Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
File: cPK0H9NmFINeM_wIgdskY4s6eHs.mft (raw, json)
Hash identifier: utF6gcXuqJsY0aMG9+AzjqtSqDyNqfvYBS5YRaa/uns=
Subject key identifier: 43:26:93:C8:26:1F:54:07:C6:6B:06:E0:F0:20:21:38:30:4C:26:70
Authority key identifier: 70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
Certificate issuer: /CN=70f2b41fd36614835e33fc0881db24638b3a787b
Certificate serial: 019D9A06B3B13EAB252DE191EFD1A06B8980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
Manifest number: 15B1
Signing time: Fri 17 Apr 2026 06:00:23 +0000
Manifest this update: Fri 17 Apr 2026 06:00:23 +0000
Manifest next update: Sat 18 Apr 2026 06:00:23 +0000
Files and hashes: 1: 4RiCyXsTTxN4U2vKrxIpHqqQyp8.roa (hash: c7d+U4ANkFjBt/KeAPGICRD1tKcKRhMiiwMtTLMKDuM=)
2: cPK0H9NmFINeM_wIgdskY4s6eHs.crl (hash: ZHrsO/2lrb3pO23ZfKdbsfCTfEq5D+kVZEzWIjcbEbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b3:b1:3e:ab:25:2d:e1:91:ef:d1:a0:6b:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f2b41fd36614835e33fc0881db24638b3a787b
Validity
Not Before: Apr 17 06:00:23 2026 GMT
Not After : Apr 18 06:00:23 2026 GMT
Subject: CN=432693c8261f5407c66b06e0f0202138304c2670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4b:1e:27:cb:a3:ad:3a:d3:ca:91:fa:de:c9:
a7:1d:82:ae:6f:fe:74:16:04:5f:8e:b5:63:26:3f:
c9:85:32:10:20:0f:76:9b:55:11:98:4a:91:1f:14:
63:bb:5e:36:20:af:6f:f5:9a:94:82:4f:a2:3d:dc:
b4:a5:d8:9c:34:9e:33:7c:83:6e:62:06:c7:5a:d0:
8f:2b:0a:ed:f8:24:66:ec:b8:a7:1d:f2:65:3d:08:
61:c1:51:67:ae:09:05:95:92:40:92:7c:a2:9a:c2:
c9:c6:fc:93:8b:13:d9:38:98:4b:38:b7:ae:24:07:
83:75:f7:c6:26:be:2c:2b:0c:86:9a:25:ec:0c:9a:
27:ad:1e:15:bf:40:a4:9c:9e:9c:28:b1:63:d5:18:
e8:12:e5:5f:87:3d:19:f5:76:2b:c2:f3:d5:16:95:
9b:aa:3b:18:92:46:a5:c2:d3:45:73:bb:dc:cf:b1:
91:08:2f:e2:4d:08:6b:c7:55:14:47:96:e0:07:45:
dd:33:89:0f:18:4f:cb:b4:34:7c:f1:22:59:29:56:
a7:84:5b:c3:5d:a4:15:cd:bb:84:a1:4a:8a:0d:e5:
81:59:ee:61:46:be:fc:fd:96:43:c8:95:a1:f0:f5:
78:62:af:1c:b4:78:76:fc:c7:0d:83:8e:97:5d:e1:
d0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:26:93:C8:26:1F:54:07:C6:6B:06:E0:F0:20:21:38:30:4C:26:70
X509v3 Authority Key Identifier:
keyid:70:F2:B4:1F:D3:66:14:83:5E:33:FC:08:81:DB:24:63:8B:3A:78:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPK0H9NmFINeM_wIgdskY4s6eHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/7766bb-bb48-49be-b21f-0a35b7ed63c7/1/cPK0H9NmFINeM_wIgdskY4s6eHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:96:26:28:40:00:88:2b:5b:28:c9:82:e9:7b:ed:94:c6:e7:
a6:bb:f2:bb:4a:5a:46:22:a2:d7:25:a2:c9:e0:29:15:81:fc:
28:be:64:9e:a7:c8:bb:ed:37:6b:4d:4a:a2:23:c5:a9:57:c4:
ae:00:84:05:85:bd:a0:72:2b:62:13:41:8d:2b:c5:31:97:33:
7f:68:fa:95:e0:4d:3e:86:82:12:a1:b2:c1:37:5e:76:c7:3a:
62:28:f6:d3:0d:af:5b:a6:1c:16:50:4e:6e:d1:f2:b0:c7:8e:
5f:1b:9d:2a:eb:aa:a1:cd:01:30:ee:49:42:f3:4a:78:39:e0:
b4:44:89:97:c9:a5:02:37:5b:ff:53:46:e9:eb:0f:54:72:0a:
6e:19:a1:c9:fe:21:54:bb:75:c2:79:f5:f2:e8:9f:46:16:a7:
7a:ef:0a:73:39:b4:4b:37:a3:d3:e6:7f:a7:15:7a:3f:a7:c8:
f6:16:d5:5e:fc:6c:76:42:3b:ae:6e:e5:d9:e7:45:e2:b2:f4:
43:bb:59:32:6e:20:7b:00:17:d6:db:f6:e9:3e:58:f6:64:80:
36:9e:fc:80:d2:58:6f:74:a2:17:e5:28:f8:0e:52:0b:56:f4:
1e:53:4a:75:1e:53:0f:86:dc:e6:d4:10:36:20:5a:ef:ec:51:
04:d2:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:21 2026 by rpki-client