Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: HBnkpyJRkmMGChalvJqCCqbTh3gJBr8OEtR9FRuE04Y=
Subject key identifier: A4:25:0B:E2:AA:77:E7:2D:AA:D4:75:E9:36:6A:8D:6E:C0:D0:26:3A
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019D98867B731CD09E08D8D58C08B7F0915A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 23:00:43 +0000
Manifest this update: Thu 16 Apr 2026 23:00:43 +0000
Manifest next update: Fri 17 Apr 2026 23:00:43 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: qgbdcyeMgx09luczFLKqtw6c71AEgIy/c6obEkiznqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:7b:73:1c:d0:9e:08:d8:d5:8c:08:b7:f0:91:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Apr 16 23:00:43 2026 GMT
Not After : Apr 17 23:00:43 2026 GMT
Subject: CN=a4250be2aa77e72daad475e9366a8d6ec0d0263a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e2:c8:60:31:80:7c:85:0b:51:f3:d6:20:69:
c7:df:38:49:ac:19:1c:ea:a1:cb:2c:c4:58:32:f0:
e6:81:50:da:83:ec:34:a0:e4:73:bc:f8:03:11:50:
c9:5b:7c:a6:82:b9:ec:4c:5d:74:99:ce:3c:ac:7a:
d1:20:35:05:49:39:d5:64:02:fb:6f:9d:62:e5:3b:
1f:c7:63:a2:d4:ee:64:50:4e:26:f2:86:ab:13:33:
6d:40:91:91:b9:60:74:3c:65:1e:9f:fb:89:a1:74:
16:57:58:61:f8:94:80:6e:5a:33:1c:f5:8f:70:f0:
a2:b0:c5:18:e6:c6:09:b9:c8:d6:e5:5b:5e:21:b4:
05:cf:38:ba:76:6e:32:52:e1:65:c7:5e:42:8a:93:
53:13:75:cf:a5:12:e7:21:ce:19:35:b8:e4:a6:04:
11:59:ba:4a:5e:8d:58:f4:fa:0f:5d:13:0d:75:3f:
03:45:fc:cc:13:e7:be:1d:37:cd:ac:d5:40:f3:89:
bd:a3:b3:93:bf:dc:01:73:47:73:cb:58:c3:94:72:
9e:fd:f5:8b:92:0b:70:a1:de:29:7b:ce:06:00:72:
5e:a7:0c:4e:e4:63:68:41:be:b9:25:96:b4:18:f5:
ff:9d:e0:91:c6:a5:40:bb:34:cd:6d:90:e8:5b:3f:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:25:0B:E2:AA:77:E7:2D:AA:D4:75:E9:36:6A:8D:6E:C0:D0:26:3A
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:67:3f:09:38:20:fb:fa:a9:e6:13:15:ee:39:78:cf:f4:01:
6c:3e:12:db:62:43:dc:f4:30:63:9a:20:43:e1:9d:79:74:ee:
67:22:41:80:8f:f9:88:49:6e:f6:69:9b:f3:66:06:e9:40:53:
42:22:8c:13:22:1f:16:8e:75:ab:c3:96:ca:90:ab:65:eb:b4:
7c:54:ca:b3:03:7a:db:ab:fd:0b:43:c0:83:22:bc:a1:44:74:
ce:62:02:c4:a8:44:79:51:d1:1d:71:21:ab:28:1f:94:95:db:
93:d1:e5:cc:55:25:4b:cf:4f:87:92:98:38:68:77:1b:03:1b:
9d:08:fb:f4:6d:ab:ef:17:c6:19:ef:40:d3:99:c0:21:a9:c9:
39:41:49:44:66:0c:ca:b3:d6:8a:2a:b7:30:12:21:c2:f7:df:
20:fc:9e:65:71:7a:61:0f:8a:8f:1e:d8:eb:94:37:95:c4:aa:
bb:61:8e:76:36:2a:99:23:2f:f4:9e:23:da:63:fd:96:96:ed:
3d:11:92:0f:5b:0e:33:a7:b2:68:78:30:4a:d5:fa:b6:be:4e:
11:5b:63:42:9a:c9:a7:c8:dc:72:41:14:7a:73:c7:37:c2:a4:
10:45:3b:ed:94:16:f8:39:99:5d:9c:c9:dd:8d:c0:b1:9f:56:
7e:bc:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:03 2026 by rpki-client