Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
File: sG9AQEkaZW_3Um0vF2EbDWisvQw.mft (raw, json)
Hash identifier: 8Xip0em4S/8zaqMsniQ2b//4XQKfspkDarRerzYySxs=
Subject key identifier: 4C:CF:B1:BC:75:80:F6:B6:F0:2E:5D:22:42:19:E9:48:A7:85:F7:EA
Authority key identifier: B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
Certificate issuer: /CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Certificate serial: 019D97E17A1CF30EAF80B44567116807CA20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 20:00:29 +0000
Manifest this update: Thu 16 Apr 2026 20:00:29 +0000
Manifest next update: Fri 17 Apr 2026 20:00:29 +0000
Files and hashes: 1: PP8v4ZF9LqDHcTW_KE_ttdsGemE.roa (hash: WpVmL0psb7bfXQaqzyLO36WcvKirINpjSx0F9NsCq+M=)
2: sG9AQEkaZW_3Um0vF2EbDWisvQw.crl (hash: f89SdVPMy/9YH9TInNRVPRSBRNpNdutfiN64HJTA50o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:7a:1c:f3:0e:af:80:b4:45:67:11:68:07:ca:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b06f4040491a656ff7526d2f17611b0d68acbd0c
Validity
Not Before: Apr 16 20:00:29 2026 GMT
Not After : Apr 17 20:00:29 2026 GMT
Subject: CN=4ccfb1bc7580f6b6f02e5d224219e948a785f7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1f:68:7e:66:ea:ba:37:e6:ce:b1:b7:4b:9f:
31:e3:83:ba:d8:4c:4c:e2:56:2b:ec:58:b6:54:74:
87:28:d4:0a:ac:48:73:bf:23:19:4e:4b:fa:c2:5b:
07:7c:ad:99:0c:3c:6b:c1:25:b1:e0:84:1f:ca:24:
c7:c7:ae:5f:20:3a:ff:03:df:5f:7a:e8:3e:a1:14:
23:9e:52:92:d0:94:be:38:89:b3:a1:9f:a1:7e:45:
45:14:16:8d:56:57:fe:15:0c:0d:6d:6c:6d:b6:b3:
c3:8a:1b:6b:91:e8:64:9d:a7:81:d4:ad:18:f1:6c:
4b:1d:db:1f:90:06:72:8e:7f:aa:62:73:32:cf:85:
ba:0a:99:c6:40:ad:11:2d:39:5e:47:aa:3c:e7:c1:
98:a3:1f:bd:2f:b9:dd:7e:a9:a0:c6:5f:95:e4:b5:
6b:23:a9:50:0e:c2:04:92:0f:96:70:52:ac:ea:a0:
ef:ee:31:0f:e2:8e:22:6f:cd:b4:0e:f8:66:13:78:
55:7e:8e:87:9c:c8:2c:86:7c:a1:97:fa:f3:13:2a:
52:be:a6:10:8c:97:0e:e8:3e:85:00:12:43:23:b7:
8e:87:11:4c:4c:05:5d:df:66:c3:95:3f:ff:ad:d8:
e9:12:5e:95:71:d4:c7:cb:d6:de:32:ba:65:84:df:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:CF:B1:BC:75:80:F6:B6:F0:2E:5D:22:42:19:E9:48:A7:85:F7:EA
X509v3 Authority Key Identifier:
keyid:B0:6F:40:40:49:1A:65:6F:F7:52:6D:2F:17:61:1B:0D:68:AC:BD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sG9AQEkaZW_3Um0vF2EbDWisvQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ce0b21-d65c-42e6-874b-f4cb867f90d8/1/sG9AQEkaZW_3Um0vF2EbDWisvQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:b4:cb:9d:c9:e1:5d:61:65:6f:b2:57:a4:a8:44:02:60:a3:
bf:67:bf:38:ce:4f:bf:c7:3b:e2:48:13:eb:10:50:c3:21:5b:
51:b2:d0:82:ce:de:52:6e:ba:a7:f9:7b:e5:56:4d:1c:aa:91:
5f:52:1d:95:73:c0:f9:6f:a9:b2:91:30:94:1d:f1:5b:86:d9:
fd:8f:90:07:49:c8:b5:06:37:c3:d8:14:24:9e:32:d0:1f:5a:
d5:0b:41:f4:f7:1b:78:ba:0b:ed:bf:53:de:12:70:94:8b:7b:
88:6a:0d:d9:2c:2e:73:22:85:2d:6b:1d:05:9e:0a:d0:a7:0f:
d7:5b:59:0a:26:37:c2:84:7a:c2:24:14:11:1c:46:81:61:e7:
1b:6b:53:aa:36:2a:a9:27:75:ee:ca:4f:2f:e8:91:ca:21:99:
b4:36:fb:54:f1:75:27:6f:2a:2e:fe:b2:7f:fe:d0:15:40:b8:
bf:bc:d1:23:3e:87:08:e1:6b:cc:7a:58:8d:0b:f3:59:3f:1f:
fb:0c:90:f1:1e:3c:dd:48:41:93:aa:76:89:17:b6:c3:f2:aa:
a4:82:22:ce:97:58:29:32:01:80:cf:79:7d:8b:cf:5d:72:7e:
6a:c7:8f:85:8a:ae:7b:27:b3:98:73:e0:9c:6c:71:e5:97:ae:
57:d9:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:14:52 2026 by rpki-client