Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.mft (raw, json)
Hash identifier: vHMLunCeBZ4bnzPzfcQ8A5Wj9TSz8rQehn5y/W3dEFU=
Subject key identifier: CC:9B:99:D3:33:B2:6D:E8:F1:2A:A8:D0:27:43:51:C0:D1:15:6C:55
Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7
Certificate serial: 019D9A3E2F631B55BF5FA9F9CB989653A9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 07:00:59 +0000
Manifest this update: Fri 17 Apr 2026 07:00:59 +0000
Manifest next update: Sat 18 Apr 2026 07:00:59 +0000
Files and hashes: 1: 4vogBCHvVhbK8N2sbK3joTZSar8.roa (hash: pJFApZIgzEg6Z5G8+ARw6VHXe5cVu/+xIPiV86FoPSo=)
2: 7lhE6bzZhG0C5CmBmaI7HzYPl8s.roa (hash: ToooYHL477UW9eXXr8dqX98p19Eo18MQyb6sYa2XGsM=)
3: TsBKJ5VG1iOHqte2doC7OTdW_hw.roa (hash: KJo9UiYoALbrSsQU23bvnMkU2vT+dKNpE5NMA+Hvo6E=)
4: g2Uo4VK23LoVcSQaxVvlvOARGLc.crl (hash: GUFEtHIFoDXgKOkhrIB+kXDXhK7Lm8lierxy0kUc0vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:2f:63:1b:55:bf:5f:a9:f9:cb:98:96:53:a9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7
Validity
Not Before: Apr 17 07:00:59 2026 GMT
Not After : Apr 18 07:00:59 2026 GMT
Subject: CN=cc9b99d333b26de8f12aa8d0274351c0d1156c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:3a:27:b8:51:f9:33:30:6c:fc:41:d9:3f:
f1:32:3c:10:3c:f4:19:5f:6e:c8:c8:a5:85:5d:13:
cb:5f:ef:12:c2:3b:16:01:41:fd:98:09:bf:e8:1e:
44:73:15:ce:ca:be:15:ca:c9:57:2e:4a:41:b5:25:
60:0d:b8:26:c2:12:cc:a4:0d:b4:da:b9:1a:fe:cd:
3e:bf:2b:c1:e4:34:63:c7:c6:3f:c6:a5:33:45:b8:
43:16:64:64:6d:a7:da:e4:99:00:d9:72:d9:a6:52:
ac:36:d1:49:30:9d:02:29:89:43:61:39:5e:11:c1:
c4:43:75:52:f6:4c:7d:22:b4:b4:5f:ae:de:da:a0:
cd:f7:d6:a6:23:7a:3b:8a:5b:92:70:3e:6d:2d:0a:
d2:34:2e:7e:73:0c:ce:26:72:6d:31:a4:3f:7a:91:
61:6e:de:84:a1:18:c6:d8:c6:33:9f:b3:f4:df:f0:
27:49:ab:b9:66:fe:39:03:d2:bb:e0:15:be:09:ad:
98:43:b9:09:12:55:6a:49:b6:de:3d:6a:00:02:b8:
c5:65:02:08:84:25:31:bf:86:ba:16:f4:5a:97:c2:
83:95:31:23:db:d8:85:be:53:2c:0a:bd:09:91:66:
ae:5a:3e:0a:83:da:31:f8:6e:20:16:75:4b:1b:cd:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9B:99:D3:33:B2:6D:E8:F1:2A:A8:D0:27:43:51:C0:D1:15:6C:55
X509v3 Authority Key Identifier:
keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:56:41:db:4e:78:86:0c:c6:55:d6:da:82:24:f4:b2:73:52:
46:60:eb:02:e1:81:8c:43:e4:fe:89:53:7c:f8:01:65:68:9b:
42:9c:62:90:89:f0:15:8d:cd:23:c8:84:06:10:49:c3:c4:d1:
d4:ab:7b:5b:79:e9:d9:d9:e0:03:fb:8e:c4:a8:39:a0:1f:6a:
ec:aa:5f:81:ce:ea:f8:0c:e6:df:c3:b8:03:55:dc:d3:bc:0b:
3b:94:5f:c8:0b:1b:64:dc:f7:d4:58:35:21:e9:81:2b:b9:55:
80:77:d6:23:2c:de:55:eb:48:bf:ff:60:6c:12:d1:2d:01:cc:
c2:0f:c7:18:fd:6c:e3:62:8c:d5:07:26:a2:a9:e5:85:50:2b:
da:25:cf:11:8c:c0:08:88:4f:d2:f9:56:d3:ac:cf:3a:df:21:
f7:53:ef:4b:b0:fe:d6:6c:a9:e9:3c:e3:b7:52:0d:71:cd:73:
3e:84:c6:46:63:fe:1c:d0:38:b7:a6:2a:ea:f4:1d:bc:3f:fd:
a4:1c:6d:45:59:fb:a0:cd:9f:2a:f8:42:1c:6a:b9:c2:74:0e:
88:28:d7:34:15:f3:99:c8:46:5e:c7:3c:a4:fc:df:23:db:45:
b9:0e:a5:11:fd:29:41:73:87:ef:77:75:4c:37:de:b2:2e:ad:
20:72:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:44 2026 by rpki-client