Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
File: RbmFSwRFlObPCEb7Qd57CQj7X3I.mft (raw, json)
Hash identifier: XHxCRF9LdE3EFxkNMB7depcE6I77WRUGTC1tMGuGTBw=
Subject key identifier: 80:B8:15:A5:1B:31:47:41:B7:D3:B2:86:1D:9E:9E:C9:25:5D:73:EF
Authority key identifier: 45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
Certificate issuer: /CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Certificate serial: 019D98F474F3024EAC9A09BA1736FE4E88F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 01:00:50 +0000
Manifest this update: Fri 17 Apr 2026 01:00:50 +0000
Manifest next update: Sat 18 Apr 2026 01:00:50 +0000
Files and hashes: 1: Hm9jDBLH-sqHFB-kWgpns9uuTu0.roa (hash: em9fSdCaWmu85DiyoLonhSdzPO36ZF77WoiFZ16jO0Y=)
2: RbmFSwRFlObPCEb7Qd57CQj7X3I.crl (hash: BKa8XnAgfCTRpZUHpN74f8YF3alF0WfNrlto+OqslBU=)
3: u-E8c_HIPJtAfwHxjdimDSR9iEU.roa (hash: Ssl8FJdCbKGVA9enj4PlMZpIMHgYMYA2rL+PziMx0XY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:74:f3:02:4e:ac:9a:09:ba:17:36:fe:4e:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b9854b044594e6cf0846fb41de7b0908fb5f72
Validity
Not Before: Apr 17 01:00:50 2026 GMT
Not After : Apr 18 01:00:50 2026 GMT
Subject: CN=80b815a51b314741b7d3b2861d9e9ec9255d73ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:58:1c:bc:5d:2a:18:69:1d:c1:8f:f7:98:13:
37:87:6e:34:81:d0:2e:8d:f1:43:73:5c:33:83:8e:
be:32:02:30:44:bb:95:7f:e0:2d:48:54:f7:53:3d:
b0:a6:3d:f6:c4:40:ac:eb:66:e8:b6:3e:bc:a8:4a:
2e:5a:e6:46:d9:1f:68:df:2b:61:58:dc:16:63:42:
43:8d:1d:84:98:28:2a:b3:8d:50:3e:62:02:c3:dc:
79:0f:1e:ba:db:35:eb:78:e4:5c:81:f7:89:79:7e:
09:8c:81:7d:4d:7f:07:cd:87:7c:87:ba:38:d5:27:
25:e1:a4:38:03:c1:c5:2c:c0:6b:2c:4e:c6:f5:bf:
57:16:ff:14:33:44:a9:35:92:4e:b1:bb:5b:3f:8b:
a5:96:ff:9e:18:72:73:e2:2f:3f:30:a7:5e:9f:0a:
d5:d6:af:04:e0:ae:09:99:20:a3:03:ec:86:9e:f2:
30:10:44:66:aa:1c:67:28:87:98:df:37:32:89:fd:
7b:43:7e:6a:11:09:8a:8e:b6:7e:de:a6:8e:26:12:
18:60:df:0f:2d:c7:cd:58:8f:4e:8c:20:63:5a:3e:
69:53:92:42:7f:5a:2d:f0:b6:dc:18:fe:aa:97:f1:
71:aa:fe:3a:8f:76:9b:6e:27:b4:ea:e4:aa:23:d2:
5e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B8:15:A5:1B:31:47:41:B7:D3:B2:86:1D:9E:9E:C9:25:5D:73:EF
X509v3 Authority Key Identifier:
keyid:45:B9:85:4B:04:45:94:E6:CF:08:46:FB:41:DE:7B:09:08:FB:5F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbmFSwRFlObPCEb7Qd57CQj7X3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5e6116-56e6-4c1d-9683-4b22fc5184a2/1/RbmFSwRFlObPCEb7Qd57CQj7X3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:48:39:8e:4f:24:f1:20:ce:f3:fa:d0:26:c8:c4:db:6b:82:
6e:0c:84:e5:30:02:da:8c:cf:88:51:0d:3a:6a:9b:bb:68:9c:
ba:7b:59:cb:0a:a8:89:23:a5:9e:ac:a5:f7:84:11:46:e8:44:
b6:7d:f8:16:d0:f3:e0:c0:cb:d6:20:f1:85:24:c1:b1:14:d4:
79:6f:76:31:e7:15:7f:62:0b:93:88:19:fb:5d:69:19:4e:91:
80:b7:5e:3c:b9:dc:3e:5b:a9:d1:c8:6e:4b:5a:83:5b:dc:41:
e4:c8:a4:c0:5d:3a:46:03:92:21:46:b0:b2:89:16:38:3f:52:
5a:f1:71:da:fd:11:53:12:d4:08:db:70:6d:95:85:c5:bf:00:
f7:b9:79:70:fd:81:b1:1f:2e:ca:0f:33:40:5d:6d:e8:ab:81:
0e:09:b6:ec:23:f6:fa:7d:60:9d:4f:9a:cd:bd:ef:f8:6b:ce:
2c:96:df:6d:9f:a7:eb:01:64:c7:be:0f:0c:be:27:9a:98:10:
35:d0:37:83:99:2d:25:c3:62:ba:3e:ce:34:65:b1:80:f9:01:
e5:d7:cc:a2:9f:08:bf:30:7b:6c:14:57:04:d9:84:59:b0:3a:
46:7b:24:51:f1:ba:7f:be:64:b4:28:d3:70:3a:d1:93:d6:37:
6d:eb:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:31 2026 by rpki-client