Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json)
Hash identifier: C5voCLVz5TAvmyWd7QaEaKDCKqgigApg+H/AaXCFNUg=
Subject key identifier: 08:24:35:43:EC:56:25:D2:3A:39:21:5F:75:45:DA:19:D8:F7:F7:68
Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Certificate serial: 019DA3785513EBBB4D7B5D0C1C9D287BB976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
Manifest number: 18C2
Signing time: Sun 19 Apr 2026 02:01:05 +0000
Manifest this update: Sun 19 Apr 2026 02:01:05 +0000
Manifest next update: Mon 20 Apr 2026 02:01:05 +0000
Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: SNkK3nThfz+BzOAWSUmx4jBADKmgG3duwjTpyRm4O70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:55:13:eb:bb:4d:7b:5d:0c:1c:9d:28:7b:b9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e
Validity
Not Before: Apr 19 02:01:05 2026 GMT
Not After : Apr 20 02:01:05 2026 GMT
Subject: CN=08243543ec5625d23a39215f7545da19d8f7f768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:c3:c6:6e:d3:36:eb:25:e6:42:39:74:dd:
79:19:5b:50:ed:95:be:b0:7b:e6:20:33:cc:55:7a:
fb:92:42:25:78:a7:df:f7:e0:a1:2c:18:58:40:6f:
b0:44:50:b9:64:55:4c:0a:ef:bf:b6:85:ff:e5:52:
aa:75:ed:b5:35:0f:91:fd:a9:31:7b:6e:3e:58:ce:
4d:7b:a8:d9:92:ac:1a:75:91:d9:4e:2e:3f:f1:17:
6b:ae:6a:11:cf:46:d9:f1:87:0e:05:ca:0a:31:24:
3a:65:c7:f9:81:78:31:e5:d4:fa:2e:c9:76:9f:81:
ad:46:5b:ad:01:33:b5:4b:3f:a6:42:f5:9b:aa:11:
bb:73:e4:ba:77:76:d4:a1:ec:14:b6:00:69:b6:f9:
29:f6:18:40:f2:86:ad:f8:d7:44:93:90:52:b5:3a:
34:71:c5:35:40:42:f9:bd:ae:ea:89:85:d2:cc:55:
48:97:d9:82:ea:f7:b6:f6:45:31:cb:5a:ec:90:67:
0b:22:86:8d:82:70:70:b2:f7:d1:d7:61:5b:8f:79:
1c:19:37:fe:31:e8:f4:00:95:51:d2:a7:b6:e8:49:
a9:1f:9b:4a:0b:86:b0:c2:d3:d7:b7:e2:a3:10:27:
25:92:82:6c:79:51:e3:7f:bf:48:c1:c4:2b:a5:b5:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:35:43:EC:56:25:D2:3A:39:21:5F:75:45:DA:19:D8:F7:F7:68
X509v3 Authority Key Identifier:
keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cd:1e:4a:95:60:66:fa:7e:04:4f:b5:03:c8:21:90:5f:b3:
4d:0b:fc:55:fd:75:8c:0d:8c:37:f0:77:83:50:6b:7a:72:87:
e0:a5:18:e3:b9:8e:30:62:db:7c:cf:56:ec:db:06:a8:25:6f:
92:34:cc:6d:cc:97:92:dc:c9:37:fe:09:13:6d:d9:53:09:c9:
f7:16:1b:dc:cc:75:5f:f0:a1:27:71:2b:54:6f:c4:55:07:49:
7e:ef:33:1a:ec:30:d0:bb:99:53:95:8d:1c:9a:b3:2b:fe:9e:
7a:92:4a:9f:02:50:f2:c9:7f:c8:6e:66:37:6a:55:d8:19:41:
f8:53:5b:c1:17:83:73:cf:7d:d7:be:60:93:a3:4b:1e:d9:1b:
7e:10:cb:fa:70:e2:6b:b6:b9:e9:28:f1:06:d1:10:ab:12:12:
18:84:98:8e:ba:8f:a4:fc:cb:da:4b:be:3c:c9:b2:03:f8:bf:
19:6c:cf:ad:6d:d4:21:68:b1:05:e8:79:95:78:be:9e:44:1e:
a6:c9:d9:a8:9a:1c:1d:f3:f4:54:70:f3:6c:26:73:c9:bb:f0:
1f:0a:7a:2a:bd:b1:a0:92:43:1c:bf:0e:aa:6c:21:e5:54:eb:
1e:34:c0:b0:8f:fd:4d:36:a1:3e:b8:e4:b3:42:a4:a6:23:05:
0a:ce:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:50 2026 by rpki-client