Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
File: 2qwVt4K8MnR7U43sKiIkFs1oSCU.mft (raw, json)
Hash identifier: QrOE15vmo28V5N/ZhIIifErwCQy3v4pJMeviZgvcaSg=
Subject key identifier: 82:C3:12:35:01:02:5C:B2:85:83:76:5F:F2:6C:70:A2:F5:F1:66:C9
Authority key identifier: DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
Certificate issuer: /CN=daac15b782bc32747b538dec2a222416cd684825
Certificate serial: 019D9819005628577496A3ECF72508AA54B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 21:01:08 +0000
Manifest this update: Thu 16 Apr 2026 21:01:08 +0000
Manifest next update: Fri 17 Apr 2026 21:01:08 +0000
Files and hashes: 1: 2qwVt4K8MnR7U43sKiIkFs1oSCU.crl (hash: iQ0dr61DfVA+abOMzr5AZtQbbWBmUQtz9SWJB2dAkro=)
2: UDdtWtEx2c-mJVngKL09z-S1X_w.roa (hash: n8+XH3U5jIdTXKGtH/veEO5lPUmQphGGe2oVJecsaes=)
3: j--iZbKhUiVMwHzwORmmbSJgzjo.roa (hash: mVRAagqN+1SfRIHh7+tr93Mf4bRCPwynY5hRmiuICa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:00:56:28:57:74:96:a3:ec:f7:25:08:aa:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daac15b782bc32747b538dec2a222416cd684825
Validity
Not Before: Apr 16 21:01:08 2026 GMT
Not After : Apr 17 21:01:08 2026 GMT
Subject: CN=82c3123501025cb28583765ff26c70a2f5f166c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:6d:1a:34:fd:f2:c8:d7:c5:27:32:a6:a6:
ae:c4:cb:eb:1c:7a:25:cf:c3:e6:97:28:b2:a7:1d:
8d:ae:86:45:f1:fa:2b:ba:ab:c3:98:fe:f2:1b:27:
1f:c3:16:8c:7c:68:93:5d:cc:ed:59:f0:a8:be:3a:
16:6d:f9:2e:7e:47:44:74:4f:73:e8:b8:1c:10:26:
ee:6a:77:97:26:15:20:8f:5b:d5:e4:56:b0:76:19:
64:de:bf:dc:2c:eb:e0:70:f6:ba:68:59:7f:d8:64:
c2:22:0d:a9:31:f7:01:b7:c3:44:c2:e7:b9:ea:e7:
e6:07:ea:c8:df:64:a8:61:f8:cb:2c:c9:da:a6:d9:
db:2d:7e:5d:e4:62:c0:91:02:64:15:ad:85:24:4b:
69:73:dd:6c:5c:06:f4:fd:38:6c:88:76:98:50:e4:
ed:0c:45:51:06:0d:3f:a6:05:12:c9:c0:8b:82:42:
55:d1:0b:80:4b:ad:92:f5:68:85:eb:d3:ff:49:19:
57:4a:28:dc:f4:66:5e:1f:09:2f:f2:2c:3a:ef:28:
5e:4a:06:2f:30:1a:a4:2d:06:d8:1c:fe:1e:2b:7e:
1e:7e:47:59:4b:91:5f:dd:dc:4f:ff:f4:74:dc:94:
31:c9:29:be:ac:3c:e1:25:8b:ea:3a:5c:e4:29:60:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C3:12:35:01:02:5C:B2:85:83:76:5F:F2:6C:70:A2:F5:F1:66:C9
X509v3 Authority Key Identifier:
keyid:DA:AC:15:B7:82:BC:32:74:7B:53:8D:EC:2A:22:24:16:CD:68:48:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qwVt4K8MnR7U43sKiIkFs1oSCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/56f2e9-72aa-4a41-8946-182432a96dbd/1/2qwVt4K8MnR7U43sKiIkFs1oSCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e0:58:eb:0a:6b:df:53:74:76:46:d5:23:1b:4a:31:c6:5a:
a1:7e:9a:0d:47:ac:83:70:c0:e0:6f:a2:d7:ba:92:55:50:81:
9c:c0:b7:a4:4e:5b:28:11:4d:a4:79:89:ea:72:0b:03:07:9d:
c3:d3:1e:dd:ed:ca:07:ca:e1:59:7c:65:28:16:39:00:8f:e9:
d7:fa:a1:36:03:1b:53:b6:ba:8a:59:b9:e5:31:3d:b8:2b:c2:
db:9c:b1:e5:07:1d:ca:28:72:60:a4:58:ea:3d:d2:27:c7:19:
cd:23:a3:90:d2:8e:5a:94:d7:29:7e:27:e4:55:73:ec:51:9d:
cd:0c:71:1b:d6:b4:1c:9a:51:fe:c4:e4:15:5c:30:c4:3b:dc:
47:b5:4e:f9:76:59:6f:37:be:3f:20:43:ff:0e:a3:2f:73:86:
ea:f6:ff:fe:d8:2e:ea:8d:cd:5b:ad:9f:bd:ca:d1:74:fd:dd:
bc:7a:21:20:5b:cb:d8:88:2b:ee:8f:bb:32:2d:fe:d9:bc:dc:
5a:40:65:95:0a:f0:ae:2f:aa:47:b9:aa:6f:bd:46:0c:f1:01:
bc:26:25:8f:00:c9:94:b2:5e:47:e4:cc:33:6b:58:48:ac:72:
99:7f:77:13:10:2b:17:c9:fd:17:f4:26:e1:c1:e4:33:2a:d5:
2e:ad:2f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:42 2026 by rpki-client