Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
File: d52BXbMia3qEiWEmKtdP_BVVf6E.mft (raw, json)
Hash identifier: I0MxwyoU98uu6ke2CnqEwROrdw5qLBz7zWAQM5QTdrw=
Subject key identifier: A3:73:AC:4C:1D:20:84:74:2C:08:5B:5E:D1:9E:2C:8B:73:73:EF:0A
Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1
Certificate serial: 019D99D067B2B220ABC2FF8D00BDA2F93020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (hash: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24=)
2: bFNRQE3pxcA4g-Rg8277J0Pfyvg.asa (hash: SZ5vK0kMUed0BXVDFve+JxQjn9uHdMp5dF2f6Za79JU=)
3: d52BXbMia3qEiWEmKtdP_BVVf6E.crl (hash: x3qW3nPSDwmDc8SaAr3cic8Mva+UOYIu6h3PgQP4ONo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:67:b2:b2:20:ab:c2:ff:8d:00:bd:a2:f9:30:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=a373ac4c1d2084742c085b5ed19e2c8b7373ef0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:7c:fd:0f:c7:d7:65:03:e4:fc:e7:c9:05:
53:07:20:25:cb:a5:f2:e2:0f:77:e7:98:d8:af:74:
b8:f8:11:9a:5a:39:37:2f:f8:6c:db:87:3a:8b:fe:
01:bc:7e:2e:71:ed:54:62:54:87:31:79:48:db:96:
b3:db:f1:0c:cd:e7:6e:a1:35:ee:15:e6:e1:ad:c3:
95:ed:57:2c:9d:e7:d5:b8:3c:ef:06:e0:1f:b0:66:
87:1b:80:a8:30:94:3f:56:9c:6c:ec:f5:89:5a:42:
fb:8d:75:51:4b:4d:3e:fc:20:bb:c9:20:69:93:f0:
44:a2:c4:26:3e:3e:ff:f3:33:43:be:cd:b9:2d:d4:
e7:a2:30:73:8c:8f:bc:85:33:2e:75:ea:25:5c:72:
a9:89:bf:5f:22:c7:58:aa:2b:b8:b2:8c:8a:fa:8e:
26:ff:45:33:af:db:b0:d1:ed:cd:25:9f:9a:a5:09:
8b:57:23:7d:aa:c0:c0:e4:d8:c6:4e:a4:e4:83:9b:
af:38:50:54:8d:f5:70:04:de:6c:e4:ec:80:6e:02:
36:2a:02:59:31:cb:07:7b:ce:17:ae:56:57:88:66:
b6:fd:c3:22:ac:88:37:3e:12:f1:31:6a:69:b4:e8:
f6:5c:b6:66:fb:1f:3e:1b:be:28:3d:3a:8d:63:6e:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:AC:4C:1D:20:84:74:2C:08:5B:5E:D1:9E:2C:8B:73:73:EF:0A
X509v3 Authority Key Identifier:
keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b0:6b:53:e6:8e:c8:bc:ed:f2:ca:75:b6:27:23:c4:80:f7:
56:2b:1a:38:17:c1:60:d8:63:31:56:58:fe:a7:05:c8:2f:76:
30:79:fa:ab:6c:67:76:f2:34:bc:ba:bc:1c:fd:7f:4a:3a:89:
97:77:a4:c7:fb:09:59:7d:00:e5:4f:6b:5a:76:41:ce:b5:60:
12:d2:53:b0:cc:ae:ff:39:4f:40:9f:bf:14:4c:5b:7d:07:00:
78:1e:23:76:13:6e:b4:fb:d2:92:a9:43:0b:d5:b0:3e:b1:f6:
8c:35:65:1b:02:7f:c1:54:56:ed:26:07:c3:b6:2c:93:9d:15:
a2:09:08:04:4d:b0:0c:47:5a:55:9d:87:e5:66:b4:ec:85:aa:
5e:01:e3:4e:14:ef:ce:c7:7b:da:5f:63:bf:1d:57:d9:c8:ef:
4c:50:35:71:9b:6f:c3:3a:49:a5:93:19:d6:6c:4e:96:eb:ac:
10:26:b4:d5:1b:88:c9:84:16:c4:92:55:2e:fb:35:cd:07:9d:
75:c0:f1:7e:5e:17:f3:2c:8d:49:c1:8d:47:bc:7d:0d:1f:e7:
b6:66:41:33:5e:15:d4:c5:7c:9e:9d:ef:8b:4a:67:1a:ea:6d:
f2:84:f1:56:bf:6d:88:2f:4e:ce:bf:e0:94:73:fd:f2:35:d2:
38:2b:80:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:40 2026 by rpki-client