Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
File: 2U8jjFx065p1pG4rxnQR6Nwi2YI.mft (raw, json)
Hash identifier: YYewzGYKpCqVPIi+70NCm4PabZXSTpvpfLvtNSNNF3A=
Subject key identifier: E5:2B:43:0B:4F:44:9A:32:95:48:2F:AA:73:33:42:9B:4E:BF:C9:C0
Authority key identifier: D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
Certificate issuer: /CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Certificate serial: 019D9962284D08D1CB066C98C41289B050BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 03:00:40 +0000
Manifest this update: Fri 17 Apr 2026 03:00:40 +0000
Manifest next update: Sat 18 Apr 2026 03:00:40 +0000
Files and hashes: 1: 2U8jjFx065p1pG4rxnQR6Nwi2YI.crl (hash: IpuiuHa8g+rcXpSv6LTU2Wi/X1fZp0Cg+x2yAwXF8qI=)
2: 2UPCFRYyOaCEOUtdZmUYxdw-WQE.roa (hash: QM7pJDrc503fpExXr4mMqAxNHN2VAXhAozwv2Gb8pXU=)
3: zvCrVq4GpGUBE37m7ZM3q3DEvk8.roa (hash: SgQbm5oNK1zxo7/T57EeuLpvE8Aw7Jxw0oduPoj3Mi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:28:4d:08:d1:cb:06:6c:98:c4:12:89:b0:50:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94f238c5c74eb9a75a46e2bc67411e8dc22d982
Validity
Not Before: Apr 17 03:00:40 2026 GMT
Not After : Apr 18 03:00:40 2026 GMT
Subject: CN=e52b430b4f449a3295482faa7333429b4ebfc9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:bd:f6:94:56:1a:78:01:55:ba:12:0b:37:
5e:4b:1d:5c:7b:40:a4:8c:71:2f:d1:ec:a3:26:2b:
55:b0:ca:ae:20:04:e4:f6:7a:06:f7:1b:69:5e:41:
ec:87:d9:02:76:05:69:ab:e1:d7:e7:19:c3:43:8a:
ea:fd:d1:a4:53:c3:7b:b8:8f:9a:c4:a3:5b:30:b3:
39:13:8c:09:a4:f9:73:48:da:21:6e:78:8c:d5:8f:
51:6a:1e:76:9e:0e:cb:9c:33:7a:ba:53:7a:b8:38:
f7:39:f8:ff:e3:ea:d4:db:40:20:da:55:26:48:73:
52:4c:4b:d6:14:71:d7:89:aa:86:86:42:d6:31:ff:
db:90:ce:17:78:b8:78:5c:2e:17:1a:9e:fa:5f:40:
3a:88:01:f3:70:28:27:96:10:e8:3d:6d:03:f0:c5:
9c:e5:00:8c:1d:1c:f0:8e:b3:a2:8f:cb:eb:60:82:
da:f5:1f:a6:88:c3:06:02:f1:c8:e7:e2:52:ae:29:
d8:d5:96:18:42:4c:2d:91:4b:63:39:b8:73:10:e9:
09:42:8b:d1:7f:9b:b7:20:74:75:a2:b2:db:95:87:
84:7c:2c:c0:3e:41:ce:b9:b9:f9:fb:67:4a:b0:3f:
4f:31:9a:5a:1d:14:7f:77:da:02:60:90:6e:d2:9e:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:2B:43:0B:4F:44:9A:32:95:48:2F:AA:73:33:42:9B:4E:BF:C9:C0
X509v3 Authority Key Identifier:
keyid:D9:4F:23:8C:5C:74:EB:9A:75:A4:6E:2B:C6:74:11:E8:DC:22:D9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2U8jjFx065p1pG4rxnQR6Nwi2YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d9d9b6-c3be-4c5d-adea-4bc84c79fc58/1/2U8jjFx065p1pG4rxnQR6Nwi2YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:09:5e:19:d2:9a:70:d5:83:3a:f8:2d:33:a3:fe:80:b3:75:
37:3b:44:02:bb:18:4e:06:6d:cf:d8:1d:66:30:fc:e7:bd:cc:
e0:cf:14:9c:62:01:2b:de:d6:d0:c1:dd:21:57:76:78:d5:fb:
1c:44:67:9f:0c:3f:5d:7b:25:a8:6b:2d:39:7f:64:98:7a:46:
e0:5b:7f:f2:83:1a:60:45:7d:b9:3c:31:42:17:04:e0:c8:cc:
19:14:3f:84:2b:d1:c4:c9:24:6b:fb:77:9e:fb:1b:31:36:f9:
20:8b:0f:63:a3:6a:90:a0:ed:63:c7:32:43:f1:36:03:39:f3:
12:aa:02:d5:44:f5:c2:31:33:38:a6:93:4e:85:2f:48:65:7b:
ca:7b:aa:15:d9:98:48:a2:84:c7:6a:d0:2c:98:d6:d9:7b:85:
75:da:15:e4:97:48:33:34:0e:3d:6d:c7:6f:7b:c7:8f:8a:3d:
01:14:76:93:3e:95:c5:df:bc:17:99:ff:8c:be:9f:3e:6d:90:
cb:7f:95:49:00:4e:9e:98:fe:25:60:a9:97:33:e0:e6:a0:37:
39:e2:6a:83:ac:7a:7d:38:df:a3:39:fb:8e:ea:09:9f:69:ab:
36:d8:e4:aa:cf:1e:cf:65:c9:84:53:6d:20:d4:38:11:a2:9b:
15:aa:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:32 2026 by rpki-client