Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: 25GP3B9QtmMRzE1obgj4dNLBwXpJeVtprfIR05wZx3g=
Subject key identifier: 63:D5:13:88:C5:85:33:6E:3C:72:57:07:E0:CD:BA:95:92:80:24:96
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 019D99D03BD0ED43EAEDD4D86D6527DFAF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:53 +0000
Manifest this update: Fri 17 Apr 2026 05:00:53 +0000
Manifest next update: Sat 18 Apr 2026 05:00:53 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: Pi4M1kKcaHsTr0ZYhde+nbuS13XilWBwZZxzUN/03aw=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: SyWBqT58dPR944ENyBXecfRLiu0.roa (hash: nvOaqw1yMGl0wbibTeGVu/RnctZfAeEqTXJajqdQujk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3b:d0:ed:43:ea:ed:d4:d8:6d:65:27:df:af:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Apr 17 05:00:53 2026 GMT
Not After : Apr 18 05:00:53 2026 GMT
Subject: CN=63d51388c585336e3c725707e0cdba9592802496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:fb:f3:13:80:e0:10:a2:80:37:9a:3f:c7:
30:67:83:54:60:2f:24:5b:12:72:ff:e0:ec:66:51:
ba:e2:2c:52:e5:39:97:cb:7a:a6:6e:83:2b:ee:3b:
59:15:4d:ed:94:05:87:34:22:a8:5d:8b:fb:8b:b2:
78:ce:44:70:3f:98:55:4c:c2:9f:12:88:62:0f:ff:
3d:1a:e2:99:17:8c:dc:74:06:ae:8c:43:44:02:85:
98:dc:56:2c:52:18:78:19:44:23:03:c5:21:b3:2f:
3f:83:04:49:ae:ef:80:af:ec:f8:40:c2:95:97:73:
cc:d0:f6:65:54:f8:b8:9d:6e:f8:c3:9a:b2:f1:44:
f2:d8:09:2d:3d:1c:da:bd:54:aa:6e:d7:e2:0b:30:
2d:2d:a2:56:b4:4a:e4:8f:5f:bb:1f:6a:d3:2a:a1:
83:9c:69:e8:5c:d4:4f:e8:ec:73:65:4e:79:d3:33:
7c:e2:f8:92:a2:07:fb:8c:bd:b9:2b:48:24:99:43:
a1:fa:8a:e4:c7:79:62:93:be:da:5e:1d:d6:00:48:
f6:8b:e5:61:95:d6:55:f2:03:f5:0d:23:6f:e1:ad:
97:69:52:1e:5e:1d:be:82:70:82:62:ee:49:a0:1d:
08:25:9f:03:84:d2:79:37:77:a4:7d:ad:86:0e:89:
a4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D5:13:88:C5:85:33:6E:3C:72:57:07:E0:CD:BA:95:92:80:24:96
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ed:71:20:ce:31:29:27:f8:dd:00:57:cb:1c:18:d3:5b:7b:
1c:b0:86:78:2d:ca:da:61:a5:74:33:b9:c7:28:4f:cb:18:f4:
a9:31:a0:57:e1:4d:50:40:a8:5e:25:ff:1c:7a:1d:4e:c7:36:
5b:8e:0c:c8:3c:16:6c:c3:f9:06:7b:a4:b8:7e:54:d4:d2:40:
30:59:29:a8:a1:7e:f2:67:0b:ec:2f:6a:e3:65:f7:d0:90:e6:
98:7b:bb:ca:2f:18:11:bd:4f:cb:7a:c8:6a:c6:54:53:19:e8:
70:31:8a:9d:39:43:35:5e:4d:b3:27:fa:24:cc:9e:f2:bc:5f:
c8:e3:9c:36:2f:1b:3f:10:3e:24:3a:d3:a3:c4:ec:89:54:ae:
84:31:25:62:b1:35:fe:ed:b6:23:7b:c7:0a:68:b0:4a:99:30:
ca:c6:08:7b:7e:59:10:4f:63:fa:4b:74:83:c6:df:27:ab:68:
84:3a:1a:ad:9f:a9:72:72:cb:10:3a:ec:0f:dc:ae:3f:fd:7f:
9e:f6:c1:5b:e5:3e:06:1a:c7:1b:4a:b0:08:0c:ee:ab:a4:a3:
87:b3:c8:55:52:64:be:62:28:9e:cf:1c:df:b4:ac:37:75:d7:
c2:c9:09:16:dd:1b:b6:83:2f:47:f4:60:3a:7d:af:42:2a:12:
ed:c1:00:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:06:45 2026 by rpki-client