Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: hu0lpeqEvbIT4LJALRpiMQJUjtEVy7mGN5VWh+27LS0=
Subject key identifier: 67:76:73:0F:F9:05:47:F1:95:C2:03:3E:37:79:B4:08:78:BA:BC:BE
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019D98866F69B1C7BCE2C700F0F6D7382D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 23:00:40 +0000
Manifest this update: Thu 16 Apr 2026 23:00:40 +0000
Manifest next update: Fri 17 Apr 2026 23:00:40 +0000
Files and hashes: 1: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: 9eSTLMG58kqW1C8qPsVrGDSgwqK7gnbPztYoRWRlY3M=)
2: CmZEd0vYTRTietCa6o94aYFKsyA.roa (hash: ms87/QO/xJdnl8jsldWQGZIky2TSGhb/sj+KQCKOeWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:6f:69:b1:c7:bc:e2:c7:00:f0:f6:d7:38:2d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Apr 16 23:00:40 2026 GMT
Not After : Apr 17 23:00:40 2026 GMT
Subject: CN=6776730ff90547f195c2033e3779b40878babcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:b9:e6:6e:05:aa:94:90:94:55:5f:e3:25:
13:fa:43:f8:63:ab:b8:14:ca:97:45:7c:d0:b1:e1:
43:8f:3f:c0:cf:43:67:5a:04:69:5b:16:6b:d1:75:
1c:8d:8a:38:e3:dd:2f:fa:49:29:17:82:73:e3:7f:
24:5f:80:6f:92:60:2e:45:de:80:3b:27:a3:78:7a:
60:26:93:69:f1:a2:47:fe:27:af:a4:55:3e:85:41:
50:a6:d4:98:f3:8a:21:47:b4:16:3f:87:80:e3:89:
61:69:de:cf:ea:d6:7c:b3:98:ba:c4:d6:f6:92:2c:
17:9d:63:55:93:cd:3c:84:3a:ad:3b:d4:67:a8:a4:
f0:2c:97:4e:f5:c4:6e:56:3a:fd:f3:24:69:91:70:
94:4c:0b:14:19:42:c6:ca:e8:58:31:9c:88:42:17:
da:2a:48:e4:43:2b:9b:7c:cc:01:d3:d1:b6:f2:83:
f3:11:a5:cf:ba:d2:d8:da:f1:4e:b2:37:cf:c0:1d:
f3:33:89:05:c6:d7:c5:80:db:4d:e5:f4:c5:2c:2a:
08:3a:a8:3d:76:d1:5d:8a:78:ee:13:45:6a:4c:41:
ef:9e:4f:06:a2:21:36:9c:16:0f:f8:f9:1d:ab:28:
6b:c2:c0:e9:10:c0:03:1a:65:48:61:a3:b1:d6:0b:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:76:73:0F:F9:05:47:F1:95:C2:03:3E:37:79:B4:08:78:BA:BC:BE
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c3:25:5c:c1:b6:ef:1b:95:58:b6:dc:82:ff:c8:be:4f:06:
2e:14:44:93:41:ba:6b:3d:db:d9:a8:dc:20:26:d6:b0:d4:1c:
13:53:d0:12:6e:8a:21:ab:c5:eb:4a:14:ba:47:1d:96:94:57:
0c:58:d1:86:31:0e:c4:f6:49:8a:d3:69:b4:17:0f:83:c1:18:
7f:da:46:ee:98:46:2a:15:52:14:26:2f:cc:df:8c:33:31:77:
73:e3:db:e2:82:e9:57:93:0e:07:55:cf:0d:ee:30:b4:3b:ce:
b7:eb:a5:d9:4f:72:ad:86:70:57:36:a8:36:f4:71:46:6b:ac:
a2:a2:2f:d0:3c:d2:94:9d:61:5e:b3:3f:b5:d6:05:92:06:9b:
a7:ce:40:46:4d:e1:f3:8e:ed:c2:91:5b:64:05:3e:5a:f9:52:
e2:98:52:61:95:60:a5:14:33:b3:76:12:a4:9c:16:15:59:11:
cd:48:3b:d7:6a:d8:c6:b8:e2:ef:2c:3b:01:ed:cb:d1:b7:e6:
65:b7:e7:13:36:d5:80:56:f0:10:78:02:52:9e:ab:1b:13:d2:
48:50:98:b5:15:6b:7f:2f:f3:d5:91:20:8e:68:cd:dc:62:c8:
77:db:45:ce:a5:ba:b8:ef:b0:c2:63:91:97:5f:c0:35:97:d1:
39:db:f0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:04:16 2026 by rpki-client