Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: BFX77Gri9JM95xz8ChEAmWdtnMcrPXsGGdt8gLSAlRY=
Subject key identifier: 7A:13:BE:C2:5A:1B:99:10:E3:7F:AF:07:9B:2C:10:6A:4F:80:70:3F
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 019D9998FDDAA8D841EA2E98371B17D3562D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:00:33 +0000
Manifest this update: Fri 17 Apr 2026 04:00:33 +0000
Manifest next update: Sat 18 Apr 2026 04:00:33 +0000
Files and hashes: 1: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: MeAfAOLObtjHtQ/NhrTucTCWzBY3BfylM796084DZdY=)
2: mQsjU1zOjVRO_u3D1WDC_GA_q4U.roa (hash: 4af//0/sTljaocW55fj5PkOIaVuuWa8S7DrXdP1GzbU=)
3: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (hash: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:fd:da:a8:d8:41:ea:2e:98:37:1b:17:d3:56:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Apr 17 04:00:33 2026 GMT
Not After : Apr 18 04:00:33 2026 GMT
Subject: CN=7a13bec25a1b9910e37faf079b2c106a4f80703f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0c:6a:17:b0:6c:06:f5:9b:cb:c5:98:67:75:
e4:e3:06:8b:8d:c9:9d:81:c3:14:4d:f5:79:9b:a3:
73:3f:e4:59:c5:40:79:42:e3:ce:31:7d:17:15:7d:
d3:55:fd:5c:7c:f7:52:7c:f0:d6:1e:de:13:d6:e9:
ea:29:7f:0e:c7:b9:9c:63:6d:88:c8:f7:77:9c:b6:
3f:dc:39:79:ba:b0:7c:8f:49:d2:12:d2:41:a0:e1:
8f:f3:8d:18:9c:55:fc:42:fa:5f:42:64:9b:80:60:
87:39:2d:2f:81:ae:ef:c4:2b:ea:f6:20:3b:ff:77:
55:7e:bd:1a:8f:56:e6:6d:60:3b:c7:82:34:2e:2d:
32:5b:53:2e:71:87:0f:12:9d:87:32:e0:01:d2:5f:
cb:09:6f:44:23:b2:7d:fb:d3:e7:3e:07:cd:6f:f9:
68:91:0c:0a:45:91:62:58:4f:d9:78:aa:0f:4a:a7:
f7:1f:41:39:c2:53:01:0e:1b:3c:4c:bb:63:2f:85:
29:b2:66:db:18:ff:52:f5:18:34:af:8f:5d:5a:f3:
49:78:55:ca:28:4d:7b:6b:35:0d:94:0c:ce:a1:7b:
75:ba:6f:c2:1f:53:14:11:eb:dd:6c:96:c6:de:f5:
a3:3f:0b:dd:00:4f:39:d6:ec:ae:aa:ca:61:d9:e4:
df:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:13:BE:C2:5A:1B:99:10:E3:7F:AF:07:9B:2C:10:6A:4F:80:70:3F
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:68:52:93:f4:48:81:f1:e6:61:29:c2:4c:71:3c:53:a0:c4:
49:91:3f:e4:49:5d:eb:b8:5e:62:30:4e:b6:e7:fb:cd:88:d4:
50:b2:50:a1:41:26:c5:30:8c:59:4a:b1:e1:c8:21:4a:f7:9f:
1e:5c:e2:88:b4:1b:45:e8:d6:1f:d5:45:67:c1:ef:b3:6e:41:
99:5a:5f:03:c0:5e:bb:2a:2c:21:8f:0c:c5:84:18:6f:d8:8b:
de:66:0d:32:f1:d5:d6:f7:cc:a8:46:79:59:9b:34:97:09:75:
30:74:16:4d:27:f6:0f:ad:03:44:54:c7:9c:43:75:45:83:43:
44:1c:9a:89:46:b2:d6:3b:dd:c0:49:de:6c:bb:8b:a9:a3:6d:
98:9e:bc:9b:3b:52:d3:3e:9a:38:35:4b:b6:66:d9:55:7b:83:
7f:7d:c9:24:c3:3c:01:74:be:f7:77:ec:3e:eb:9f:1e:1e:ef:
eb:11:45:c1:b5:68:20:0d:2c:9f:c0:c2:06:6c:b0:cf:81:90:
f8:eb:42:a8:f6:b4:4c:15:43:c2:6c:a5:37:97:54:2f:07:11:
5d:bd:fd:ba:e1:7f:c9:09:b9:45:c2:10:7d:c7:07:8c:e4:ee:
c8:6b:99:35:e3:8b:c4:3b:aa:e5:30:59:c7:5a:45:7c:cd:c9:
9b:fe:f1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:28 2026 by rpki-client