Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: VWd/RE8Kog5+ip80NcGaGy8Qch0CoDiPM4mE/TB3Bfg=
Subject key identifier: 20:80:E4:1D:3F:B7:92:DC:60:C5:A8:47:BB:DD:6A:D3:CC:51:8E:A5
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 019D9B50834FF9869620C29E02C5B2960798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:00:38 +0000
Manifest this update: Fri 17 Apr 2026 12:00:38 +0000
Manifest next update: Sat 18 Apr 2026 12:00:38 +0000
Files and hashes: 1: PtYo6MwEWy1vpndhzACUN02erEo.roa (hash: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: A4hrqUdD8TZcN0oeHLOP2yy/9asWcohXXWJ1hVKgmNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:83:4f:f9:86:96:20:c2:9e:02:c5:b2:96:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Apr 17 12:00:38 2026 GMT
Not After : Apr 18 12:00:38 2026 GMT
Subject: CN=2080e41d3fb792dc60c5a847bbdd6ad3cc518ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:5f:65:34:3c:46:9c:40:b1:43:50:63:73:
63:55:e0:17:33:19:de:ca:d5:ec:f7:a7:94:f5:94:
28:60:49:54:3b:a1:b4:54:5b:6c:b5:fc:9d:6a:9e:
b9:38:be:d2:e5:1d:b8:06:c8:79:f2:b8:18:f2:b3:
4e:e5:6a:c8:1c:f6:1f:b7:b5:ea:9e:cb:42:d0:83:
d5:f3:99:03:d2:01:ee:22:19:df:b2:ef:a7:cb:dd:
e9:38:85:f3:f8:6a:79:83:c0:bb:ba:9a:05:8f:e4:
ee:b1:f3:f4:6c:a1:41:bf:66:93:d3:66:a1:be:f3:
54:7d:f9:e7:d1:c0:6d:f0:95:4e:5b:ad:2d:b2:71:
f1:10:e7:4a:a2:7c:87:17:c3:0f:e4:47:e5:e9:c9:
6f:0d:cb:9d:87:5a:0c:d5:89:cc:e2:21:34:02:3e:
52:9b:29:3a:66:53:93:26:4a:ab:50:d1:33:d7:1c:
6b:22:53:b2:1e:03:c9:4e:a4:3a:50:d5:6f:41:05:
29:fe:bd:6b:db:59:28:86:91:79:99:5a:74:88:1f:
eb:c0:ea:d9:24:e5:99:b2:e9:49:bc:f0:bb:8f:a8:
39:9f:bf:94:7c:aa:52:6b:b1:39:f5:a6:d2:9f:bd:
50:6b:a7:82:28:7a:f3:c4:d9:ca:00:74:99:7b:d6:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:80:E4:1D:3F:B7:92:DC:60:C5:A8:47:BB:DD:6A:D3:CC:51:8E:A5
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:47:71:13:c3:23:ba:20:c2:36:c7:96:b6:ba:8d:6f:07:2f:
61:35:16:1f:5f:e4:59:cb:ed:59:09:6c:9e:64:44:cf:06:3d:
74:27:2c:c8:c2:ef:a5:2f:3e:bc:2c:a4:32:44:c8:02:04:19:
d0:00:2a:50:56:17:18:15:62:bc:0c:a1:82:37:ff:2c:36:f8:
d6:50:e1:e4:d6:e6:f0:53:9a:a6:5f:c7:30:12:e2:9c:4a:a7:
c6:85:fe:8e:9f:50:8c:d1:63:c3:bd:7e:1e:0e:23:8d:06:c1:
1c:07:a0:78:7f:b3:95:ca:f2:db:9d:99:a5:69:6c:4a:d3:97:
14:c0:db:c5:0d:f2:b9:bd:82:dc:07:67:36:65:ab:f9:e2:d3:
fb:50:44:65:e3:62:5c:90:b5:f1:ae:dd:2e:d8:55:22:4b:9c:
0f:45:07:09:a9:ca:96:a5:43:86:18:cb:d7:ba:b3:93:b4:9a:
0c:07:7f:ee:e9:81:5c:90:ec:f7:48:a2:74:2c:94:2a:e8:e0:
da:3c:68:e8:ed:56:4a:1a:aa:08:20:dc:0c:2d:f5:0b:7d:3f:
85:37:19:4c:8c:07:9d:e4:48:83:bc:1d:b9:df:a6:de:41:77:
cc:3d:2a:6f:dd:c0:e4:26:a5:fe:40:de:71:17:d3:67:9b:29:
00:81:40:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:02 2026 by rpki-client