Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier: BkhF25bzKzzw2qdjQ/o3j7Gpiq3ZmBa4dIJxDZAgsJQ=
Subject key identifier: 63:A0:BC:CA:B5:B8:EC:21:48:AB:0C:D2:83:0A:11:0C:2B:FD:CD:E8
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial: 019D9C62EE65E728BD6AC88809D7C572D840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 17:00:22 +0000
Manifest this update: Fri 17 Apr 2026 17:00:22 +0000
Manifest next update: Sat 18 Apr 2026 17:00:22 +0000
Files and hashes: 1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: qOqLFTD64cN7pJSPqoM9B6LVS/HikQ8lgZr5i0Rr3yk=)
2: XTIB3wAu-H5jaJDXDYV1NuX8wKg.roa (hash: XT8YNrFmajQC+0dTcA0EhEoUbR7GPWJZO+G57x2fMrQ=)
3: npLxbCkBfsvzh12Sr2_JC_OdCbc.roa (hash: F8mcnlSRs2fM48WMAEjA+peBFWEIlebDFAmNFUnpLxw=)
4: wFYmGE5l1chJ5-wTECpTY_pMIXM.roa (hash: hK07/sPk/5vCM2raR2H19xhYBW6r/31Luy7kDtFVbII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:ee:65:e7:28:bd:6a:c8:88:09:d7:c5:72:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Validity
Not Before: Apr 17 17:00:22 2026 GMT
Not After : Apr 18 17:00:22 2026 GMT
Subject: CN=63a0bccab5b8ec2148ab0cd2830a110c2bfdcde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:6a:2f:0a:21:77:30:4d:bc:03:52:f1:bb:
cb:97:f1:8c:0d:38:dd:ad:a4:f4:39:6e:63:83:b7:
11:60:3d:46:a6:95:4a:9e:b7:70:73:48:ab:ed:ac:
15:8f:33:16:04:e5:ba:03:44:6b:fa:f4:8f:df:be:
b8:67:31:10:0f:73:7f:16:e9:f0:ba:5c:71:5c:c4:
98:e6:4a:67:4c:6a:2d:87:0a:7d:24:35:2a:9a:36:
ff:9a:bf:6a:ed:5d:a3:3c:07:9c:96:f4:46:de:31:
81:3a:3e:17:f5:6c:00:6e:97:8d:4f:01:84:26:76:
57:e2:8f:fe:a4:49:2e:73:67:f2:0d:b2:bf:43:75:
64:0a:65:94:21:ce:c0:e6:f6:79:24:ac:44:cb:74:
fd:8e:a7:91:8a:95:53:4f:39:86:60:89:fc:5b:00:
6f:e0:d2:d6:92:dc:69:b4:23:14:d8:7f:d9:fd:99:
0e:43:df:76:de:53:c2:af:85:e2:7d:e4:a7:c2:36:
c1:e4:7f:76:ec:f5:6f:27:5a:9f:04:01:df:b4:89:
f1:39:8e:49:5e:04:d3:75:c9:a7:ac:8d:49:48:e1:
9a:47:fd:6e:37:0c:92:c9:de:f3:e0:f9:b5:3a:21:
54:c8:4e:57:d6:fd:56:34:f1:51:83:4a:fa:c4:c5:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:BC:CA:B5:B8:EC:21:48:AB:0C:D2:83:0A:11:0C:2B:FD:CD:E8
X509v3 Authority Key Identifier:
keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8f:71:1f:23:db:86:8f:15:ce:36:9f:d6:bd:96:3a:15:26:
21:95:c8:95:5f:48:01:30:cb:fc:c3:81:06:59:d1:a4:9b:b0:
80:0d:61:2b:36:91:c8:a8:90:3a:0c:5b:18:48:a3:80:4c:22:
2b:86:79:ea:e2:b5:86:3d:e6:f0:ed:f5:a8:05:fd:de:da:bd:
b9:6d:2f:28:14:c6:8e:93:9c:05:30:6f:7a:29:76:32:d4:07:
29:a3:bc:8a:f3:69:ca:ff:0e:97:2d:7a:64:e0:f9:2c:65:dc:
8d:be:3f:50:6c:25:28:5d:5c:50:47:b0:a3:96:10:88:7a:02:
7c:39:2b:56:74:a4:b0:6a:96:e1:86:81:34:18:2a:73:94:6d:
2d:f7:19:d2:b2:34:f1:8d:e3:f3:39:ef:1e:b2:cd:bb:15:2e:
39:9d:d5:45:eb:bf:12:fb:f3:68:f8:b8:96:88:4f:56:c5:1c:
56:b9:00:cc:54:f6:58:36:14:14:a8:c3:dd:2d:1c:5d:af:1d:
9b:e2:b8:f4:89:1d:05:57:54:4f:6a:dd:18:d9:f8:7f:81:f1:
e1:67:2f:1c:03:cd:b2:ae:67:99:f1:2d:9a:25:bf:e4:6e:45:
19:01:65:64:96:6f:a2:86:17:a4:de:90:b4:0a:8f:0d:59:48:
71:3f:d7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:48:29 2026 by rpki-client