Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json)
Hash identifier: qQrovFImdto1XNv/OHSaNwblA77KpiaXwy+cWr2hfyw=
Subject key identifier: 07:BA:33:F1:62:F1:DA:A7:A8:26:8F:69:EE:25:0E:4E:2B:E1:E3:1C
Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Certificate serial: 019D98BDF33A466FBB831076E15FC91B88CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 00:01:18 +0000
Manifest this update: Fri 17 Apr 2026 00:01:18 +0000
Manifest next update: Sat 18 Apr 2026 00:01:18 +0000
Files and hashes: 1: L-zvgoeGr5QCNNKdFrigYiUThmw.roa (hash: 5dCIcepW4WjNJw8oLPf6dUnoQSabbeGPDqnNUHTDSio=)
2: QiAgT2HWAVS4RtCxk3EgrUcgIYg.roa (hash: KFQ1WZMAZMiBqbCBbEMvQWQem6/MoMp+dWHnCpqq7zE=)
3: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: 3kDwFYgx/0t5QPJLb5TIYs4HgK1lj3Xw+N8aCmD2ANM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f3:3a:46:6f:bb:83:10:76:e1:5f:c9:1b:88:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9
Validity
Not Before: Apr 17 00:01:18 2026 GMT
Not After : Apr 18 00:01:18 2026 GMT
Subject: CN=07ba33f162f1daa7a8268f69ee250e4e2be1e31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fa:a4:92:9f:58:6e:5f:d9:3e:59:95:2d:5a:
f2:77:e8:33:cf:57:4e:7a:88:46:2d:ff:70:77:c1:
0f:41:04:df:b6:6d:e5:4f:44:3b:32:bc:4f:56:b4:
9f:ec:be:5c:4f:2d:04:87:50:2d:48:9d:f5:a6:b0:
a6:62:3e:2a:a7:77:3e:80:d2:c6:26:39:6d:17:03:
a2:a2:31:e9:7b:a7:30:52:46:1b:33:91:47:b5:8c:
36:7b:0b:0c:07:86:f0:00:19:ca:96:f4:3b:a3:5a:
af:a0:83:9a:c1:d3:cd:0a:07:ad:08:9e:5d:fd:42:
5e:3f:12:54:f9:34:35:7d:ae:21:ed:e9:7a:e7:be:
00:7a:b8:23:82:49:a4:ae:74:4c:7e:a1:e2:e8:48:
e7:b0:a8:0f:53:e7:aa:df:33:f9:e1:57:41:4d:6a:
56:72:89:63:93:8d:ca:07:4e:a5:6a:0a:d5:29:6f:
99:49:74:7a:58:10:27:40:4b:43:e6:9a:b1:36:1e:
d7:74:aa:42:51:b2:8e:e8:bb:48:d4:27:41:b0:9f:
ba:02:59:20:f7:8a:1e:12:fa:69:28:8e:fb:98:c0:
00:54:f0:2d:59:3f:b5:9b:c9:d2:8e:f9:a8:35:27:
ca:7d:0f:27:91:98:e3:0f:3d:04:0f:4b:8e:25:9f:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:BA:33:F1:62:F1:DA:A7:A8:26:8F:69:EE:25:0E:4E:2B:E1:E3:1C
X509v3 Authority Key Identifier:
keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1f:77:51:a0:e1:a0:e9:cb:47:4e:cb:8f:20:5d:91:d1:8d:
f3:f3:77:d9:5f:57:56:8a:da:26:a8:1c:d6:37:6f:00:ea:14:
15:a5:4a:b5:5f:4c:6d:25:94:33:df:cc:c4:62:02:78:4e:f8:
7d:a7:0f:5d:43:bb:f7:48:67:11:4b:1d:9c:71:38:06:cc:27:
8b:ed:b3:98:c7:b0:07:c7:69:09:de:39:91:be:a9:83:98:f8:
56:b9:60:14:e2:76:ae:c7:51:bd:c3:88:dd:31:21:66:88:31:
b5:ab:da:82:5c:e5:e2:1e:d9:65:8f:61:d0:99:19:5c:be:d3:
c1:45:88:98:04:ac:bc:42:c9:44:eb:03:fd:24:7c:86:3e:15:
47:0d:97:73:78:21:cf:dc:01:d5:9d:2e:e4:44:97:62:c9:da:
00:5d:27:92:eb:eb:cb:70:d4:79:02:4f:d9:71:93:41:7c:4e:
c2:75:34:fd:0b:3c:31:99:46:22:41:a6:87:9c:cb:d9:4a:25:
b7:51:d3:98:62:0a:5c:3b:85:ad:0e:e4:f2:5d:6d:c2:ae:62:
13:8c:d2:bb:1a:53:a0:71:83:97:33:07:27:b3:8b:4e:e5:df:
d0:11:ff:ef:1c:63:92:68:84:d7:cb:9b:25:d4:0f:93:b6:5f:
fd:f0:51:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:32 2026 by rpki-client