Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: qEMhy14UbIHpgtZY2EQII63lWas3Dka3aVRptPfqPzU=
Subject key identifier: 7A:6C:4B:C8:0A:8C:1E:B5:10:08:FB:79:1B:B2:CE:B2:53:7D:8E:89
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 019DA3AEF2418435A1E61CEBA40F4FA35B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 03:00:44 +0000
Manifest this update: Sun 19 Apr 2026 03:00:44 +0000
Manifest next update: Mon 20 Apr 2026 03:00:44 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: R/fDTetoQGC1aNc6BLzcTS2+KrkSPa3/YK0qsBLpkdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:f2:41:84:35:a1:e6:1c:eb:a4:0f:4f:a3:5b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Apr 19 03:00:44 2026 GMT
Not After : Apr 20 03:00:44 2026 GMT
Subject: CN=7a6c4bc80a8c1eb51008fb791bb2ceb2537d8e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:93:2a:80:f0:33:bc:16:ec:f2:09:68:50:
d7:df:84:76:22:a2:22:9b:ee:96:77:63:d7:57:2a:
45:52:76:8e:58:af:66:dd:42:09:17:6e:5a:cb:f2:
c6:f0:47:c3:c3:60:e1:df:74:db:7f:c2:ca:27:18:
b9:6e:6d:a5:fb:28:56:e7:f0:e8:9f:35:ce:fd:61:
23:69:da:b5:58:39:17:a8:01:3c:cd:8b:45:8f:47:
62:1e:d7:e9:33:3f:55:6f:ca:a5:9f:f3:a1:02:9f:
c8:93:43:06:cc:dc:84:53:f4:4a:e9:8b:8f:78:b1:
e6:0e:1f:4d:ea:9f:b8:15:58:7e:98:43:b3:2e:6e:
11:b0:cf:57:48:8a:80:5d:19:f8:1f:09:5d:5d:99:
89:0a:fc:d2:98:5e:81:9e:a4:ff:2b:c5:10:0e:f8:
3d:6f:4f:88:57:2b:6c:b4:96:64:63:d5:13:a3:f2:
ab:5d:89:4e:dd:4c:20:00:26:d0:d6:fe:85:40:61:
14:92:30:c4:97:f7:8e:d2:03:f4:71:fc:fb:8c:2f:
a8:53:2c:54:a2:e8:5f:b8:d8:37:11:da:48:67:5f:
e2:cb:95:41:15:05:77:af:23:1e:21:ba:93:4e:b9:
26:c0:dd:89:08:77:f0:b8:4c:6f:99:e5:c0:13:48:
03:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6C:4B:C8:0A:8C:1E:B5:10:08:FB:79:1B:B2:CE:B2:53:7D:8E:89
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:22:88:26:ce:b1:23:5c:d6:63:7e:c4:bf:65:5d:ec:f7:c6:
47:97:99:a2:5b:dd:53:37:30:a3:74:27:e0:44:6a:8a:8d:5c:
9c:d4:43:7a:26:86:90:17:40:be:f7:b0:49:36:6b:4b:04:36:
0f:16:14:c0:a2:69:e4:62:bf:05:9b:70:d8:3b:91:cc:5d:a8:
49:33:82:86:28:7d:35:86:f1:67:3c:77:bc:0a:87:0e:24:b4:
82:af:f4:86:c0:e8:b1:2d:f4:d8:bd:a8:d0:63:25:28:53:5c:
79:32:01:50:2a:9d:a0:68:a8:61:1d:7f:64:77:d5:81:4f:f6:
91:82:7f:9e:1b:75:fa:00:c9:9c:a3:77:3a:4e:f5:23:6e:1b:
70:6d:7a:3b:37:90:01:1a:76:b3:0d:b1:f1:d5:51:0c:af:1c:
bd:10:f3:2a:ae:f4:29:4e:dc:05:af:8b:44:7a:7f:e9:66:0f:
55:be:82:38:bb:9b:9f:95:58:f5:de:d3:4d:3b:b9:92:22:ca:
0e:0a:96:81:f1:52:c7:de:d2:26:ac:bf:3d:32:8b:9f:af:67:
cc:e2:65:08:1d:e5:8e:c9:cb:ff:b0:b6:db:42:aa:cb:1f:bd:
5a:07:7e:c9:eb:c4:be:67:03:1d:28:3e:f3:77:ea:c2:f4:78:
f4:06:b8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:05:36 2026 by rpki-client