Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: KalurLdq6mkXNUs6pFEQln7HEJbUmUrDy65VbSSBSrY=
Subject key identifier: D8:A2:06:6E:6D:0B:5D:1F:62:9E:1D:63:89:00:B2:1A:19:AE:D4:15
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 019D9B87DAAE1E3649828423F267E5E51DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 13:01:04 +0000
Manifest this update: Fri 17 Apr 2026 13:01:04 +0000
Manifest next update: Sat 18 Apr 2026 13:01:04 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: 3FIxPSBHDfaUk5crNF2OjGqZeHgO6K+GtyKTkVOrx1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:da:ae:1e:36:49:82:84:23:f2:67:e5:e5:1d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Apr 17 13:01:04 2026 GMT
Not After : Apr 18 13:01:04 2026 GMT
Subject: CN=d8a2066e6d0b5d1f629e1d638900b21a19aed415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:e2:50:64:a1:7c:c9:8c:8e:c9:9d:3e:68:
04:12:71:d5:6a:5b:ad:56:b8:8d:8e:bc:03:d2:69:
f5:b4:b3:17:d7:fb:1c:3f:e2:92:7b:86:90:b3:00:
05:79:37:be:3f:15:2b:77:92:e1:47:e1:97:9d:af:
a3:46:a2:db:f0:81:c5:0c:01:ee:0d:90:ed:0c:fa:
9e:ee:9f:9e:d1:ad:af:8d:ab:22:fa:0e:09:72:4b:
b9:96:80:86:c4:1b:f0:00:83:8d:b9:b7:06:e0:8d:
6d:6d:1d:08:67:2c:0b:14:4f:0d:23:f7:99:2a:af:
72:44:b9:88:ea:65:54:f0:e0:2c:78:98:74:9f:43:
e3:9d:c0:09:0f:96:e2:c4:c3:8d:ad:0d:b4:83:ee:
98:8f:4c:26:37:d4:0d:f5:78:1a:ce:1a:ab:fa:0b:
f5:d4:9d:27:d3:54:7a:a7:53:d4:36:8d:86:cc:4b:
93:24:90:e4:a2:1a:b0:9a:4a:c5:30:9b:df:a4:c3:
54:a2:7c:11:57:6e:8f:2c:f4:1a:6a:5e:38:35:28:
16:d6:ce:16:c7:fa:37:47:03:01:4b:fe:79:d7:80:
5d:48:5b:ee:37:da:08:76:31:c0:44:85:1c:46:08:
e7:21:b7:a0:fc:29:23:6f:45:b4:12:14:55:0c:2f:
13:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:06:6E:6D:0B:5D:1F:62:9E:1D:63:89:00:B2:1A:19:AE:D4:15
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:dd:48:c6:5a:62:b3:c6:f2:91:42:02:ed:66:da:6c:79:78:
8b:21:2b:28:be:96:eb:30:79:38:f6:05:88:c5:ba:80:be:15:
8e:bc:97:e9:c1:b9:cb:80:8e:70:c2:9d:ca:09:18:58:ed:7d:
19:3e:fe:87:39:95:4c:c2:7a:97:91:07:ce:c0:9b:6a:ee:79:
9f:76:c2:00:34:a5:4b:ef:e1:e5:5d:7f:97:c9:ff:a7:c9:c9:
52:55:ad:bc:b5:c9:92:47:0e:01:a0:e5:2e:03:33:c9:f4:88:
46:b7:15:61:4a:58:01:a9:61:dc:a2:19:e7:4f:6c:c1:15:a3:
5c:01:b1:e8:6c:23:6b:b0:74:14:1d:74:56:62:d3:45:0b:f4:
b4:8b:98:cb:cd:3f:a3:79:44:b1:ee:67:e3:2c:b2:39:53:37:
e1:8f:c4:3a:eb:7c:c0:13:39:ed:ae:09:ac:f9:16:0b:05:48:
b7:37:2d:60:d5:f3:c3:8a:a2:32:66:7d:dd:09:31:0c:1b:56:
56:e6:2c:c1:0f:dd:9c:88:3b:fd:67:e1:10:e5:4c:a0:c3:06:
0a:b7:4d:da:67:f3:81:71:63:6e:cf:53:72:cc:d1:f7:7b:1e:
e9:52:61:1c:48:1d:40:4c:62:2c:c6:4c:69:ec:20:33:97:b7:
04:45:fd:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh9quHjZJgoQj8mfl5R2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Nzc2ZGY2YzI2YTBmZjM5YzQzNTM5ZDAyNDcyOTIxYjg2
MWU0ZWMwHhcNMjYwNDE3MTMwMTA0WhcNMjYwNDE4MTMwMTA0WjAzMTEwLwYDVQQD
EyhkOGEyMDY2ZTZkMGI1ZDFmNjI5ZTFkNjM4OTAwYjIxYTE5YWVkNDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBXiUGShfMmMjsmdPmgEEnHValut
VriNjrwD0mn1tLMX1/scP+KSe4aQswAFeTe+PxUrd5LhR+GXna+jRqLb8IHFDAHu
DZDtDPqe7p+e0a2vjasi+g4Jcku5loCGxBvwAIONubcG4I1tbR0IZywLFE8NI/eZ
Kq9yRLmI6mVU8OAseJh0n0PjncAJD5bixMONrQ20g+6Yj0wmN9QN9Xgazhqr+gv1
1J0n01R6p1PUNo2GzEuTJJDkohqwmkrFMJvfpMNUonwRV26PLPQaal44NSgW1s4W
x/o3RwMBS/5514BdSFvuN9oIdjHARIUcRgjnIbeg/Ckjb0W0EhRVDC8TswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiiBm5tC10fYp4dY4kAshoZrtQVMB8GA1UdIwQY
MBaAFBV3bfbCag/znENTnQJHKSG4YeTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUt
NGFjY2Y5ZjUzOTI3LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUtNGFjY2Y5ZjUzOTI3
LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALt1Ixlpi
s8bykUIC7WbabHl4iyErKL6W6zB5OPYFiMW6gL4VjryX6cG5y4COcMKdygkYWO19
GT7+hzmVTMJ6l5EHzsCbau55n3bCADSlS+/h5V1/l8n/p8nJUlWtvLXJkkcOAaDl
LgMzyfSIRrcVYUpYAalh3KIZ509swRWjXAGx6Gwja7B0FB10VmLTRQv0tIuYy80/
o3lEse5n4yyyOVM34Y/EOut8wBM57a4JrPkWCwVItzctYNXzw4qiMmZ93QkxDBtW
VuYswQ/dnIg7/WfhEOVMoMMGCrdN2mfzgXFjbs9TcszR93se6VJhHEgdQExiLMZM
aewgM5e3BEX9kA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:47 2026 by rpki-client