Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: /dnQvwVIVHuGEA76RaDZMFvhBLUQrpduvhjq6Uc2wKs=
Subject key identifier: 1C:2D:F6:75:63:38:B6:D3:25:1F:F5:0A:D3:6E:14:BF:A2:F0:E3:33
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 019DA5666DDCDC8C1813D19D13820CFA5EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 18C3
Signing time: Sun 19 Apr 2026 11:00:46 +0000
Manifest this update: Sun 19 Apr 2026 11:00:46 +0000
Manifest next update: Mon 20 Apr 2026 11:00:46 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: kLt9RBjtkXvhUAxlVubyIfno461vysMsq0bNZlWMm0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:6d:dc:dc:8c:18:13:d1:9d:13:82:0c:fa:5e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Apr 19 11:00:46 2026 GMT
Not After : Apr 20 11:00:46 2026 GMT
Subject: CN=1c2df6756338b6d3251ff50ad36e14bfa2f0e333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:03:60:5c:1b:42:d2:ea:ec:2b:cf:ce:6e:
64:fe:59:14:5a:a7:27:1a:91:93:e3:b1:bd:42:35:
c1:09:5e:59:4f:f6:cb:84:91:0d:1e:e5:9a:5a:2b:
b3:a0:8e:d5:d0:da:df:9c:22:a9:db:2d:88:0a:87:
38:91:f2:32:96:c0:0e:d6:17:8f:b4:c9:1d:10:33:
1c:c0:59:cd:9a:38:05:a2:c2:85:4d:5b:e6:2d:13:
16:04:dc:cd:21:55:4e:31:1a:cd:6e:7c:fc:c8:4f:
8e:89:d9:27:87:bb:76:c4:1f:c3:ac:33:4c:c6:ef:
83:97:ff:80:3e:2e:45:d2:f7:1f:68:33:59:b8:3b:
7d:b3:b2:b6:98:80:24:f8:e1:3a:e4:35:42:75:a1:
29:88:6a:b4:9e:6c:17:25:ce:1e:07:97:06:6d:db:
69:17:86:0d:f2:b3:08:4a:e6:e9:a5:6e:03:8d:78:
85:22:72:20:5a:71:b1:db:4e:fa:2a:19:d3:dd:63:
46:4e:81:e0:d0:b6:f7:d3:8b:65:0c:0c:b8:27:68:
57:32:85:80:89:68:2b:34:2c:77:f4:e9:97:f5:4a:
47:0a:d8:b9:6a:48:c6:91:66:23:9d:28:d7:8e:2c:
2f:28:f6:ca:57:d8:91:4e:18:dc:2d:a6:27:ad:f9:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:F6:75:63:38:B6:D3:25:1F:F5:0A:D3:6E:14:BF:A2:F0:E3:33
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:02:2f:db:ef:01:a4:f3:0b:3a:28:02:84:16:ba:fe:81:
d1:62:62:1c:22:d5:50:8b:a4:16:6b:ca:5b:45:2d:74:d7:e8:
ae:e2:0b:e7:eb:2e:9a:63:63:ca:9f:dc:80:26:bc:26:f1:60:
cf:e7:9c:51:b0:c6:d4:d1:63:af:c4:ff:24:ae:90:d8:95:d2:
1c:e6:75:36:95:e6:90:3f:15:a0:39:5f:c3:35:ca:61:3e:33:
96:7b:56:da:fe:f5:e1:32:b9:1a:00:c6:fa:21:44:ed:62:42:
eb:e9:93:ef:8d:d8:70:05:3d:82:14:25:d0:77:55:b8:ad:59:
89:af:89:27:98:57:b1:01:dd:95:e7:3e:bb:8f:39:d2:bb:49:
e1:64:63:65:4f:ed:47:8f:7e:88:0c:41:7b:f4:b4:d7:7c:e6:
fd:7c:5f:0f:c8:3c:54:7f:3c:6c:da:b4:c0:aa:cf:fc:8a:11:
37:26:ef:a3:f3:df:24:ba:77:32:6f:eb:41:e0:48:fd:16:ff:
49:c4:31:5a:58:7f:f6:24:60:c4:e9:a8:a6:71:49:5c:12:da:
ad:93:df:fe:65:ea:2e:21:95:82:50:a5:40:4b:e0:19:0e:ef:
34:d7:70:17:6f:0e:64:21:3c:e7:49:44:b6:a8:d3:59:20:ee:
03:78:90:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:30 2026 by rpki-client