Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File: rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier: SH/LyLujlGn35nlvr50BiB2mt+hkaO1KQcUDJLej0FQ=
Subject key identifier: 3E:2E:ED:1E:5F:F7:50:0E:F0:89:A1:1C:A1:2A:DE:D3:AF:2B:E3:54
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer: /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial: 019D992B91B6954E5E22477A34C8BAD909F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number: 13CA
Signing time: Fri 17 Apr 2026 02:01:02 +0000
Manifest this update: Fri 17 Apr 2026 02:01:02 +0000
Manifest next update: Sat 18 Apr 2026 02:01:02 +0000
Files and hashes: 1: YinM9FZ7tYvDuQZElbcHdEksbHw.roa (hash: 8pZ2RgiQMW7t4pyoRKcJqD0BNRo6lf7CbatwYv4YjtM=)
2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: CijIxmNIYJCfWif4x3bRxuGDUfDTOSqh7RI44px/7YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:91:b6:95:4e:5e:22:47:7a:34:c8:ba:d9:09:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Validity
Not Before: Apr 17 02:01:02 2026 GMT
Not After : Apr 18 02:01:02 2026 GMT
Subject: CN=3e2eed1e5ff7500ef089a11ca12aded3af2be354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ac:01:fe:8e:fa:7f:11:5f:12:ee:b4:f8:52:
e5:4e:43:e3:e5:e5:57:77:7a:e4:3e:fd:50:dd:44:
35:33:18:91:64:f9:3a:a8:86:09:c3:22:4f:a5:bc:
9a:cf:9c:31:53:b9:64:4e:f2:45:c7:33:13:1e:25:
b7:7d:64:fc:78:77:d6:32:f7:34:b3:44:ff:ee:ab:
43:90:7f:1b:57:7d:ad:e6:c2:19:75:68:76:14:44:
6c:eb:7c:11:1d:c2:b3:66:05:73:7c:62:4b:27:44:
76:eb:7c:79:12:68:c3:5e:81:8a:fc:de:6e:3f:33:
a3:b3:e3:2c:91:db:68:2a:62:20:54:2f:67:cc:03:
0d:b8:35:5e:1c:99:df:7b:f5:f1:ac:95:3b:c4:ec:
be:8d:0c:4b:39:6a:2f:51:76:a1:15:50:06:e3:a8:
cb:14:50:0f:e6:0a:dc:db:95:20:80:2a:19:25:83:
03:9d:c5:60:8f:8c:6c:93:d0:7a:ee:26:fb:dc:e1:
2b:4a:bc:48:95:e8:73:a3:ba:4c:80:74:7e:e3:02:
f7:81:d3:0f:12:4d:0f:1f:2a:59:cb:ce:bd:3d:d2:
21:3c:a2:a3:8a:0b:0e:de:ad:ff:24:d5:ba:a4:50:
23:48:3c:d9:bc:9c:cb:c2:ee:88:40:63:c8:83:be:
38:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2E:ED:1E:5F:F7:50:0E:F0:89:A1:1C:A1:2A:DE:D3:AF:2B:E3:54
X509v3 Authority Key Identifier:
keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:55:c2:eb:b5:43:e0:52:80:dc:58:6e:e4:6a:44:c9:51:9d:
74:d8:36:f7:40:ec:42:f8:c7:14:da:e9:31:21:1f:51:15:88:
4d:dc:81:f3:4c:39:af:29:9e:3f:63:39:ff:71:70:35:51:24:
2f:7e:63:71:f3:94:bc:de:e9:3a:d8:67:8d:96:0b:99:c6:e4:
7d:1c:28:e9:b0:a4:9b:04:f3:9c:b5:f5:6c:46:f5:6a:e7:dd:
59:92:3d:d8:8e:71:bf:cb:93:d7:21:0b:a8:8d:69:d2:03:52:
40:33:c3:2a:11:87:27:1a:e3:a5:aa:73:a3:1f:81:11:be:29:
19:e5:30:e4:09:6e:20:f7:14:a3:56:e1:60:2d:21:e1:5e:9d:
d7:1d:11:d2:45:78:ac:83:f6:f2:29:d4:26:44:06:9f:7a:a0:
a0:58:03:fc:9f:ad:c4:5a:9f:fa:88:69:07:93:3d:bb:c7:5b:
26:e9:18:e9:80:53:e3:b0:7d:23:d9:42:f9:b1:67:6c:c2:7a:
d9:d1:cf:bf:fd:4f:d3:78:6a:92:35:df:41:b6:c7:1d:3c:cd:
0f:6e:12:c9:99:d6:83:0d:d8:70:bf:ca:99:ff:4d:c2:87:4d:
ac:35:6c:83:6c:9a:29:5d:03:21:f6:eb:88:79:e7:f4:55:99:
52:d5:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:18 2026 by rpki-client