Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File: 93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier: xzD4q0gwEHPmGsMrzJBfJvIHc2QA8IZgXzigWWNhNKg=
Subject key identifier: 3D:3D:2E:BC:B1:EB:34:1C:31:D6:6A:27:E2:6B:1D:A6:2A:B1:C0:72
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer: /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial: 019D9B50D83CEEE3386B97F20ABEEB0E7941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 12:00:59 +0000
Manifest this update: Fri 17 Apr 2026 12:00:59 +0000
Manifest next update: Sat 18 Apr 2026 12:00:59 +0000
Files and hashes: 1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: jMH6/MMHao4DqATxjnmmtWUkO6+e43aUmH8/sQL3Bl4=)
2: c06tR7wEve3BgRsZfi2xd-31eVA.roa (hash: V2mYqL9ivwyeeA9Wbx55/u2xDyhE5GyqU/pPOSpOihs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:d8:3c:ee:e3:38:6b:97:f2:0a:be:eb:0e:79:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
Validity
Not Before: Apr 17 12:00:59 2026 GMT
Not After : Apr 18 12:00:59 2026 GMT
Subject: CN=3d3d2ebcb1eb341c31d66a27e26b1da62ab1c072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:55:32:51:52:d1:3a:69:c1:3c:75:1b:90:
be:92:f6:b1:01:a2:05:59:d3:c5:ed:81:3d:17:32:
4d:70:26:fb:02:55:12:9e:40:5c:d4:6e:7d:7c:dd:
db:21:75:c5:15:4f:38:02:83:e9:cb:cf:68:6b:41:
e4:7d:eb:b6:30:7b:74:fd:e5:a0:25:33:2b:ad:3f:
0a:ef:1c:73:77:f9:4e:37:0d:2e:c4:f6:f4:ae:c3:
de:80:60:1f:83:a2:c5:05:98:3d:a1:8a:1f:64:6d:
45:44:e7:85:f7:fa:59:5d:95:ba:fc:a1:6e:c1:09:
9d:65:bd:f6:e1:54:d3:3a:81:76:4e:e1:90:5c:db:
ab:cf:d4:52:fd:dc:d1:ac:df:f1:02:66:53:bc:d0:
a3:b4:60:02:65:ce:24:5c:1f:6e:0c:b6:e8:37:ae:
f0:21:b2:d2:fd:db:49:93:c0:ad:07:6b:31:a9:57:
bf:19:ae:90:4a:b3:35:74:cc:36:64:8a:0f:02:c5:
fc:9e:57:9c:a4:01:0c:c4:0e:ff:ca:57:84:f0:41:
a4:42:7f:87:17:c8:16:57:91:b7:b6:0b:68:45:c4:
37:2f:39:9d:71:78:b9:da:fe:c2:73:25:07:d5:9f:
d9:28:ff:1f:1c:8f:f4:8e:3a:3c:a0:1b:11:47:6f:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3D:2E:BC:B1:EB:34:1C:31:D6:6A:27:E2:6B:1D:A6:2A:B1:C0:72
X509v3 Authority Key Identifier:
keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:f1:39:12:70:57:02:06:71:27:8a:54:c1:aa:0a:7c:18:
ae:fd:df:1f:54:6f:66:85:80:4b:36:03:0d:9a:71:d7:d2:d0:
a1:60:9e:3a:9f:a7:78:2e:bd:97:0c:77:78:3e:3d:ea:4d:7b:
20:57:b5:1b:34:53:02:f4:a8:7f:8c:54:0e:75:f7:72:25:c3:
85:25:35:c0:cc:6e:18:53:a6:4a:0f:c1:ce:9b:37:af:25:49:
8d:87:e4:d0:4d:5e:58:0c:1c:61:55:d3:c2:51:0d:45:2a:cb:
0c:e8:3a:41:05:18:d0:04:61:ab:44:1c:06:be:f2:22:37:0c:
65:6f:4b:ad:4b:16:c1:b8:0d:44:a6:30:d0:a7:d9:5b:70:73:
92:4d:9b:fd:94:b4:a7:d0:01:e3:66:85:1b:60:f3:8b:4d:20:
68:95:ac:ec:16:e1:0a:42:dd:11:23:02:89:e3:1e:71:3e:3e:
9d:93:72:fc:e6:6a:e3:10:76:31:bf:2e:a3:55:27:dd:cb:1f:
42:2a:aa:29:8f:16:4b:61:25:9c:13:33:ae:8f:3d:da:5a:70:
5f:55:04:bc:b2:40:e0:8c:6f:e1:34:71:4b:f4:03:44:8e:85:
b6:2b:a8:18:f8:d7:bd:c4:f4:01:2d:53:89:82:6d:43:f7:c0:
ff:60:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:08:22 2026 by rpki-client