Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: s5tc/wf2lHX+wp21OHrAcmmMb9o2rEPZvDtMORle8Lk=
Subject key identifier: B1:47:E7:E5:54:4E:42:48:5C:29:E2:79:D3:0A:49:1C:62:7E:D4:CB
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 019DA2D33CE5139C4E8E4D56D756B30BA8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 18C6
Signing time: Sat 18 Apr 2026 23:00:45 +0000
Manifest this update: Sat 18 Apr 2026 23:00:45 +0000
Manifest next update: Sun 19 Apr 2026 23:00:45 +0000
Files and hashes: 1: YeKyHo-fPzS0PXLTVc_ZhuOAnDE.roa (hash: JasqN/dFTwUl8qybymMvb6Z/5LOD9789U3Jts0vT2yw=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: qcMMJtsFLvWa/yX4SWszfdmSgnTqW9svD4QUtIwQZy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:3c:e5:13:9c:4e:8e:4d:56:d7:56:b3:0b:a8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Apr 18 23:00:45 2026 GMT
Not After : Apr 19 23:00:45 2026 GMT
Subject: CN=b147e7e5544e42485c29e279d30a491c627ed4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:13:8e:8c:43:98:45:f3:c2:8b:10:23:f7:18:
d6:67:8c:2b:17:4d:e7:6c:88:af:02:8c:05:90:e1:
d9:36:2f:75:0c:dc:fd:4a:30:a2:06:e2:e1:18:7b:
84:51:b1:41:27:5e:02:db:70:9a:c0:16:bf:93:fe:
ba:fe:40:93:1c:65:27:03:17:bd:0f:ab:7c:d4:3c:
ee:54:bf:b8:a6:47:d6:8f:31:4e:c5:b4:6a:22:e4:
b3:f2:2d:15:2e:72:a2:4c:b8:b3:4b:65:e6:b6:b5:
20:c2:d4:81:03:24:9c:d9:27:90:4e:d0:a4:14:61:
38:3e:5e:01:9b:76:7d:6a:86:d8:18:73:f5:6b:48:
1e:c5:5b:c8:d5:10:58:b0:14:d8:dd:29:22:33:c0:
ac:ca:70:51:c6:a2:fc:bd:40:6a:fb:7a:ac:5c:8b:
93:12:53:a6:9a:55:1b:95:9b:8f:2d:5f:5b:6f:7c:
cd:cd:61:40:ee:56:3a:23:f8:e3:2c:60:33:d4:4f:
47:06:14:fc:fb:4f:02:ee:40:15:be:ca:0f:6f:a9:
2b:1a:e0:b3:59:db:68:5e:e5:e0:4d:ab:d5:c8:ec:
1b:f5:48:68:a9:37:7f:aa:53:38:2f:cf:19:92:ae:
e9:61:ac:04:18:78:5f:58:19:2b:53:5f:a9:2f:ff:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:E7:E5:54:4E:42:48:5C:29:E2:79:D3:0A:49:1C:62:7E:D4:CB
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:16:05:d2:e1:81:b7:b1:d0:a3:3e:c2:67:e5:ca:d9:b9:02:
ba:fb:26:1f:6b:6f:a6:04:fe:7d:7b:fb:2c:bd:57:98:d5:1b:
63:0a:08:6e:e9:d3:8c:4c:5a:65:4d:2e:4a:d2:97:88:a1:0f:
6e:25:94:0c:61:e0:73:39:ee:3d:0d:ba:b1:1a:55:75:7a:02:
79:be:d3:24:78:99:22:67:c7:30:53:84:8d:94:49:69:fe:db:
da:cb:2f:93:2a:f5:01:f1:85:84:e4:bc:39:db:d2:57:44:98:
91:f6:53:83:a1:e0:68:d0:b5:22:48:09:6c:e7:35:62:2b:98:
31:ff:51:1d:b7:95:0d:cc:12:63:66:75:dd:80:3a:96:81:16:
83:6a:56:1d:66:06:1e:c8:41:0e:da:12:b4:c0:8c:fa:31:56:
3c:94:47:9a:4a:a2:b5:ce:8e:56:73:3d:2a:e9:1a:1b:a0:ea:
a0:f4:63:31:5e:06:6c:50:65:74:36:65:6e:b6:02:f6:68:3e:
ce:a0:e4:9b:ee:7e:a0:39:68:cc:ee:70:20:e2:be:e2:52:11:
7f:ed:13:76:82:90:97:d2:b0:af:ec:95:60:3f:33:b5:46:e4:
a4:fd:2e:7d:6e:2c:42:86:26:da:0c:b8:f9:a3:6f:3d:a5:b7:
7e:07:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:16 2026 by rpki-client