Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File: m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier: JnxWhq0kKYgVb5rSJFIzHZeR+9bx7hhEfvdz780S4cQ=
Subject key identifier: E4:94:F9:87:7A:3A:42:90:73:FA:4B:C0:80:9F:0C:DA:70:A7:BA:80
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer: /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial: 019D9A3F1131948F4FC925D7A3F61CD3C8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:57 +0000
Manifest this update: Fri 17 Apr 2026 07:01:57 +0000
Manifest next update: Sat 18 Apr 2026 07:01:57 +0000
Files and hashes: 1: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: Ay3ZYGuDJkrnTAMhFa7jk279dTtpRiM5BFPMscV2gA4=)
2: uqRQxH9qEjG0hA9B3Ap6knKry0I.roa (hash: aVZsCZDmcN6Rpr0mzKedChfzxWEnLoXai4QxhXhqgNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:11:31:94:8f:4f:c9:25:d7:a3:f6:1c:d3:c8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Validity
Not Before: Apr 17 07:01:57 2026 GMT
Not After : Apr 18 07:01:57 2026 GMT
Subject: CN=e494f9877a3a429073fa4bc0809f0cda70a7ba80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:52:09:52:98:ec:12:89:88:19:2e:05:3b:
d7:bb:fb:34:f5:d3:9e:a1:4a:11:0c:18:17:b2:8f:
ae:14:7d:90:91:f1:30:fe:ec:84:3b:6d:d4:8f:b2:
4c:cd:a5:50:70:ab:20:e6:cb:89:93:c7:94:26:42:
93:8d:bf:3a:39:83:ee:50:1e:f4:fc:dc:c3:39:d5:
19:1b:86:06:97:2e:98:40:8c:6d:d0:fa:e6:98:ec:
77:de:df:11:0b:9d:c0:21:5c:e3:67:a9:47:44:06:
3c:91:97:52:dc:86:e9:d3:ad:9b:93:82:69:57:05:
01:9e:1f:09:d6:a5:d6:67:bb:6e:c4:aa:7b:5a:e4:
7b:49:9d:b1:cb:fa:06:af:5b:40:7a:15:a4:4c:32:
5d:32:19:c3:56:db:e9:3e:b3:4b:97:5c:a6:f4:88:
26:35:5d:0e:d5:f8:39:3a:9e:e3:91:80:2d:f9:5a:
bc:5a:1c:51:fb:bb:3b:2b:1c:73:a0:b5:7e:d7:80:
ae:cc:99:57:0b:05:97:db:2f:4d:90:0a:ae:86:96:
bd:9a:19:27:93:0a:08:35:c1:ef:47:89:cc:ba:f7:
3c:92:8f:86:fe:86:a3:00:4b:2f:2b:b6:71:35:db:
86:ae:a6:5d:30:03:60:7a:a7:a7:76:07:48:86:44:
1c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:94:F9:87:7A:3A:42:90:73:FA:4B:C0:80:9F:0C:DA:70:A7:BA:80
X509v3 Authority Key Identifier:
keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f9:5e:71:cd:b7:67:06:0e:c3:0a:aa:0a:28:4a:72:a9:5b:
32:7b:66:43:2b:86:bc:ff:7e:7e:93:cb:59:f1:55:c4:c2:17:
0b:d1:0f:f4:10:1c:b4:ca:2f:4b:69:1b:57:5d:2c:34:61:27:
c2:b1:70:99:ea:c4:c4:a8:fc:9e:db:35:aa:cd:31:f2:e2:cc:
55:53:a0:fb:e9:5c:b9:b4:da:6c:cb:50:35:2e:94:e1:e5:0a:
d5:20:a5:e2:c9:1e:aa:46:9e:7c:30:3a:b9:3c:3c:2b:15:f8:
0e:ec:7e:ff:39:73:49:54:bf:45:c5:6b:d5:17:97:76:28:96:
34:1f:98:22:39:6a:29:87:1f:21:73:14:c6:a8:9e:55:bd:53:
06:2d:9f:7d:74:be:24:f0:42:c2:81:9a:ea:f5:b2:90:b8:0a:
7a:b8:09:59:ff:88:49:91:e5:c2:f7:5a:e5:d0:cb:4f:1e:3d:
d6:b0:81:e1:34:a3:ac:63:cd:e3:dc:80:cd:8f:7b:44:d7:84:
f5:13:da:b5:45:cd:74:85:0a:f6:ae:6c:48:bb:ba:5a:f9:4d:
5a:27:3f:10:ec:0e:b0:ec:bf:16:85:c8:36:7c:09:60:9c:4d:
78:2f:a1:bb:75:00:4c:e2:ff:1e:a4:1a:63:d5:c8:25:56:a1:
ca:3e:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:43:43 2026 by rpki-client