Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
File: M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft (raw, json)
Hash identifier: dzVrnzh2OCx4X9M51ys8RMf/EOKImWLbvRPrI24/FHE=
Subject key identifier: 83:90:5B:4B:B0:CE:2F:80:4E:7C:3A:D3:24:27:F3:53:C0:BE:42:DF
Authority key identifier: 33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
Certificate issuer: /CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Certificate serial: 019D98BDF3C9B9F09F89735D0927A4218868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 00:01:18 +0000
Manifest this update: Fri 17 Apr 2026 00:01:18 +0000
Manifest next update: Sat 18 Apr 2026 00:01:18 +0000
Files and hashes: 1: M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl (hash: gYOH1RdjTMvpHU9ROZ1T6QisuU4HmpTPaUQcGpOCObQ=)
2: a_96dgHPGfskp46QxVwlyW43OHQ.roa (hash: 40fkJSYqeLo91DkP9jgqjhXreqdS7UdtXQdlx4C0e90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:f3:c9:b9:f0:9f:89:73:5d:09:27:a4:21:88:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33410875ca78cc5e3d192e054a96df0302c7f97a
Validity
Not Before: Apr 17 00:01:18 2026 GMT
Not After : Apr 18 00:01:18 2026 GMT
Subject: CN=83905b4bb0ce2f804e7c3ad32427f353c0be42df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:d3:8d:2c:d4:70:9e:91:ae:f8:94:d3:46:
1e:14:09:42:c4:f5:74:ae:ca:77:07:38:af:fb:a4:
1d:27:40:8c:ae:b4:a8:08:6f:e2:0c:cf:72:1a:fc:
92:2d:76:aa:d2:e9:2b:97:fc:1b:52:19:de:1a:e9:
5a:0f:f0:5a:26:28:99:17:e8:d9:72:46:76:df:d4:
7d:9a:03:1a:68:57:42:f9:8e:1c:86:f8:16:69:db:
f2:51:6b:24:55:a1:54:7d:39:a1:1c:e3:2a:ef:14:
54:2e:dd:d5:5b:8c:c6:af:65:dc:6b:a1:67:7b:d5:
45:2d:fc:ad:17:0a:2a:1c:13:97:18:f3:59:5f:78:
97:e3:85:08:bc:60:8f:e2:e4:8f:2b:6b:54:8d:22:
d6:8d:8e:14:98:ae:1e:8d:fe:5d:8d:ad:02:c5:6b:
db:a9:44:76:0c:66:a0:1c:61:da:df:ae:3f:47:dc:
60:a3:27:74:df:fa:c8:6d:32:40:a6:88:70:97:a3:
14:0a:b8:66:94:ec:c5:71:94:fd:bd:76:54:ee:00:
54:6a:94:17:45:c2:c2:c0:b4:8e:ec:fa:52:99:b5:
6a:30:cf:e0:bd:49:df:0e:32:b1:05:ba:75:c7:a4:
bf:c7:7a:97:03:93:7e:af:c3:ce:ba:bc:3d:fb:d2:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:5B:4B:B0:CE:2F:80:4E:7C:3A:D3:24:27:F3:53:C0:BE:42:DF
X509v3 Authority Key Identifier:
keyid:33:41:08:75:CA:78:CC:5E:3D:19:2E:05:4A:96:DF:03:02:C7:F9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0EIdcp4zF49GS4FSpbfAwLH-Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8c07ae-de72-476a-8029-f0816e38adde/1/M0EIdcp4zF49GS4FSpbfAwLH-Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3b:59:94:22:cc:c1:95:d8:c9:8f:be:97:a3:80:d9:71:4e:
0e:f5:31:e1:9a:10:a7:50:ea:52:18:31:f6:e9:42:bb:80:98:
60:6c:21:6d:48:32:aa:be:b0:29:38:14:63:f8:43:2e:83:ca:
c6:b2:f1:1a:79:00:44:3c:6a:83:7b:0f:53:19:23:38:df:b3:
fb:77:ac:27:b9:7c:09:1c:e0:3a:45:fe:2c:73:de:f7:24:ef:
c2:6f:1e:ad:a3:18:cd:74:57:88:e3:c6:a8:27:23:d1:82:d7:
10:17:9d:d7:8b:97:a0:f6:93:8a:6f:ba:a5:1e:23:7f:6c:2e:
cf:cf:47:de:b5:01:2a:82:1b:ee:a1:66:f2:90:e7:61:d5:07:
23:4d:63:b1:06:4b:e5:5d:b4:6e:34:f1:c0:3d:b1:37:d0:0f:
2a:06:66:0a:19:45:5d:79:a2:0f:62:29:0b:dd:3b:2d:63:ef:
33:5a:16:6e:73:12:66:d3:d4:32:bd:bc:d6:e1:39:31:6b:de:
c4:b1:95:39:c6:af:52:f0:43:d6:6c:b2:78:c1:00:8b:8f:46:
32:46:b2:f3:0e:65:cf:95:f3:37:fc:88:6d:b7:87:f0:49:65:
a7:b2:b3:15:50:15:fa:88:36:95:9d:95:d0:3f:65:5b:67:8d:
bf:42:14:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:26 2026 by rpki-client