Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
File: cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft (raw, json)
Hash identifier: Hytv0PQ19QFp8R3Z1nGXZPoU0HFIVhivDAJQQrVh43c=
Subject key identifier: 6D:35:2D:A2:D9:58:ED:C3:AA:28:C4:80:73:71:2D:11:53:60:CE:61
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 019D98BD9E344C2D1DC806B9DA5227AC667B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 00:00:56 +0000
Manifest this update: Fri 17 Apr 2026 00:00:56 +0000
Manifest next update: Sat 18 Apr 2026 00:00:56 +0000
Files and hashes: 1: BYGANzLgHzSaUc6K7ae41nnbLMw.roa (hash: AJMi9HENlmzpAiYF/4FsTemXgQje3J6PHtaGAU4r+0I=)
2: cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl (hash: JMynEFRcE15Kw3iLlFlqQrMVqirnP39M+/hnCrO0rcI=)
3: d0cD2OQNwvBbl6ZoayOyhKGW84E.roa (hash: 0hRHMR3AECHRvpDLm6VnO82EHkZj8wfWxDmhhkfMCS8=)
4: nTbT18OCDUNW4azZC3MKOG8N8oE.roa (hash: ShlwcG/vZJL5OcI4En0cgO+lRO+Afw70u3xxHsMil/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:9e:34:4c:2d:1d:c8:06:b9:da:52:27:ac:66:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Apr 17 00:00:56 2026 GMT
Not After : Apr 18 00:00:56 2026 GMT
Subject: CN=6d352da2d958edc3aa28c48073712d115360ce61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:80:e0:fc:6e:dd:b9:f6:c9:2c:f3:a7:04:e3:
25:c0:41:ed:01:07:ca:9e:fb:9e:58:e7:37:a0:0e:
cd:5c:53:e9:d7:6b:31:38:bb:96:99:97:af:b6:1b:
5d:6c:ca:4c:d5:f3:87:4d:d2:76:18:1e:92:3e:d7:
9d:31:6d:8d:2e:14:05:cc:d8:83:1d:ac:bf:96:fe:
3f:50:73:0e:bd:1c:ce:55:69:69:a6:33:d9:ff:c4:
a0:1e:cc:1b:3f:df:61:b0:ca:79:ed:80:6a:94:47:
9c:d5:c4:b2:d0:56:7f:85:67:c0:0c:a2:6e:4c:c6:
92:70:7d:b0:e5:1f:91:7f:97:5a:19:69:ff:c3:44:
0a:7f:09:19:33:2f:51:99:a5:a3:84:12:cb:c0:cf:
6d:e8:ed:3e:75:d2:d3:3a:d4:29:8e:e2:e5:20:74:
0e:a0:a7:17:bd:c8:61:7e:81:2c:50:5a:bc:93:74:
8d:74:f0:07:82:9a:b4:d6:51:3b:e0:a4:d9:35:0e:
75:2a:58:45:01:db:9e:2e:1c:96:01:06:ab:2c:1a:
11:a9:30:b7:86:45:a9:c1:e6:03:e8:5c:39:0b:97:
90:cb:9b:a8:39:15:be:6d:68:08:d6:48:14:bc:6c:
06:e3:87:a9:22:54:3b:38:16:94:b1:7d:a1:cd:98:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:35:2D:A2:D9:58:ED:C3:AA:28:C4:80:73:71:2D:11:53:60:CE:61
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ae:65:a6:fb:06:18:33:f0:b8:b8:02:cf:7d:25:0d:f2:aa:
f9:6e:43:c5:01:e1:b7:e7:87:39:ef:d1:26:3e:fe:42:4d:53:
cb:4b:73:8a:ce:f2:e8:40:87:68:1c:24:79:ad:f1:cd:b1:78:
74:c3:d7:4d:dc:81:56:cf:f1:63:38:e7:d4:ed:82:36:8f:10:
3a:af:f2:e5:77:6b:da:c9:2e:f0:0b:f4:13:4a:27:e2:b9:03:
86:ae:57:8e:41:13:93:be:af:bd:42:c6:58:f5:fd:62:b8:2f:
9e:c2:91:91:f1:37:45:7c:ee:09:b8:73:18:e7:3e:80:e7:72:
9e:c1:9b:7c:f5:79:de:50:ae:d2:fa:6b:48:b8:c0:c4:81:aa:
3a:f2:03:89:b3:da:95:c5:87:8a:03:3f:a4:43:9d:2b:29:4f:
c4:14:1c:f4:d1:34:b8:85:27:79:34:02:cb:10:07:ef:52:f0:
cf:59:31:fe:e2:d2:ad:22:15:a4:e4:82:89:b4:ce:c9:82:7f:
f7:3c:84:21:6c:b1:e8:2d:d8:db:90:4e:90:a0:18:9c:15:04:
f2:8d:06:f7:5b:1d:bd:a1:ee:d4:cb:f8:78:b8:64:41:e3:02:
ae:a2:a3:b9:2e:f0:89:59:52:a5:21:f9:c2:ee:98:02:04:76:
21:d0:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:08 2026 by rpki-client