Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier: 9qaitDLbUOpn3lA/FHlmyZaxJbKhi2nsFN/TeHRrCcg=
Subject key identifier: E2:FA:2A:1D:D9:E9:D5:B1:35:E2:45:B2:0A:EE:0E:AA:3C:92:5E:E4
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 019DCDBE1F0CADC373C360256F539D0256FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 07:01:22 +0000
Manifest this update: Mon 27 Apr 2026 07:01:22 +0000
Manifest next update: Tue 28 Apr 2026 07:01:22 +0000
Files and hashes: 1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: /RfBZSleBTlBdOcY9vY50t8ULAGgWTmD4E2DRGKMD4Q=)
2: ASJCxMwgFICdhd2ryix0TW1woMo.roa (hash: eB2/RH4etmts4ZGHiKx5FyzcKrdqSgyRln6WwxKw+Ac=)
3: PKDBX_5rlrKVrUIFrHV2ZsSxOyY.roa (hash: BQOkCEhu+u6OghGz5UOaFPhVuOtvrXbTcbi4yCOPXRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:1f:0c:ad:c3:73:c3:60:25:6f:53:9d:02:56:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Apr 27 07:01:22 2026 GMT
Not After : Apr 28 07:01:22 2026 GMT
Subject: CN=e2fa2a1dd9e9d5b135e245b20aee0eaa3c925ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:50:be:54:69:83:e4:93:33:79:d3:4f:3a:
86:0a:18:22:0a:40:98:25:1f:78:e0:e0:42:86:54:
93:9a:d9:b2:c5:b2:6d:af:e2:8d:de:d1:37:a0:ef:
05:2e:62:02:76:e1:1c:82:dc:fc:0e:59:b8:1f:15:
53:9d:9f:15:09:19:b9:dc:ce:27:e9:20:4f:da:c7:
f1:92:aa:36:f4:89:dc:96:93:8b:3f:7f:68:65:d5:
ac:23:1d:d9:73:a5:a2:32:db:58:ed:2b:a0:a3:e1:
7b:50:8b:ed:9d:b9:8f:3f:64:3d:5c:88:c3:55:56:
e3:6e:df:d4:7b:06:4c:3c:67:65:e9:25:fb:17:a2:
e6:88:1e:19:e7:5d:66:97:23:4f:0b:51:26:22:a4:
de:70:d8:44:55:07:18:a7:9b:f1:83:f6:34:fb:8f:
2d:07:cf:10:4d:2b:f7:bc:ad:2c:5c:47:d6:bd:df:
d8:64:e5:4d:08:cd:e3:59:c3:13:5b:2c:da:22:87:
c3:08:52:86:f2:28:44:f9:e6:1c:d0:7a:d2:ee:ac:
ed:40:7b:7b:da:6d:10:a4:eb:74:8c:f6:af:c1:60:
fe:bb:5d:2c:10:97:80:69:21:58:63:e2:99:e8:4e:
76:e6:e7:18:c9:5c:a3:1d:6b:59:7a:40:19:b3:4d:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:2A:1D:D9:E9:D5:B1:35:E2:45:B2:0A:EE:0E:AA:3C:92:5E:E4
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e7:ed:19:e6:11:65:ca:63:b6:de:5a:be:8e:ad:da:83:de:
a0:7c:ee:cf:e8:00:c6:89:cf:1f:d5:89:1d:b9:9e:77:ce:1a:
db:ab:30:60:b6:70:2a:a6:b8:9f:27:37:e5:24:89:f9:8c:1c:
1b:96:ca:38:4e:8a:d3:8b:ea:8e:99:3a:3f:0b:4f:9d:ca:82:
85:e5:af:0a:de:04:3c:81:6c:dd:0d:c4:2f:73:64:ac:ca:f5:
87:fc:78:8d:21:ec:a5:2e:f2:25:ab:b9:4e:ed:41:15:de:06:
0f:4b:24:1b:99:a8:14:03:9d:6c:c1:54:55:5c:bc:3f:ba:b0:
a1:bf:b2:7e:09:e2:68:61:30:be:d5:20:80:d4:69:43:44:66:
3d:8b:08:95:b4:41:c1:78:fd:17:c7:e5:fc:31:5b:6f:4d:7d:
29:3f:47:52:b8:40:c1:b3:49:fb:60:95:0d:62:56:af:e3:c0:
5e:2c:64:1d:98:7b:64:5c:82:e0:9a:de:96:48:6d:11:32:2d:
81:27:19:f1:c3:c6:d4:24:ea:09:8f:55:de:71:37:ba:6f:a1:
ad:a6:30:f2:ef:6a:85:72:11:e9:ac:3b:7a:e1:4a:92:41:b0:
50:e4:49:57:79:3e:6a:47:00:b7:1b:58:0e:48:b1:17:77:53:
56:68:63:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:34:19 2026 by rpki-client