Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: nH+GJjMHptVUn7tEyWappeJMK8zenn9ooAEIsY87w9s=
Subject key identifier: C3:8F:21:2E:47:CE:91:31:68:DC:AC:51:F2:C5:FC:43:7E:E1:08:FA
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 019D98F4AE5493329023A7AB1A7885456238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 18BC
Signing time: Fri 17 Apr 2026 01:01:05 +0000
Manifest this update: Fri 17 Apr 2026 01:01:05 +0000
Manifest next update: Sat 18 Apr 2026 01:01:05 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: IsUlVb6zCwmhQyWmb4Dax2rZ10ShiD1oMkczlTC2UWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:ae:54:93:32:90:23:a7:ab:1a:78:85:45:62:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Apr 17 01:01:05 2026 GMT
Not After : Apr 18 01:01:05 2026 GMT
Subject: CN=c38f212e47ce913168dcac51f2c5fc437ee108fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:34:76:8d:b4:21:e0:66:5a:ae:60:ab:eb:ca:
26:ef:05:5b:7f:b8:53:37:4f:fd:a3:79:bd:2d:cc:
44:6a:ed:05:6c:49:2b:37:d4:f1:60:ef:e6:83:bc:
1a:c9:18:e5:8d:09:2c:a5:af:e7:58:69:13:f7:38:
a4:b0:25:b4:15:c3:7b:3f:f5:73:02:df:a2:ea:e3:
24:19:63:a2:33:38:77:9e:a9:f2:62:b6:63:30:d9:
23:1f:4e:f6:74:0f:af:2a:d7:f9:66:0f:b8:db:11:
d8:75:a2:73:e6:11:b5:e9:34:d4:c3:25:9c:a7:57:
ff:54:d0:e2:cf:24:56:34:fb:67:85:00:63:a4:d6:
15:e2:9c:7e:7e:c2:f2:40:ef:9d:78:86:59:ef:a7:
79:35:35:4f:c5:50:a1:0f:d2:84:5e:6f:50:a7:96:
72:f9:58:91:aa:f2:18:03:e9:77:8f:f7:43:16:84:
a8:57:11:10:f2:78:c8:92:42:8c:a1:a0:f4:b4:e1:
39:f9:86:f0:e3:fc:40:4b:2e:02:7f:db:f0:42:15:
68:05:a2:19:10:f2:8a:4f:a9:dd:a5:cc:f0:27:d3:
5a:41:c1:b6:a4:12:56:b1:33:4d:97:9e:a3:9f:55:
c3:39:4e:62:15:b7:c1:27:cd:5a:5c:15:60:68:62:
e5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:21:2E:47:CE:91:31:68:DC:AC:51:F2:C5:FC:43:7E:E1:08:FA
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8f:50:43:93:e8:91:ca:5a:13:84:da:d7:69:89:80:34:05:
79:e2:a1:5b:ae:e1:30:4b:dd:e0:79:62:81:cd:23:3e:20:ae:
9b:bf:b2:b5:8e:29:5f:88:5f:5b:af:94:59:8a:59:00:9f:cf:
97:a5:83:69:a1:06:71:bb:fe:1b:39:42:b2:ae:da:5c:e6:2d:
9d:b2:bc:57:13:a2:6c:d0:e2:92:b9:68:71:bc:dc:72:c9:ad:
8b:ad:6f:27:cf:8e:36:03:60:81:b7:7b:24:7e:20:a0:40:f8:
84:6a:59:ae:92:fa:e8:46:95:03:5b:db:f8:bb:24:ac:11:1c:
14:58:d7:a1:d9:ba:7c:2b:dc:75:68:e8:c5:02:06:5a:14:30:
24:ef:b2:28:58:84:a3:12:a0:86:0b:cd:5b:10:79:0c:63:60:
d8:2e:e9:57:7f:2d:eb:fc:63:e8:1f:0f:53:b2:98:55:ea:6f:
2d:39:f0:8e:08:0d:ca:63:4b:ac:53:f8:32:ab:aa:85:fe:8a:
21:ec:15:23:9a:77:8e:29:47:b7:eb:0b:c2:0a:6b:b0:a4:34:
d4:53:55:42:09:19:7f:99:48:e2:73:b8:6c:00:16:ec:78:90:
f6:a8:41:a0:d8:f6:02:d4:29:cc:c1:ee:a9:05:25:c1:80:82:
9e:0f:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:49 2026 by rpki-client