Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File: T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier: C7c8h1yw5L1WyA1pI1FCOcciovulanDudNWnQAIfi6M=
Subject key identifier: 6F:3C:2C:39:53:D1:5A:0E:73:81:85:C0:F2:D6:27:09:01:7B:2B:72
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer: /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial: 019D9A3EBF0064A3CAFAF860755AA02FE7DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:36 +0000
Manifest this update: Fri 17 Apr 2026 07:01:36 +0000
Manifest next update: Sat 18 Apr 2026 07:01:36 +0000
Files and hashes: 1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: cxAOdNaTM28kPrllNOO4Vj3jCeOU+d+APxhfx+UZqe4=)
2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:bf:00:64:a3:ca:fa:f8:60:75:5a:a0:2f:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Validity
Not Before: Apr 17 07:01:36 2026 GMT
Not After : Apr 18 07:01:36 2026 GMT
Subject: CN=6f3c2c3953d15a0e738185c0f2d62709017b2b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:a2:a5:93:96:f5:b7:e8:8a:2c:45:fb:48:
fb:f3:85:95:b7:57:7c:f6:12:dc:88:0d:c3:16:5b:
d8:a4:f3:b1:d9:dd:bc:f5:95:01:90:57:aa:3f:7e:
68:e6:80:ce:8c:3c:83:b0:d1:79:b1:30:35:b0:7a:
b1:a2:ba:72:7a:46:b2:11:0b:14:68:30:5c:e8:a0:
ee:d7:45:11:47:68:11:c6:cc:75:73:22:9b:44:0c:
cc:24:cd:4c:9f:c6:80:75:69:c3:df:e9:6f:43:ae:
23:af:29:6c:40:b8:7c:2b:d6:29:7e:e3:0e:49:16:
ce:7d:47:13:31:e2:e9:12:0d:cb:37:41:7a:4b:12:
ff:f5:d7:d7:ce:41:16:28:a7:36:b9:83:65:a2:18:
e5:d9:97:ac:26:f9:30:23:e6:e6:bb:ef:f9:21:3c:
9c:1c:c8:d1:d5:1c:82:16:dc:58:c2:1a:a3:1c:84:
52:70:3d:28:5a:68:6a:33:9d:46:a0:2d:01:50:eb:
68:d2:45:fc:35:3a:82:65:88:f2:69:90:d7:58:ca:
43:d7:db:35:96:5d:22:f6:90:39:35:7d:1c:91:97:
cc:8d:70:97:12:e1:4f:57:02:00:56:82:08:d0:7f:
6c:fd:7e:a6:9d:8a:b8:98:80:aa:16:9e:99:9c:9f:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3C:2C:39:53:D1:5A:0E:73:81:85:C0:F2:D6:27:09:01:7B:2B:72
X509v3 Authority Key Identifier:
keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4c:8d:8d:81:3e:b1:d3:42:29:31:be:09:89:5a:3b:b4:e5:
4b:14:9a:21:1d:f5:c3:ed:d5:8a:6b:52:d4:d9:de:40:80:51:
bb:84:cf:c1:97:b5:6c:2e:f8:11:62:ef:0f:51:85:71:74:0e:
25:bf:b6:9b:79:49:23:c2:30:25:3c:1d:85:90:e5:77:3d:89:
47:15:e5:46:61:a2:3b:2e:b5:fb:dc:31:3d:73:6c:4c:68:aa:
f1:30:3c:56:a5:66:52:54:ed:2c:cc:bb:d3:36:93:9c:86:76:
ee:d1:2b:39:8e:6c:19:3f:53:42:e8:b5:cd:9b:09:3b:ef:21:
3c:aa:34:57:33:ce:f8:9f:34:17:95:76:e7:65:23:f6:49:3b:
d0:ef:db:32:00:58:f0:f1:47:12:ed:12:cf:39:f4:c1:69:64:
7f:06:65:dc:e5:68:b9:d3:70:34:d7:b6:72:69:55:0b:ac:43:
bd:5a:a6:16:6c:93:48:fa:d2:86:ce:cf:a0:64:64:bf:35:1d:
eb:fb:ef:df:c3:3d:f6:6a:a4:ae:ea:8e:07:1c:f1:2e:0a:2b:
b2:a8:86:2f:f3:70:2a:94:59:13:7d:9c:2f:6a:7f:b0:1f:f1:
14:90:cb:90:be:ca:d2:a7:6e:3a:23:f0:6a:54:8d:98:a0:4b:
d9:a1:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:08 2026 by rpki-client