1:C0:9C:11:09:3A:37:33:B8:30:8A:E0:45:2C:E6:24:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7da5b4-4b9b-4c28-86c8-fe54170deea1/1/1-vVJwcCcEQk6NzO4MIrgRSzmJLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6d:af:c9:01:f9:f4:1b:5a:f7:d5:f6:a7:d6:93:85:3b:ff:
63:b5:60:95:21:73:8c:8f:6a:19:d2:27:5a:0c:cd:73:34:bd:
9e:4c:32:82:1c:0f:52:0c:aa:1d:95:b7:51:a9:6b:1d:3c:13:
71:77:67:fe:85:ac:2c:ce:3d:d9:ca:9a:39:1a:05:81:22:f5:
d4:2f:b2:d1:e6:a1:45:41:6a:8d:81:b2:79:e2:fa:3e:01:f5:
57:c3:69:06:6d:1b:59:2d:e0:87:d8:b5:4f:aa:94:46:fb:e9:
d6:ea:83:84:b4:10:49:aa:62:d6:d5:ef:00:c6:23:cd:de:7a:
4c:82:fb:c3:cf:7e:a2:bf:d6:92:84:a6:99:64:40:7d:97:05:
af:62:a1:f7:d5:2f:c7:09:d7:35:e6:75:15:c8:7a:93:5c:51:
45:e9:ce:eb:46:02:3b:92:1f:7a:93:4d:ca:1f:91:77:d5:a9:
25:c9:c8:33:b1:f4:17:06:13:dc:e2:2a:95:9b:ee:07:5f:e8:
f9:37:e1:d6:f0:79:00:99:35:53:b0:2a:53:c2:2d:93:1e:a7:
38:9f:63:37:f8:66:57:55:d0:c7:65:ec:4c:90:12:cb:f1:7d:
33:bc:d8:81:c6:e0:4e:ba:fd:d9:a6:db:03:03:16:2c:17:e0:
59:18:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:18 2026 by rpki-client