Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier: qhqM4D8AbaYMaaeA/7TkOA4udBLQr3Hv7BvKgMhY0lk=
Subject key identifier: 5D:8E:48:B2:AD:0A:26:DE:47:F7:03:D0:18:96:73:5F:40:E8:10:42
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial: 019D9AE2B077FF3C3C2ECB490340F24C545A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number: 1857
Signing time: Fri 17 Apr 2026 10:00:40 +0000
Manifest this update: Fri 17 Apr 2026 10:00:40 +0000
Manifest next update: Sat 18 Apr 2026 10:00:40 +0000
Files and hashes: 1: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (hash: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo=)
2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: p5XWHngG4ZXA4x0cL2cClnqU9IKDBsGO7LA6gxLqHs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:b0:77:ff:3c:3c:2e:cb:49:03:40:f2:4c:54:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Validity
Not Before: Apr 17 10:00:40 2026 GMT
Not After : Apr 18 10:00:40 2026 GMT
Subject: CN=5d8e48b2ad0a26de47f703d01896735f40e81042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:6d:b9:3d:30:d4:51:7e:01:4d:9c:4c:49:
70:08:07:15:90:b1:67:57:cb:f2:c8:67:54:01:18:
ca:59:d2:e3:7b:9d:79:9f:4a:77:5d:b9:f1:41:43:
b3:d1:23:71:b4:34:bd:0f:e1:2d:19:40:3b:3a:b5:
98:ce:3a:4b:65:6c:99:71:6e:48:c4:0e:2d:46:05:
46:53:5f:50:cb:43:00:7e:6b:13:87:31:e0:13:bc:
0e:d4:b7:78:49:ff:bc:d1:83:61:c2:2d:ef:31:22:
4d:6e:28:6b:67:18:06:c4:a5:74:04:e6:79:47:54:
c7:76:e3:90:a6:dd:77:41:ed:d0:b3:8f:5a:d5:2b:
4a:a4:f5:be:e7:2e:f4:cd:35:8d:be:16:c1:c0:9c:
a8:48:82:bc:9a:9f:b5:b6:4b:c0:a6:b8:06:57:97:
08:74:7d:bc:11:d4:a7:8f:0d:82:4d:53:29:b6:fd:
9a:eb:d8:6a:20:75:72:dc:cd:0d:5b:1c:25:6f:f6:
8a:63:3e:ba:21:9a:57:32:39:b5:a2:69:80:3c:4b:
3b:8b:75:62:0c:9d:15:0e:9f:e8:19:d6:de:1c:d4:
f4:31:e6:d9:94:57:7c:73:fc:d6:e7:2c:2b:55:89:
58:a5:50:c8:33:49:06:49:84:c4:7e:54:55:54:97:
98:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:48:B2:AD:0A:26:DE:47:F7:03:D0:18:96:73:5F:40:E8:10:42
X509v3 Authority Key Identifier:
keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:01:6e:d7:4c:cd:81:56:3c:89:6e:dd:af:e3:6c:a3:fb:b0:
6d:7d:f5:92:de:97:2b:63:07:6c:8f:96:25:1e:5f:8c:27:75:
d2:64:41:f4:f8:5b:d1:bd:f4:b5:06:10:15:b1:22:de:f9:18:
45:85:81:47:57:2e:9b:af:6a:8b:f7:9d:fb:14:32:2d:e5:3e:
1e:9a:bb:d0:d2:68:32:96:58:be:fc:63:06:b7:2d:92:8e:e7:
ef:b3:09:9b:fc:04:55:c0:a6:85:60:fc:8b:4d:7c:52:b9:3b:
97:ab:3e:9f:79:7c:98:46:54:e6:3a:a9:d5:d2:c2:9f:ef:5f:
0b:a2:81:30:5c:6b:d1:a8:89:45:6d:da:4a:ac:02:7f:e3:71:
c0:2b:83:cb:48:03:95:3b:b7:92:5c:d6:b0:e2:13:40:c1:6e:
3c:c2:48:87:e9:d7:f0:43:20:83:e7:30:21:b2:29:a4:ca:86:
a0:27:f7:3f:97:9b:22:bf:71:20:37:e4:2d:8c:1d:89:75:9f:
5e:f2:98:14:2b:06:cc:ce:1e:56:3a:a5:5a:86:37:32:3e:dd:
d9:fd:db:ac:d3:26:d1:4c:a4:86:10:38:5a:e5:b6:c5:39:27:
05:30:7d:61:35:d7:89:a9:90:e9:8f:98:d7:6d:ee:79:8d:ac:
fb:d9:ab:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:54 2026 by rpki-client