Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: EgAsvhLxiZV51phRj/L7uxqeB/AVJZzyh6IiRNXsSRE=
Subject key identifier: 3E:F3:F1:D4:FF:01:A6:50:FF:72:EA:98:8A:1F:58:C8:07:BE:C7:63
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019D9DAD29881B28DEACD48C1AC8663D8E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 163C
Signing time: Fri 17 Apr 2026 23:01:04 +0000
Manifest this update: Fri 17 Apr 2026 23:01:04 +0000
Manifest next update: Sat 18 Apr 2026 23:01:04 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: z69I4ZlGvCmbnFp3pAUVuEGtZiQVm5bidAFdditTfg4=)
2: jfpduPNWkNLgvBjIIrRsKoLhV3Q.roa (hash: 54K+k1GuCsLHpi8qK3vvD17O4Ihyjwnmzr57+VpXx/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:29:88:1b:28:de:ac:d4:8c:1a:c8:66:3d:8e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Apr 17 23:01:04 2026 GMT
Not After : Apr 18 23:01:04 2026 GMT
Subject: CN=3ef3f1d4ff01a650ff72ea988a1f58c807bec763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:d0:ed:ff:eb:ad:9f:38:88:32:b3:9d:73:
c0:62:71:9a:e3:13:8a:8d:09:71:03:76:da:20:38:
bd:87:1f:be:88:d4:cd:1c:22:bf:7a:cb:ee:11:97:
44:02:53:53:ff:c6:97:59:ef:83:ff:1a:83:39:7f:
8e:a8:85:e8:c7:07:d6:6a:d6:41:22:ca:cf:07:e8:
47:b3:5f:45:35:14:c5:4c:46:e5:13:08:6b:25:cd:
60:c6:1a:d1:cc:fd:fd:58:26:8d:fa:84:ee:d9:b1:
89:79:f5:04:c4:b5:70:34:a6:5f:6a:da:78:47:28:
95:9a:29:70:64:89:95:50:2b:b3:17:7d:bf:d6:8c:
0e:8a:0e:d6:ad:d5:71:1e:c5:9a:3a:3c:9a:45:26:
7d:67:08:da:9f:ca:02:a6:15:68:83:00:a3:ac:ef:
85:d5:29:3d:fb:a2:ae:d9:f8:d6:25:a6:c9:4d:d0:
11:ea:69:0a:3f:b7:5a:a6:6c:78:32:93:d9:71:10:
e3:0c:c4:e9:77:1a:e0:c2:6c:4c:68:43:d0:73:c0:
8d:d8:1a:3c:d3:2e:d3:4b:18:bf:eb:52:f0:5c:bd:
59:65:57:4c:3d:f9:6c:2d:15:d2:7a:0f:9c:f1:20:
65:6f:70:4f:80:3a:ac:70:b5:13:95:35:21:2e:5c:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:F1:D4:FF:01:A6:50:FF:72:EA:98:8A:1F:58:C8:07:BE:C7:63
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:35:c8:2a:35:61:c9:08:18:e0:f8:4e:c2:ef:da:f5:0c:ea:
dd:ef:d4:64:64:94:d7:c0:4e:e4:eb:99:a2:3a:a1:e0:ce:aa:
42:13:e2:bc:5e:94:52:1b:63:ce:ea:4b:fa:ed:44:67:d9:ef:
ca:81:1a:7b:36:ac:cb:31:1d:e3:cf:36:53:6a:67:a3:90:11:
05:72:ad:6d:ac:e4:ad:e1:2b:f5:fc:e0:2a:5a:cf:ba:e4:1e:
2c:fa:9b:04:80:6f:71:44:e5:da:0d:c9:09:98:46:3a:33:ef:
42:89:38:3c:8a:4c:fe:9d:c0:ab:09:22:e6:fc:8c:b1:e2:35:
fa:e5:16:e6:a3:34:0b:74:ae:cf:88:1b:e9:d9:41:00:8a:b9:
5b:ba:1d:40:12:57:48:d9:ed:2a:6f:4a:42:b9:67:6f:6f:7b:
e8:22:53:95:b7:b5:e1:88:6a:64:d1:ab:47:3a:07:d7:02:29:
5a:fa:85:cd:f3:dc:aa:e5:bd:8e:f0:8c:72:00:26:fd:11:eb:
8c:c9:ce:2b:6a:5d:b3:33:ce:4e:6c:43:85:80:c1:64:f1:9d:
97:b6:de:af:6c:7c:a5:b9:28:f8:4d:7f:70:33:2e:ac:6c:e8:
2b:57:35:20:eb:c3:31:1a:5f:c5:f6:57:a1:e9:9a:10:0d:6d:
f9:4a:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:21:42 2026 by rpki-client