Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
File: Cx5y89CVf1puO9G4RKEqYUdEkCc.mft (raw, json)
Hash identifier: N6dAcD89XNxG8Os+VcXd2Q9sfgDiR6xsFd4+tOCCtrU=
Subject key identifier: CA:09:7C:95:0C:52:28:3D:5F:9D:B7:02:D6:2A:4E:C7:3C:A7:66:56
Authority key identifier: 0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
Certificate issuer: /CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Certificate serial: 019D996247260E54FC2BB2A75E10EBA12824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 03:00:47 +0000
Manifest this update: Fri 17 Apr 2026 03:00:47 +0000
Manifest next update: Sat 18 Apr 2026 03:00:47 +0000
Files and hashes: 1: Cx5y89CVf1puO9G4RKEqYUdEkCc.crl (hash: gHoFfvcaD93k27LlSMd3yriLT7WLaERFpmbUtZKZLPQ=)
2: GPIsYlil8kPkRS6gEM2NHsqbCFY.roa (hash: kvkFMQZNWkoCHYm6i5KcWUr0FuuwyQMeHon9wF+Il04=)
3: hsTKNuFtecu81R43BCP7v63FtKE.roa (hash: Jfq06SGiKWbDyYONhWT4ALN3kqL199bV3kH8pBzjomI=)
4: sJSAOEoKH3yqMibmQkkicbcwvd4.roa (hash: 3WriKsxAWFbvJqa+g1N1RIzhXWZvpso2ZA3Pg5F32hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:47:26:0e:54:fc:2b:b2:a7:5e:10:eb:a1:28:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b1e72f3d0957f5a6e3bd1b844a12a6147449027
Validity
Not Before: Apr 17 03:00:47 2026 GMT
Not After : Apr 18 03:00:47 2026 GMT
Subject: CN=ca097c950c52283d5f9db702d62a4ec73ca76656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d6:db:44:b7:01:fe:f0:95:b5:20:8c:e9:e9:
75:0a:14:43:17:18:15:08:5f:f0:56:33:5f:ec:20:
c1:4e:05:88:87:f3:ad:97:cf:c5:21:cd:3c:13:9d:
31:7d:18:9c:af:80:b7:2a:63:05:b8:b6:f3:8e:86:
5b:f5:76:dd:f4:8f:26:9a:ca:e8:37:1b:bb:c9:70:
1f:47:7c:5a:82:cc:73:1d:2b:9e:72:cd:47:1d:15:
e0:b5:ad:c2:aa:a2:28:ad:b4:f5:9b:27:36:c8:1b:
79:df:03:70:c4:19:21:4a:cd:6a:16:5d:4b:0a:05:
0d:2c:86:ad:26:06:5b:ec:97:16:d0:57:a2:53:6a:
24:fd:17:3e:45:c8:04:28:2c:92:eb:8c:22:23:55:
1b:51:bd:13:b9:8d:a6:b6:16:1c:a7:ee:25:47:24:
92:72:cf:d9:f3:ce:60:58:dc:37:79:22:ce:ae:62:
03:7d:44:88:56:9c:37:cf:ea:96:16:cb:58:41:c0:
82:3d:a1:d5:72:b2:fd:27:2a:29:0f:b3:15:84:2c:
3c:c3:65:b3:e1:9a:b9:f2:f3:49:ec:9c:6b:07:9a:
c5:bb:ff:44:d3:7f:5e:43:a2:04:c8:01:60:3b:9e:
a2:20:f9:a6:86:d4:fc:95:d8:02:2a:8c:6d:78:2c:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:09:7C:95:0C:52:28:3D:5F:9D:B7:02:D6:2A:4E:C7:3C:A7:66:56
X509v3 Authority Key Identifier:
keyid:0B:1E:72:F3:D0:95:7F:5A:6E:3B:D1:B8:44:A1:2A:61:47:44:90:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cx5y89CVf1puO9G4RKEqYUdEkCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/1a5a96-d36e-4f3a-9b34-0548d3895a55/1/Cx5y89CVf1puO9G4RKEqYUdEkCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:63:c4:62:d8:62:e5:cf:7e:56:7a:7d:48:27:18:98:47:7b:
92:51:84:25:b1:42:a8:84:eb:8c:c2:a7:d0:5c:51:17:e8:fa:
4b:27:2f:70:2e:e6:5c:64:40:d0:9d:80:aa:d5:5e:ac:c5:d2:
5c:78:2f:42:51:13:fa:6d:7d:a6:45:b4:37:5e:af:e7:a8:f8:
7f:e2:67:f2:4e:14:a9:a7:d8:81:9f:a9:e4:d0:21:90:36:6e:
2d:e6:5f:b7:4a:e5:cf:b3:31:cd:8e:08:35:d9:a3:73:e7:73:
36:bc:37:f8:bb:1f:fd:7d:ab:03:cd:54:8c:34:72:7a:3c:bf:
03:0f:4d:f4:e0:c1:b3:73:4d:d7:7b:6d:1c:8f:85:7b:65:2a:
96:ac:b3:ff:ef:69:01:68:1a:e4:6e:ac:1d:5d:3b:f3:74:32:
0b:a2:78:7a:d7:b0:07:31:25:27:e2:fe:d1:20:53:b5:ca:f8:
e5:c9:14:a0:f7:5d:e5:9f:8d:40:38:ed:e5:8f:69:9a:98:8a:
52:0c:00:88:37:b1:12:bb:03:c3:25:e2:a2:ba:49:aa:3a:8b:
de:d0:1a:95:c0:20:d3:fe:93:22:f5:89:1e:bd:c8:1f:b0:43:
a8:75:a0:66:27:b9:7c:d6:b6:4f:10:55:2f:f5:bd:b3:70:e9:
a6:df:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:19:23 2026 by rpki-client