Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json)
Hash identifier: RlSfRbe2RHNltdu4XrK0wqjkv34FTKCm1T/tMBZXjGA=
Subject key identifier: 60:16:E3:57:4A:7D:B8:AA:3A:BF:A2:FB:80:44:FF:00:BB:8C:6E:A2
Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9
Certificate serial: 019D9962469B0C3C1B023E9FD67F3FFC671E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:47 +0000
Manifest this update: Fri 17 Apr 2026 03:00:47 +0000
Manifest next update: Sat 18 Apr 2026 03:00:47 +0000
Files and hashes: 1: ELCDYTv3WHzsKB02ZeWjPVSl8bs.roa (hash: 5NNB0UawGRF+n/YW9EFq+myT4uZRZ/4c2by4eferMo4=)
2: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: VfQ4ap90r4Jc/MRH4RXcw7YyLrZhUEWJWYVIAVikVFg=)
3: wntuteFp_hWVEVUhXXzIfGeZGYg.roa (hash: COpIba0jOKYphmoFlVevEYtGvAQbqGOdq7aV51RcCa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:46:9b:0c:3c:1b:02:3e:9f:d6:7f:3f:fc:67:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c835498f35199a1571964d855c3877751681ab9
Validity
Not Before: Apr 17 03:00:47 2026 GMT
Not After : Apr 18 03:00:47 2026 GMT
Subject: CN=6016e3574a7db8aa3abfa2fb8044ff00bb8c6ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:28:3e:c9:73:cb:f4:a9:43:be:99:40:3f:
17:3b:82:7f:d5:ba:3c:2f:cf:0f:49:ae:8e:5f:f5:
82:f9:67:42:cb:d1:9a:38:63:8d:ab:3e:13:41:7e:
8d:24:0a:5f:f5:eb:dc:48:bb:cb:3b:ce:b4:49:cf:
bc:6e:48:ac:18:54:95:d3:7e:73:c4:23:03:88:3a:
05:7a:83:ed:67:d6:45:07:0d:db:c7:28:cd:ca:e9:
7b:25:7c:04:4b:f7:a0:1b:92:d2:e1:ee:9b:7f:13:
b1:08:02:d8:8c:44:18:9d:3b:79:3e:c6:91:61:ec:
89:85:2d:a2:14:e1:86:a0:41:76:c2:23:99:9a:25:
58:29:ed:fc:df:5c:7b:da:ba:f2:86:cf:bc:d7:03:
d9:a4:76:51:43:fa:a2:f1:b1:1b:a3:71:2e:d9:dc:
03:10:1f:4c:48:41:62:2b:2e:3a:9a:d1:a7:c3:cd:
5c:44:97:de:49:4d:cf:31:3e:a8:5f:64:0c:4a:1b:
90:54:01:6d:b1:28:37:9d:6a:10:05:c0:c2:d4:ca:
d0:bb:a2:11:b3:9b:71:2a:82:65:36:b5:91:94:d6:
36:a0:b1:21:4f:33:d7:86:db:86:5f:8f:ea:62:e4:
9e:c5:6e:6f:39:a6:8e:4b:2c:ee:a2:43:49:ea:5a:
e7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:16:E3:57:4A:7D:B8:AA:3A:BF:A2:FB:80:44:FF:00:BB:8C:6E:A2
X509v3 Authority Key Identifier:
keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:cd:fe:d8:ba:3c:73:b5:79:d7:c7:74:31:37:bc:53:c7:af:
ba:01:0c:0d:52:dc:26:db:e8:72:42:9b:05:b7:bb:23:24:f7:
f0:3d:06:bb:89:ce:ba:62:59:2c:40:f8:0a:ed:69:5a:49:4b:
35:57:3c:8e:f9:cd:0e:59:2d:32:24:92:09:5e:bf:1e:0e:2a:
de:c3:83:b0:21:c1:63:df:00:fd:e1:51:15:de:5d:f4:b2:12:
8d:bb:42:ec:06:36:a3:ff:d2:88:66:6c:06:38:36:f3:4a:e0:
97:12:c9:2a:b1:f8:0a:00:6c:92:94:75:b2:da:80:e0:3b:6d:
c9:5f:39:08:15:2b:03:f9:8d:30:6a:ad:15:25:2a:f3:84:1e:
60:ac:a0:81:2d:5a:69:e1:89:91:70:33:cb:86:7f:f8:11:6b:
36:10:c0:de:0c:1d:1f:f1:15:28:fe:91:b0:8a:ca:4a:dd:0f:
10:81:2e:43:88:ae:b5:fa:32:99:36:e4:9e:09:f0:6d:7e:f3:
b3:e6:21:fd:44:eb:74:78:8e:6e:c0:88:63:0c:c7:cc:73:63:
03:4a:88:01:b1:1e:a8:1d:ec:ef:1e:a9:ba:98:2a:15:8f:40:
f5:72:95:39:bc:8c:d5:5f:60:53:22:df:a2:28:50:4e:97:bb:
1d:8b:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:56 2026 by rpki-client