Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
File: Rns5TPikBRwWfUaLx7iSpx3uTQM.mft (raw, json)
Hash identifier: yyZw6jAyi0F1zE3nvswg6SrBoV2vxJFF5we4fFZxbcw=
Subject key identifier: 33:8B:53:3A:A4:BA:F6:70:FE:2F:AC:50:1B:2E:2D:CA:8A:A8:F8:DC
Authority key identifier: 46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
Certificate issuer: /CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Certificate serial: 019D9A3DEF2810629EFD694029B24573244A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
Manifest number: 0CB1
Signing time: Fri 17 Apr 2026 07:00:43 +0000
Manifest this update: Fri 17 Apr 2026 07:00:43 +0000
Manifest next update: Sat 18 Apr 2026 07:00:43 +0000
Files and hashes: 1: Rns5TPikBRwWfUaLx7iSpx3uTQM.crl (hash: OZrTkIA1SdvWHEtbMDG7WcT8z6bfbLx4MdhkzIB+xy4=)
2: rq0Igngn6mQzQAc5iKtb5wJdTyU.roa (hash: +8wcpot5HIuUBXib66PRvYYuXQtonsS/RRDmfYpMdNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:ef:28:10:62:9e:fd:69:40:29:b2:45:73:24:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=467b394cf8a4051c167d468bc7b892a71dee4d03
Validity
Not Before: Apr 17 07:00:43 2026 GMT
Not After : Apr 18 07:00:43 2026 GMT
Subject: CN=338b533aa4baf670fe2fac501b2e2dca8aa8f8dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a1:d9:7d:05:7a:24:cd:19:fa:7d:35:4f:03:
cc:93:3c:cf:29:69:b2:a9:a6:b1:b6:46:a2:57:4e:
e9:61:46:57:b8:f5:d5:54:35:78:69:e8:af:ff:c2:
e9:56:fd:5f:89:82:02:08:2d:ba:5d:50:74:37:2b:
56:72:23:39:db:50:2e:75:26:93:25:f9:73:c9:8e:
98:ff:be:12:47:cc:8d:97:16:e0:1f:3a:b6:fe:72:
38:90:ed:fd:4c:6f:a4:67:12:fb:2e:ff:9b:5b:5c:
bd:01:02:c7:be:fd:d3:1e:e0:c4:04:f0:8b:36:b6:
2e:78:5d:57:34:bd:01:af:a8:40:4e:02:af:37:94:
e4:78:4f:78:88:09:4e:7d:c3:3e:7f:18:63:08:bb:
ba:d3:a9:55:3f:a1:17:64:53:a3:92:90:94:1a:d0:
fa:8f:86:c6:39:cd:ac:89:9f:af:e3:43:aa:3f:b6:
4c:65:e4:79:6d:50:d4:af:f3:b5:ed:ff:11:8f:fa:
b7:b4:c9:01:3e:22:c0:cc:3e:5a:92:96:b3:a7:61:
26:38:91:da:0d:31:64:ad:f6:f2:8c:db:17:38:71:
6a:70:d5:50:28:07:16:64:77:cd:44:49:7e:e3:59:
0b:0b:de:f4:6e:68:ea:81:f9:84:67:6f:19:a9:47:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8B:53:3A:A4:BA:F6:70:FE:2F:AC:50:1B:2E:2D:CA:8A:A8:F8:DC
X509v3 Authority Key Identifier:
keyid:46:7B:39:4C:F8:A4:05:1C:16:7D:46:8B:C7:B8:92:A7:1D:EE:4D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rns5TPikBRwWfUaLx7iSpx3uTQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35c805-f60c-442c-ac5d-0f01b560657c/1/Rns5TPikBRwWfUaLx7iSpx3uTQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:40:de:8e:85:b3:21:ec:8e:40:3d:bd:0c:77:6c:8c:5b:e3:
31:20:6f:1e:51:63:da:3b:a9:d3:6c:67:28:c5:1d:15:b7:75:
78:05:65:87:a2:1c:39:42:46:13:a6:ec:25:00:05:c3:9a:19:
b7:d7:2a:10:20:41:e4:a1:73:08:d3:18:bc:b9:33:2a:4a:bf:
88:ca:6a:9a:16:5a:84:49:e1:b2:b9:ee:cf:da:1f:26:ae:7f:
92:4b:a5:78:94:3b:e9:ed:f8:04:d4:c3:19:c2:08:86:46:aa:
b8:93:13:cb:4b:44:44:a4:a2:8d:d6:7e:70:1f:9f:65:a1:35:
21:d2:f3:eb:f9:66:66:05:4d:3b:37:58:ae:bf:cd:38:39:91:
f0:fb:85:12:4a:8f:0e:89:89:e5:3b:1f:6c:07:7c:6f:3f:31:
b5:30:89:51:7c:cd:f6:57:1b:c4:4b:98:8a:8c:57:61:81:01:
ec:fb:05:45:35:25:ab:d6:04:8f:aa:fc:c9:ef:7b:b4:71:6d:
53:07:01:13:87:f1:92:6f:f4:b5:5f:b3:cf:b3:10:c1:31:ea:
9c:f2:aa:c6:fd:59:ef:e6:4e:dd:9e:db:4b:ed:1d:fd:0a:0c:
2c:fc:f7:4e:b4:ba:16:e0:f8:75:fe:3e:23:4e:40:37:84:28:
11:e5:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:21 2026 by rpki-client