Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft (raw, json)
Hash identifier: aMLRfewDLjwYdrz6wdaOvXAKWuQ8ciS0XhRBGdwK62s=
Subject key identifier: 0D:52:39:26:B9:96:8B:EE:FD:11:7E:2F:59:EC:F4:16:98:CB:F3:F3
Authority key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Certificate issuer: /CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Certificate serial: 019D98F4E43FC99780E4E65C9F7D149BC818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 01:01:19 +0000
Manifest this update: Fri 17 Apr 2026 01:01:19 +0000
Manifest next update: Sat 18 Apr 2026 01:01:19 +0000
Files and hashes: 1: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl (hash: gDzo62hf60zUnbNiCehrZCWBDICHyYnmIDIVFnZaOiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:e4:3f:c9:97:80:e4:e6:5c:9f:7d:14:9b:c8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Validity
Not Before: Apr 17 01:01:19 2026 GMT
Not After : Apr 18 01:01:19 2026 GMT
Subject: CN=0d523926b9968beefd117e2f59ecf41698cbf3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:98:54:3a:c9:cf:e2:13:ff:b6:3b:b2:7e:66:
2e:6e:0b:62:74:0c:08:7f:e3:39:ca:9e:46:8c:ce:
70:22:d8:33:d6:16:7a:cc:c1:01:5b:65:eb:9e:11:
df:ce:e8:aa:b6:48:0f:be:53:74:4d:9e:70:4b:df:
8d:15:77:ee:a5:aa:c3:05:2d:1f:e5:53:76:8c:6b:
4f:b8:96:c1:40:3f:e8:a9:38:04:a6:5b:22:6a:c0:
b7:21:2a:ab:bc:12:15:dc:41:26:75:1d:9f:1e:d8:
82:83:bf:1b:85:f6:9d:3b:c3:cf:c5:8e:bd:39:de:
f4:54:0a:09:91:4d:aa:94:63:9a:4e:31:de:1f:d4:
e4:65:f5:a0:fa:ca:11:00:39:98:34:a8:80:b4:53:
34:fc:ed:78:d2:12:bf:c1:b0:71:f6:2f:c4:c7:9d:
d8:03:bd:a8:7f:b4:65:36:ba:c8:8f:a3:ff:ab:c5:
87:15:bd:44:91:20:33:2d:92:9f:26:9d:5d:ed:f7:
a8:35:c3:93:ea:19:40:5f:77:c1:c0:1b:38:58:e4:
e9:fe:6a:c8:af:aa:ea:c2:ab:91:97:9d:e7:b0:0a:
1b:5b:1f:95:14:38:0c:d4:e3:ae:8d:3d:38:d0:4c:
88:83:73:90:ec:bc:7f:10:5e:e4:cf:9d:f0:39:4b:
eb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:52:39:26:B9:96:8B:EE:FD:11:7E:2F:59:EC:F4:16:98:CB:F3:F3
X509v3 Authority Key Identifier:
keyid:FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:05:33:90:41:36:ed:54:9a:a6:fe:f9:a7:67:05:7b:a0:f7:
94:24:e1:bd:c7:76:74:d7:44:66:e0:d3:73:04:14:80:28:81:
83:6d:64:bb:c0:25:82:85:0a:16:7b:9a:1e:80:fc:d6:82:85:
9f:56:57:e5:27:7f:77:fb:38:43:d0:99:c7:f2:8d:d7:71:34:
45:cf:ff:59:72:e6:53:8e:26:00:a3:01:89:f4:58:76:59:82:
44:b7:d8:e5:52:02:b2:b8:5d:3c:06:5c:75:76:c0:18:b0:0f:
3a:f1:f7:0e:97:fb:58:d5:d9:4f:f6:33:d9:fb:09:3e:16:6f:
22:2c:94:55:3c:20:1b:c1:89:7c:74:26:c5:c7:b2:6a:14:4e:
28:e9:7c:ce:99:65:ed:85:cb:b7:ba:cd:07:6e:96:0c:d8:db:
35:03:08:03:83:0b:b1:58:55:da:72:b9:7f:b0:1c:a6:17:d9:
ca:2f:50:99:cb:29:61:7b:9c:06:67:7e:d3:df:fd:46:6f:ec:
f8:cd:59:63:2b:53:db:db:b6:38:7a:51:56:6c:2a:1c:3f:19:
6a:09:08:5f:92:74:64:45:d4:68:2b:c2:32:a5:24:82:96:42:
75:f5:cb:cc:a4:b4:3a:b7:d8:70:d1:0b:d5:e3:84:2c:d1:c7:
60:3d:5d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:25 2026 by rpki-client