Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: 00GLNXuvR9GL7f8l6zrsvfgKWnKFWWzb8pNW4DUTElo=
Subject key identifier: 91:B9:EE:5F:8E:EE:2B:46:83:A4:D1:94:59:06:F1:19:31:42:FA:B4
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 019D9A74BECBDF8C702482921B49B2D0F3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:35 +0000
Manifest this update: Fri 17 Apr 2026 08:00:35 +0000
Manifest next update: Sat 18 Apr 2026 08:00:35 +0000
Files and hashes: 1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: IgpL303+n4BCRZL/i/D+NAfOXNmUoAB8wth5y7DkVdE=)
3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:be:cb:df:8c:70:24:82:92:1b:49:b2:d0:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Apr 17 08:00:35 2026 GMT
Not After : Apr 18 08:00:35 2026 GMT
Subject: CN=91b9ee5f8eee2b4683a4d1945906f1193142fab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:57:0b:44:45:99:a0:9d:08:83:79:c5:69:
73:c1:59:f1:b8:c8:da:23:43:72:55:0d:d5:dc:e5:
ef:5b:67:62:71:9c:d6:d8:ee:cc:4d:0e:90:6b:a0:
16:f5:6b:fe:e8:f8:dd:de:da:32:8d:9f:46:5a:4f:
16:20:d9:e5:e5:8f:1e:ee:6c:00:ab:38:e6:67:df:
ec:48:13:60:16:dc:c7:f8:14:5d:9d:46:05:6a:e3:
9a:c0:a5:f3:fb:b3:10:b9:e9:98:e3:7b:b5:43:e4:
47:7b:dc:9a:47:f7:87:78:de:24:de:86:7f:72:27:
22:37:15:c3:54:a8:a4:47:87:c3:c9:19:af:9d:7f:
3b:7e:6f:ca:f6:0d:eb:19:73:42:07:de:1b:63:56:
49:61:4b:60:d3:02:2c:ce:1b:93:c0:42:fd:58:d6:
53:6b:32:fc:dc:aa:ed:31:6c:9a:03:00:31:13:12:
10:fd:ef:ec:94:2a:92:44:bd:19:a1:33:3d:f7:b1:
cb:e5:04:4a:29:e0:30:3c:4d:06:2c:dd:2e:b6:1f:
a7:0e:93:7d:e6:68:1b:93:79:6b:99:b3:a3:f3:52:
d2:af:8b:5c:99:06:7c:b8:50:91:88:cb:6f:fe:3c:
b9:19:9f:b5:7d:e5:89:52:34:62:87:fc:b8:88:2e:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B9:EE:5F:8E:EE:2B:46:83:A4:D1:94:59:06:F1:19:31:42:FA:B4
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:48:51:3c:fd:27:28:d7:cf:46:dd:08:f9:65:e7:c3:b6:b0:
e4:3d:5e:e7:9e:58:de:7e:20:8e:ec:83:2f:f9:c6:61:9c:36:
fc:00:fa:49:86:e4:b8:eb:f7:11:c1:a2:02:3d:a5:20:73:42:
37:8d:6f:00:b4:06:35:35:0f:15:c1:d8:6a:e2:dc:c4:1a:28:
34:9f:d5:78:0f:d2:01:06:95:26:43:ad:ed:18:8f:69:fc:99:
3b:3e:7c:b0:d5:7f:55:f1:50:0b:03:15:45:39:05:e9:ab:43:
b2:07:45:6e:b5:99:72:14:38:d9:25:b3:55:78:8c:c6:9d:45:
9e:fe:0b:ba:e0:7f:de:7a:7c:e5:ab:e0:d7:c4:d7:48:96:ec:
db:5e:65:24:a2:88:3b:2f:1d:28:bd:11:64:74:3a:2e:60:31:
5e:6b:a3:a2:06:19:16:17:6f:ef:75:f3:8f:b5:27:f2:f2:8c:
3b:c4:13:e5:05:0e:da:b0:ea:09:78:97:e0:e9:c7:26:38:b6:
55:05:bb:ba:55:78:1c:85:10:18:82:83:60:f1:80:8d:61:92:
c0:27:de:52:fa:41:5e:3a:c5:11:b0:4b:c2:f4:59:de:91:c4:
79:de:63:a8:3e:0c:bb:e3:f5:5d:b6:36:29:92:04:b2:3c:7a:
a3:ca:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:05 2026 by rpki-client