Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
File: C40btyeRyHhVDRudj-9WSsORk2g.mft (raw, json)
Hash identifier: 0W8wKQtLCygFarQnvyleBTrgMnwIPUY1Cq7Z6GQeHYw=
Subject key identifier: 79:8F:7D:F3:37:8F:40:EE:A0:A7:FC:9F:8C:EB:61:7C:05:F3:B2:0D
Authority key identifier: 0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
Certificate issuer: /CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Certificate serial: 019D98F535BF838DA97E341575779E91259E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 01:01:39 +0000
Manifest this update: Fri 17 Apr 2026 01:01:39 +0000
Manifest next update: Sat 18 Apr 2026 01:01:39 +0000
Files and hashes: 1: C40btyeRyHhVDRudj-9WSsORk2g.crl (hash: 5DR414mNusndWE5WQeyb883lr32cTKL6nMaUEMLclXs=)
2: Qa6RJH6f6AObfXnYHZk2ZbGY_Jw.roa (hash: 12noZ/f5LNR3FAN+7NihJMDkGNqm7rdo2dgUz2FcRAA=)
3: xkSfXUS5_IXxCWIv_KZRXInDfVE.roa (hash: 4czKDen2jZvQIkigei8J1hEAX7SZ6qL0Ml4QQ5tV1W8=)
4: yORjc6g5_P74iVLlxKlbrUIAnbM.roa (hash: pumjnge9qZ/SonFEAFuEIk8CBDJMVwBQHqpzy07YUrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:35:bf:83:8d:a9:7e:34:15:75:77:9e:91:25:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8d1bb72791c878550d1b9d8fef564ac3919368
Validity
Not Before: Apr 17 01:01:39 2026 GMT
Not After : Apr 18 01:01:39 2026 GMT
Subject: CN=798f7df3378f40eea0a7fc9f8ceb617c05f3b20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:05:45:1b:df:64:39:f6:d4:75:74:a4:48:
75:2f:1f:a3:5b:5c:46:c4:5f:63:53:8c:e7:26:a3:
57:9a:0c:4e:f0:eb:e8:e5:f0:5e:1a:7a:cd:d0:47:
e0:1c:f3:0c:dd:04:6b:a0:0a:1b:37:77:dd:2f:6f:
f5:29:66:f0:fd:a3:d9:64:8a:68:f5:ca:ab:15:41:
d9:92:a0:fd:bb:f8:48:4e:51:3e:aa:1b:55:27:80:
91:d3:84:49:02:9a:38:7d:d6:4e:2a:2d:62:2e:0f:
2f:cd:22:85:d1:2b:70:0e:89:24:bf:05:c1:c7:ac:
48:f5:ff:4c:d8:b6:10:a9:fe:2f:76:3c:4f:6a:15:
c8:f1:95:b2:bd:22:ea:e6:ce:75:66:7e:36:28:9f:
b4:f0:51:13:88:47:9a:8e:01:a7:10:2d:27:ff:d3:
c5:25:45:49:b7:cd:f3:60:fb:e7:b3:39:a3:2d:4a:
5e:0e:20:ef:b8:27:6c:81:48:9b:b1:9e:20:08:1f:
8e:fa:e6:0c:06:c1:d6:06:ec:1d:96:6f:d6:f2:26:
17:16:17:7a:76:d0:7f:35:1f:ee:00:64:b1:81:37:
25:a0:22:b4:aa:1d:6e:82:26:4f:0b:b1:eb:c4:f1:
33:aa:bd:9e:ac:5b:13:b3:f2:ed:6d:d2:83:a3:e9:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:7D:F3:37:8F:40:EE:A0:A7:FC:9F:8C:EB:61:7C:05:F3:B2:0D
X509v3 Authority Key Identifier:
keyid:0B:8D:1B:B7:27:91:C8:78:55:0D:1B:9D:8F:EF:56:4A:C3:91:93:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C40btyeRyHhVDRudj-9WSsORk2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/0367d0-fa85-4546-b84c-0278c5dc1491/1/C40btyeRyHhVDRudj-9WSsORk2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:88:a4:6f:a8:27:87:0c:f6:65:36:d1:07:1f:e7:b0:3a:32:
bc:69:66:b2:7f:74:2b:aa:73:34:09:0e:9d:b3:b8:4a:dc:0e:
54:e2:8a:5f:09:9d:ca:9a:99:7d:28:0a:db:80:f9:51:59:0e:
87:88:48:a7:03:e6:c7:e3:f5:75:13:9a:bf:97:04:4c:9c:e3:
e9:f8:a6:e3:89:9a:50:b8:c9:07:ab:b1:07:69:2b:b9:d6:fc:
a5:ce:89:1b:61:59:f5:2a:f0:a6:d1:ec:59:d8:9a:e4:36:13:
b7:ef:68:d7:ff:d6:62:e0:51:3f:b2:b2:ba:05:ca:c5:ca:d9:
86:47:ad:72:a6:ad:6c:1b:91:e5:d6:75:17:9d:5d:94:b9:e0:
a1:aa:78:aa:e7:70:2c:6d:5c:e2:e5:b3:fd:a8:69:71:70:4f:
52:d2:a0:e1:a9:de:7b:7a:fb:67:c5:d5:eb:ef:01:8b:81:22:
b3:30:7e:1f:5b:73:23:5f:da:d3:b3:79:4e:e5:55:af:21:31:
2f:59:17:b8:86:eb:59:3e:a7:0a:6b:c5:64:98:0b:54:a3:d0:
18:18:a7:30:51:18:b3:81:6c:da:4f:76:5a:d6:6f:47:64:77:
32:dc:01:d5:7f:a5:bd:d0:f5:be:e8:03:d9:c5:ee:99:ff:b8:
9f:10:c1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:41 2026 by rpki-client