Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
File: No41oF8nB7WnQcKnL15Ls0ybCag.mft (raw, json)
Hash identifier: duD3KIRn8zMF+YbAzM9GkYyYzU85qkIxHUP/1RsAoFU=
Subject key identifier: 3E:D7:1C:9D:4A:06:CC:55:08:8E:84:6A:94:7B:BB:DC:7E:60:E4:9E
Authority key identifier: 36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
Certificate issuer: /CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Certificate serial: 019DA340C001041E07875D596A752E847E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 01:00:22 +0000
Manifest this update: Sun 19 Apr 2026 01:00:22 +0000
Manifest next update: Mon 20 Apr 2026 01:00:22 +0000
Files and hashes: 1: No41oF8nB7WnQcKnL15Ls0ybCag.crl (hash: lgrycwJbd3qVR3krEGWozvnRKfTjn8LeoYsOyxWvfPk=)
2: oDdOV619IIidVtQMM95kbm0cDIM.roa (hash: 2Y37aAuGl7F6czPU7t6gdZkIffZAHGFmwGBIrR4PFQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:40:c0:01:04:1e:07:87:5d:59:6a:75:2e:84:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368e35a05f2707b5a741c2a72f5e4bb34c9b09a8
Validity
Not Before: Apr 19 01:00:22 2026 GMT
Not After : Apr 20 01:00:22 2026 GMT
Subject: CN=3ed71c9d4a06cc55088e846a947bbbdc7e60e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:ef:49:c1:7f:b9:55:dc:89:a6:dd:e9:0c:
b9:45:e0:26:5b:2e:a2:36:31:9d:ef:5e:77:d2:5a:
62:a9:f7:3c:6b:2b:c5:00:09:5a:f5:0d:fe:95:db:
3b:dc:bb:52:c2:00:fe:b5:b4:20:4a:33:bb:1c:f7:
01:37:05:54:d2:2b:ba:10:f4:0c:57:75:c9:0d:86:
23:f6:e6:5c:6d:94:85:18:db:eb:0f:1f:d6:67:f2:
a5:cd:25:6a:8f:51:7b:0a:09:99:21:27:c4:ed:5f:
1e:a5:bd:31:d2:8a:e5:d0:14:19:b4:7c:91:04:59:
58:5a:f7:74:b2:01:22:d6:f6:dc:12:7e:eb:d3:31:
61:ad:87:03:26:9f:d2:6a:f9:7c:78:f5:41:df:42:
b4:af:5e:a2:aa:b3:8a:d6:97:14:3b:c6:bc:93:fa:
6b:1a:a0:83:3b:f0:6b:46:20:ed:66:82:68:38:e0:
6d:b4:f5:e4:fa:f8:4e:f1:c4:30:25:78:37:1b:7d:
22:31:bf:16:49:e8:2f:a9:2f:03:c0:b6:27:40:e0:
0f:0f:eb:58:3b:48:b9:87:9d:36:3f:f3:8e:3e:f9:
94:b9:d2:5d:b8:71:24:a6:94:ee:90:82:df:1c:f6:
b6:14:19:b9:3b:6c:77:29:f2:ba:44:c5:1d:25:99:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D7:1C:9D:4A:06:CC:55:08:8E:84:6A:94:7B:BB:DC:7E:60:E4:9E
X509v3 Authority Key Identifier:
keyid:36:8E:35:A0:5F:27:07:B5:A7:41:C2:A7:2F:5E:4B:B3:4C:9B:09:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/No41oF8nB7WnQcKnL15Ls0ybCag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bb54d1-892d-4711-a9cf-76f135c4f311/1/No41oF8nB7WnQcKnL15Ls0ybCag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a6:a0:7c:8a:47:15:35:e4:19:fe:ad:86:1c:a2:31:d5:c0:
c1:05:d9:89:d4:25:d8:74:bf:fb:b4:3c:68:46:28:6a:29:e0:
f0:99:a6:c2:fe:0e:ee:33:f3:4d:a6:e1:5a:dd:a2:43:b2:d0:
e8:5a:b2:17:3c:40:a5:4b:5f:3b:52:49:3e:12:64:b8:0c:77:
4f:a2:ed:d9:87:9f:80:3b:90:36:fa:be:b5:35:6a:7b:b0:bd:
8c:42:e4:9a:fe:7b:21:36:57:d4:51:0c:4a:2c:c5:60:c1:68:
43:d1:b3:6c:34:44:0e:60:85:e1:0f:1c:77:32:af:ff:f4:bb:
2f:2d:be:0f:41:7c:bc:74:cc:79:77:91:e6:52:af:a6:07:8f:
06:7b:0f:38:6c:cb:35:b7:65:49:ac:8a:4a:66:fa:a3:0e:c6:
6f:58:c2:80:38:83:fc:65:23:46:44:0e:e1:4a:43:b8:cd:4c:
0f:ab:54:d3:e3:1d:1f:35:35:8a:c0:b0:ad:90:70:58:eb:a3:
42:69:23:fe:9c:16:08:ce:cc:37:eb:8e:74:d2:a7:15:43:20:
c1:5d:21:d7:bb:eb:03:41:59:31:b1:69:0c:26:da:04:9f:8f:
05:c9:e2:b9:6d:bf:6c:b6:6c:da:2c:d1:a2:6d:4d:2b:79:93:
df:10:77:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:33 2026 by rpki-client