Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
File: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft (raw, json)
Hash identifier: V0ZoPihYHCx+NDk36pc8kcaPRz1LcK/sJvWVEMkT2HE=
Subject key identifier: 0B:D6:B7:7E:7C:71:C1:81:3B:E9:F8:22:B2:F5:DB:04:31:45:87:48
Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224
Certificate serial: 019D97E1FE88A8E0D8E54D8D9C28C591D0AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 20:01:03 +0000
Manifest this update: Thu 16 Apr 2026 20:01:03 +0000
Manifest next update: Fri 17 Apr 2026 20:01:03 +0000
Files and hashes: 1: 1LWZZOwIVksOEqA3t1p1E5yKrbk.roa (hash: OwPK45NthsXIz7j/9BbdI2UVojWHpISnd2scPcpKEVU=)
2: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (hash: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow=)
3: RR77_TZWFm2zN09tkZTb-aJWQ-g.roa (hash: cAzRaMhGElLRCS7w5moSCJqvr37/rS0oJQ36ENwyvTc=)
4: cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl (hash: /5GyFKRoiorq3sSq5IsE+L9ZF2RrFxwXFuo28nXcXC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:fe:88:a8:e0:d8:e5:4d:8d:9c:28:c5:91:d0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d64134faa746293c0384edac0371950f3b224
Validity
Not Before: Apr 16 20:01:03 2026 GMT
Not After : Apr 17 20:01:03 2026 GMT
Subject: CN=0bd6b77e7c71c1813be9f822b2f5db0431458748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:63:d6:f6:2c:95:4f:cb:d6:bf:92:63:20:
8f:31:bd:da:5b:b3:e6:8b:86:f5:d4:5b:b9:b6:02:
61:78:f6:cf:8f:82:4a:e2:d5:b3:08:3b:ab:bb:5e:
11:f4:a6:a9:df:e0:18:8f:cd:e4:44:25:e6:c8:fe:
96:4c:5d:4f:35:b2:73:58:f3:fe:a7:d5:c5:27:c4:
e3:9e:0f:f2:f9:5b:0f:bb:5f:5d:7d:d2:21:25:49:
19:61:e5:51:8c:45:37:f1:fa:31:4f:74:82:dc:36:
b2:dc:28:0c:85:60:42:eb:70:db:f6:45:67:3a:cd:
da:1f:48:0e:37:f0:93:22:58:49:04:d4:d7:1d:61:
3f:6b:28:8c:b8:09:03:d3:93:c0:47:c1:e9:3a:b0:
04:c3:06:cc:d0:5e:5e:a2:85:8a:47:16:6c:94:bd:
79:23:b4:ca:bb:65:47:6f:80:a8:9a:51:eb:13:04:
88:a2:e6:c5:d6:b8:bd:b6:80:fc:95:9c:7a:9f:7d:
54:f5:6a:9e:50:97:3d:be:c3:b8:eb:08:cd:9e:c4:
5b:68:6e:0c:5a:63:a7:16:a2:3c:5a:f3:44:ed:6a:
f0:79:f5:82:b1:bb:7c:a8:4f:c2:7c:b1:9e:0a:ec:
6c:2b:48:5e:9c:67:c1:ec:f3:72:13:76:18:a5:dd:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D6:B7:7E:7C:71:C1:81:3B:E9:F8:22:B2:F5:DB:04:31:45:87:48
X509v3 Authority Key Identifier:
keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:22:24:af:68:49:20:a2:bb:b0:43:db:a7:7a:b6:e5:57:fb:
80:5a:f3:03:ec:76:53:af:fc:54:a2:d6:59:47:3a:c6:12:63:
9a:5a:d8:fd:6c:f8:1b:e0:d6:c2:f9:ab:10:24:5e:89:62:c8:
05:e2:9a:58:09:7b:ee:ab:b5:65:e5:6d:1f:51:5c:ac:d9:0d:
62:8e:ca:02:b9:e6:74:26:9f:d6:c6:59:8e:84:e2:c1:78:c1:
29:51:c7:ec:fa:20:f9:30:a5:d4:13:ce:10:2a:42:85:90:14:
82:a4:99:0c:9d:28:f5:34:2a:4b:47:aa:9c:57:bd:44:3e:63:
89:07:a4:71:83:8e:81:76:da:4b:22:4b:52:2d:b9:79:82:23:
3b:fd:e9:4e:18:16:6b:dc:58:ec:22:d8:ec:0f:cd:1a:45:07:
91:26:34:1d:1d:d5:6d:7f:e6:a8:b1:87:ce:fb:61:e1:0a:ef:
2c:45:31:ed:10:3c:fa:85:e4:d8:4c:1a:5a:a1:9c:10:00:5b:
89:c0:fb:d2:8c:af:8a:2e:99:31:de:21:d6:64:7e:70:69:d8:
8d:b9:19:d0:ba:24:f6:d2:5c:97:89:c7:80:4d:75:e2:16:a7:
f7:1e:d6:67:44:4c:85:63:04:ec:37:f2:6a:2d:f6:4e:7a:23:
75:0e:5f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:35 2026 by rpki-client