Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: geLpzbnfi+2F4xHmvE0E5OjSRrLo97OAWPfRxUXCjco=
Subject key identifier: 09:B2:F2:98:14:C0:04:46:D8:71:61:EA:05:2C:22:CC:01:30:17:8B
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 019D9A070D76ECB5A7D75FD6C3A2AEAA99AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 06:00:46 +0000
Manifest this update: Fri 17 Apr 2026 06:00:46 +0000
Manifest next update: Sat 18 Apr 2026 06:00:46 +0000
Files and hashes: 1: 4AgO9krvR9Pv49d_pcTiefWgZ8w.roa (hash: 7RsIOzFQIt1dJNaDENtwGzoKBTvbkwxPLJd63O+X6X8=)
2: Z3v-SAm3fw6NnIHtD6dU5VOCOP4.roa (hash: v7j7LyN9QjPmbnKNeQyhNxvVR/InX3nLJAUhm3ToZRw=)
3: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: XainXhVGsb/YmIW9LVPp1Y6y7CuVJd+n/Z2HFiDvA04=)
4: rHP4WUAqcSQvgCZtg8_htfcNuko.roa (hash: Mb29TkYRCVH9g/5FuCaCpqq3Nrrav/iSJCN1hGSFHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0d:76:ec:b5:a7:d7:5f:d6:c3:a2:ae:aa:99:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Apr 17 06:00:46 2026 GMT
Not After : Apr 18 06:00:46 2026 GMT
Subject: CN=09b2f29814c00446d87161ea052c22cc0130178b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:81:78:5d:68:4a:db:3e:2f:7b:c4:a8:1d:7e:
63:d2:91:bd:6c:20:63:b5:2e:a9:d3:2d:d1:15:91:
e8:09:3a:c4:28:6e:c3:ae:10:40:60:8f:c6:0a:86:
de:7a:5c:1e:d4:07:70:b8:5d:24:53:f4:fa:af:41:
f5:9e:ec:a0:1c:70:6f:92:e4:9c:8c:ca:35:72:05:
fd:10:f3:50:82:56:65:2e:e1:6f:8d:73:5a:0f:de:
70:58:5e:b0:02:e4:30:f9:7a:92:f9:ad:f7:dd:ea:
54:40:f2:bc:d7:60:76:3b:33:a9:2b:af:2e:46:db:
9b:60:59:d2:6f:53:7a:10:4e:43:e4:03:98:77:c4:
89:34:60:ba:30:f4:47:d0:09:30:7a:90:68:8f:6d:
36:1a:49:2a:30:49:63:11:33:7f:e4:f7:2a:0e:ad:
3c:96:e8:ac:c6:73:49:58:d6:cf:6c:9c:33:d0:dd:
d8:06:a5:01:e6:bb:7c:f5:a8:09:54:5a:17:fd:f5:
d2:cb:c6:59:ea:a4:90:08:b4:6e:87:f4:4f:d1:2b:
d5:c3:79:a5:95:d9:84:e7:49:e6:fa:05:6c:d9:2a:
62:9c:a3:79:9c:1f:7a:f2:27:c1:77:14:61:39:33:
e4:3e:28:5f:73:4f:da:38:eb:c0:85:cf:fb:f9:a7:
f7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B2:F2:98:14:C0:04:46:D8:71:61:EA:05:2C:22:CC:01:30:17:8B
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:f8:9a:54:a9:1c:28:71:82:e4:f1:48:10:d8:23:74:e4:
64:a5:ef:d9:94:d8:aa:8f:e4:82:49:c1:20:9c:d0:2f:ec:c7:
92:ab:52:1b:f3:29:76:88:bc:a7:e9:08:c1:5d:11:7f:f4:d8:
92:49:8d:9c:82:8d:00:b1:ac:4a:c8:46:79:96:e3:cd:da:eb:
c6:d4:99:1f:70:c0:16:b6:72:ac:ad:ba:0c:52:19:0b:25:92:
a1:69:39:f9:a3:3a:d2:fc:8c:b5:e3:d8:63:fc:bf:3a:f3:0a:
6f:62:1e:b6:3e:b9:6c:2c:fa:2a:a1:e6:09:64:cd:71:f6:fb:
dc:a1:41:5f:d7:01:fc:29:9c:6f:54:52:cf:be:e9:b4:59:ce:
30:6d:b7:78:83:b8:3b:28:9b:a4:35:8c:e4:38:90:0e:29:01:
82:d1:b8:06:5e:9e:57:95:f3:48:48:67:93:5b:2d:88:27:71:
af:9a:e6:eb:43:01:a8:f7:07:ae:27:a6:82:47:9a:f0:66:a5:
56:86:85:28:33:b2:42:6b:5d:4e:a3:fb:cf:7e:c8:75:c9:b6:
3b:a6:b3:f2:9e:bb:5a:a2:d6:73:87:2d:44:32:8a:ed:fa:48:
8f:95:c0:1c:be:82:18:32:ff:19:fd:7a:2f:17:1f:9a:b7:23:
1d:5d:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:27 2026 by rpki-client