Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
File: dAId0eJ80ed44tu9YKoYSxY7zv4.mft (raw, json)
Hash identifier: VSCRwpER0s9pBFsUPJbioulSaro6p2u5afHnAUjncjU=
Subject key identifier: E3:E5:6C:33:E7:F6:67:16:5B:28:8A:5D:62:E8:7D:3E:6F:4E:B7:67
Authority key identifier: 74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
Certificate issuer: /CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Certificate serial: 019DA4F8AF914186B1172F5B45059FB0EA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
Manifest number: 041E
Signing time: Sun 19 Apr 2026 09:00:54 +0000
Manifest this update: Sun 19 Apr 2026 09:00:54 +0000
Manifest next update: Mon 20 Apr 2026 09:00:54 +0000
Files and hashes: 1: dAId0eJ80ed44tu9YKoYSxY7zv4.crl (hash: Rq3Vd4x5N962n0alOYC+hQv7WhtMgknONZlTc9FQoiE=)
2: eh-_1IK7oCD8nbLcwB1h-jsivvQ.roa (hash: 1hB/vcchKccjfMUEW19JzNX5vcI2nAxqryUItaWwuI8=)
3: pdvwezXifSPbHn7Zg5GsoIZ-9_g.asa (hash: L3xvDc7N16Bw2yzHqAnTIftFzbiPXKuwqnDanSSbEog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:af:91:41:86:b1:17:2f:5b:45:05:9f:b0:ea:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74021dd1e27cd1e778e2dbbd60aa184b163bcefe
Validity
Not Before: Apr 19 09:00:54 2026 GMT
Not After : Apr 20 09:00:54 2026 GMT
Subject: CN=e3e56c33e7f667165b288a5d62e87d3e6f4eb767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:7b:05:87:17:36:f2:0e:ef:54:47:e4:2e:
72:56:68:f7:2a:12:22:a3:06:a3:7d:bc:70:dc:b3:
6f:06:5b:0d:a1:be:69:30:93:0d:bf:a6:d1:29:ce:
80:74:f7:1a:df:2b:3b:b6:e1:a8:a1:3b:2d:f5:80:
c2:05:3e:d7:6a:61:68:04:08:b1:53:53:7f:30:7e:
f5:bf:25:5a:d5:c8:4a:8c:08:58:47:69:2d:b6:c5:
8f:bc:09:db:9a:c4:36:0a:1a:09:2b:0c:4d:e9:9f:
b4:32:ff:08:58:b7:c4:9d:01:18:aa:23:cb:54:e1:
c5:f3:e3:8d:7a:41:68:cd:e4:e0:83:d3:fd:87:24:
23:70:dd:9a:16:5c:4c:11:9c:0e:77:35:cc:f5:e0:
8c:58:cf:30:55:14:f6:a0:a2:85:7e:9a:03:bd:c8:
00:a1:f0:d6:93:fb:b3:d7:8a:e1:ff:53:6f:8d:23:
b2:81:95:11:02:6d:71:41:b8:86:68:22:94:53:18:
ae:9f:b0:95:87:46:1d:bf:2a:3f:cb:84:d6:46:40:
da:4e:53:e3:31:e4:94:79:70:57:0c:de:bb:44:2e:
77:cf:49:8a:ba:7d:52:fd:99:3f:ba:60:a8:40:15:
3d:53:d3:5c:83:c3:ea:1c:da:2b:b7:1e:30:25:c8:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E5:6C:33:E7:F6:67:16:5B:28:8A:5D:62:E8:7D:3E:6F:4E:B7:67
X509v3 Authority Key Identifier:
keyid:74:02:1D:D1:E2:7C:D1:E7:78:E2:DB:BD:60:AA:18:4B:16:3B:CE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAId0eJ80ed44tu9YKoYSxY7zv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8941f8-9fb6-4d0f-b495-93385f805655/1/dAId0eJ80ed44tu9YKoYSxY7zv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9a:d6:30:3a:95:66:e1:64:3b:8b:e9:6d:5f:a3:37:1d:84:
75:bc:37:1b:08:2d:7d:85:74:98:d8:cf:68:7e:7e:08:f1:82:
cf:75:33:05:18:2e:86:73:29:ff:d8:f7:44:59:b2:f4:06:b6:
ae:76:69:c3:57:fb:25:cc:3f:00:67:2b:d5:43:f5:fc:d6:03:
96:f6:f2:65:e0:18:ca:aa:06:d6:8c:83:dd:01:90:a9:41:df:
fd:3f:9e:4f:43:a8:3d:a8:9b:2f:6f:3b:7e:b4:da:ac:42:16:
54:ac:7d:e1:f3:8b:12:d6:ab:4c:f7:b1:53:54:55:de:91:99:
c1:4a:7f:56:c2:05:11:c7:34:0b:34:08:48:70:42:e2:d9:d5:
ed:7c:2b:f4:08:31:36:9f:e4:3b:2c:50:8d:e8:69:55:21:a8:
f3:57:fe:3d:62:0d:fb:2c:60:1a:fc:55:bf:3c:d7:c8:76:77:
00:9b:8d:3f:9d:0e:72:b4:18:8e:5a:30:97:21:9f:cf:b0:89:
52:3e:58:ee:9f:60:a4:ad:a6:80:f1:66:a3:b5:ce:7b:36:78:
f2:4c:af:6d:cf:68:19:67:22:02:64:f4:ee:a1:4f:cb:78:8b:
c2:93:f8:03:6d:2c:2b:35:ff:cf:24:79:51:09:70:e9:26:89:
42:05:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:11:55 2026 by rpki-client