Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File: 46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier: mPkGSabOK1vIukHTUEAjMS6ts757lzbXwTeAgj/Xd9s=
Subject key identifier: 9F:90:8E:BA:B3:8A:30:DB:37:60:FA:8F:7B:57:61:B4:D2:1E:83:75
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial: 019D984F7EE94EFA029D07986999262EDD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:39 +0000
Manifest this update: Thu 16 Apr 2026 22:00:39 +0000
Manifest next update: Fri 17 Apr 2026 22:00:39 +0000
Files and hashes: 1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: QwnQ6q+An28gec2ZC4nEBw5prAjtXSIL1gZ524BJcqA=)
2: gM8ofdQeGubU92gq-aGGa-zvY6Q.roa (hash: 3xpADweqEfrOHaBnc8vO2OLZLCKpNhwxUy/JAhbOyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:7e:e9:4e:fa:02:9d:07:98:69:99:26:2e:dd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Validity
Not Before: Apr 16 22:00:39 2026 GMT
Not After : Apr 17 22:00:39 2026 GMT
Subject: CN=9f908ebab38a30db3760fa8f7b5761b4d21e8375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:a1:b0:40:ed:cd:c4:82:89:49:02:bd:87:
e7:f7:ce:6e:35:13:f5:a2:66:70:5a:2b:f5:b1:ad:
c5:0e:39:87:1b:7a:95:d6:6a:03:85:11:32:8d:37:
c3:fd:cd:35:d7:a7:9c:53:1a:b1:c6:e5:f5:81:ea:
a4:24:a5:7d:09:14:88:ac:f6:b3:3a:7a:17:4f:f2:
3c:f0:77:d7:a6:73:14:af:93:1b:07:25:d6:0d:6a:
ac:65:9b:f1:96:9c:5b:47:51:7b:c0:e7:a3:19:0e:
47:c2:5c:9d:e8:b7:c0:69:eb:7c:95:ef:53:fc:20:
8b:1f:af:08:89:f9:43:f3:0d:1f:b0:87:4b:7c:4d:
c7:3a:10:15:0a:57:dc:dc:7f:b5:40:97:5e:65:8d:
45:70:56:d6:5d:6e:6b:50:1f:37:73:f1:54:30:de:
0c:f2:b5:af:bf:1a:15:93:e5:ac:6f:2c:09:e0:11:
0c:33:23:82:2b:14:e4:5b:2f:5f:bc:14:8a:15:c4:
a6:e2:c4:43:70:9b:d0:cc:b5:4d:cb:04:22:30:cc:
fa:de:11:11:14:2a:d1:10:e8:a2:58:61:16:e3:44:
83:94:94:5f:f8:29:bf:d7:d2:d7:35:cd:48:cf:b2:
66:a9:d3:59:7a:b8:5a:70:91:c0:c5:ec:67:11:2d:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:90:8E:BA:B3:8A:30:DB:37:60:FA:8F:7B:57:61:B4:D2:1E:83:75
X509v3 Authority Key Identifier:
keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c1:ff:97:7e:65:7a:1a:95:88:30:78:c4:fa:a4:24:38:40:
93:f8:44:51:af:83:73:9b:18:cf:3c:6c:40:18:2f:89:9c:54:
99:95:31:25:3a:b7:2d:f5:4e:ad:2d:6c:19:e8:66:5d:32:c5:
4d:a8:e3:15:c1:90:cb:05:88:60:f7:c4:53:ac:8e:af:49:7e:
e2:f9:bc:2e:33:e4:94:80:d9:2c:01:04:e9:78:4c:5b:13:21:
c2:95:06:1f:8a:69:9c:24:95:92:0a:fe:93:08:99:06:eb:a0:
b6:36:be:e4:d0:e8:3a:08:94:24:69:db:68:b4:dc:ba:d3:42:
72:2c:24:25:49:5d:e2:40:a9:c6:7c:1d:29:66:d6:9a:fb:95:
06:73:13:59:f6:f9:5f:05:45:63:a1:dd:12:d9:92:f1:54:ff:
25:d6:f3:01:f3:09:22:14:ac:65:cc:33:bd:3b:2c:2e:48:df:
0f:6a:c3:fa:ed:fb:a3:48:80:54:65:f3:b1:db:75:06:c7:de:
3b:8b:11:a9:c7:6d:57:72:11:83:b9:c3:e3:71:de:15:92:cc:
84:d5:ff:4c:25:39:64:46:07:01:15:c2:a9:13:90:9c:fb:87:
b2:de:df:55:5f:ab:4d:65:f0:62:3b:35:0c:b1:3b:4b:b2:a3:
c2:26:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:24 2026 by rpki-client