Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: 9S7LwlYfrQcLqD/Q65FQV7FTGq8FnKmjo4/7a/Gz4Xw=
Subject key identifier: 39:25:AD:7F:EF:FB:41:58:C2:9D:DD:CA:CB:07:EB:4A:18:63:44:E7
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 019D97E1B4B79E69934B7033EFFFDB6E3638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 20:00:44 +0000
Manifest this update: Thu 16 Apr 2026 20:00:44 +0000
Manifest next update: Fri 17 Apr 2026 20:00:44 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: /RzErprEsSypvEXEGq9WZpeAxbK/Q+VZQr7/a6hk6MU=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:b4:b7:9e:69:93:4b:70:33:ef:ff:db:6e:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Apr 16 20:00:44 2026 GMT
Not After : Apr 17 20:00:44 2026 GMT
Subject: CN=3925ad7feffb4158c29dddcacb07eb4a186344e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:98:59:76:9e:d3:45:97:d6:02:12:f7:d5:46:
db:77:be:4d:7c:f9:8c:aa:ed:cd:86:cb:12:71:a3:
87:e7:42:ca:fa:55:5f:25:6e:96:fb:a0:37:d3:fc:
64:19:1f:21:33:c1:2d:ac:c7:2e:d5:b3:86:ae:33:
5a:ee:6a:3d:37:77:23:5e:1b:c3:22:e0:c5:ea:00:
86:d0:02:41:ac:87:52:82:bb:4a:0c:e2:e3:a0:56:
fe:05:e7:1e:29:4e:75:aa:49:16:13:c5:c1:52:13:
12:d5:b3:38:e4:e3:09:d2:80:6b:69:bd:29:db:56:
85:d9:5f:df:8a:4e:67:95:bf:38:ba:6a:4e:90:89:
c7:5b:70:03:9c:dc:76:9a:98:78:d4:20:7b:ff:59:
4e:bd:40:9e:76:14:f5:72:a5:01:9e:70:72:6d:90:
26:c7:f5:f8:ff:09:05:45:f5:6e:97:6e:52:fa:68:
b9:e4:f0:93:44:5d:a1:bc:fb:67:ff:9a:e1:4b:f5:
64:47:cf:fd:a2:cc:49:2b:99:0e:70:f5:4d:22:70:
bb:d0:9d:26:e6:76:b8:c1:7d:4f:a6:e4:d9:43:50:
4f:02:be:30:e4:84:88:fa:59:94:ee:69:7c:54:cb:
d6:cf:0b:0c:14:0b:67:65:42:6d:35:cc:31:08:9c:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:AD:7F:EF:FB:41:58:C2:9D:DD:CA:CB:07:EB:4A:18:63:44:E7
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4d:09:80:23:77:40:fd:ce:80:44:ee:a5:65:53:51:da:c5:
fd:ac:76:7b:a0:bf:67:5b:cb:cf:ca:2f:38:b8:c7:5f:28:1b:
f2:1b:6d:b8:47:77:26:75:29:9c:39:db:12:d0:13:23:62:d2:
02:d4:4e:41:5d:05:5e:e9:4f:78:ff:58:da:15:18:3e:60:83:
95:1a:dc:55:01:60:06:82:b0:97:13:cb:6a:89:93:fc:26:b9:
a5:57:04:48:5b:e7:d6:42:f4:f0:d5:c1:29:47:19:ed:cf:22:
ee:aa:cf:5d:f9:b4:cb:e1:63:d4:7d:b3:51:fe:b3:90:cd:6f:
5e:7d:23:94:a1:95:cf:c3:8e:3d:66:bf:6f:8d:cc:33:d5:92:
6e:68:0b:d9:19:4f:74:e7:f3:2f:7d:ae:5e:84:6a:de:db:5e:
18:e6:51:2b:a4:91:b3:e3:10:d0:cd:87:84:5c:4a:5d:73:be:
d1:66:3c:5c:a6:85:41:ac:31:f0:68:d9:b0:6b:ae:0b:fb:30:
a5:ca:ef:89:e2:6a:97:78:1d:81:c2:ec:d1:20:da:15:31:aa:
83:4f:48:84:26:87:24:c7:75:d5:f8:4a:77:e3:d4:b2:49:da:
03:80:45:0c:29:ae:75:e1:d3:d1:7a:81:d4:8a:67:b8:08:7c:
64:2d:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:11 2026 by rpki-client