Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: WErP5y7hMwqGPKayMtUZmV7QGiiA8kpHbGGS18tlnXs=
Subject key identifier: DA:A8:A0:9D:32:B5:A5:74:42:58:03:AE:40:08:D1:40:8F:F6:D9:F1
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 019D9A06D24254C649D7EC8104CBECF772FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: iJUVVwVMLDoP+Wbc094ueDHvMGiHmr6wj7y9P+xmIRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d2:42:54:c6:49:d7:ec:81:04:cb:ec:f7:72:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=daa8a09d32b5a574425803ae4008d1408ff6d9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:65:ba:fd:74:b7:35:57:df:73:5f:7c:82:
59:66:af:72:1e:88:0d:38:3f:24:e0:5f:b3:fd:c6:
4f:1a:9a:6f:c1:f3:b5:b5:15:75:f3:52:ef:8e:ee:
74:75:52:67:b3:01:4c:16:dc:c5:e2:c9:f1:1a:9e:
70:e3:dc:9a:d0:4d:e2:c5:f2:90:89:64:c8:32:d0:
db:90:09:1d:48:93:e8:47:d9:f5:10:99:48:e6:92:
2c:2a:93:3d:84:58:3f:fa:21:b6:db:58:e8:e7:62:
9f:15:60:f3:4c:be:23:0c:b3:2c:db:94:89:ee:2b:
2f:ef:72:5f:8f:2d:bf:3b:de:32:da:41:a6:0f:70:
b9:ca:d7:53:bb:76:53:44:c3:a0:a0:47:77:e6:73:
4d:2b:4c:43:ac:22:f3:b9:1f:d9:40:cf:66:7f:6f:
68:77:18:54:31:63:08:6b:a3:12:30:f9:2d:3c:a5:
69:c1:d0:32:ef:f5:b0:8e:42:a6:b0:36:e3:98:6e:
53:6c:b2:24:6e:66:de:2d:29:4d:3d:bd:2c:d6:f1:
fd:b7:d2:58:36:84:75:e7:8a:5a:e2:8d:50:df:39:
9b:fa:88:9f:dd:3a:46:46:34:a5:68:50:dd:b3:a6:
c8:77:9f:4b:18:96:54:e4:c5:c6:2c:f1:05:28:85:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:A0:9D:32:B5:A5:74:42:58:03:AE:40:08:D1:40:8F:F6:D9:F1
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c5:25:4f:24:fb:90:bc:91:20:04:e2:71:fa:dc:f3:d5:28:
73:c8:0d:dc:df:ca:6f:d1:7a:4d:de:05:b6:81:f1:a9:54:da:
aa:7a:85:83:5d:61:02:89:43:e4:fe:b8:cc:4a:ca:90:f8:52:
2e:f7:f7:bd:c9:ef:52:1b:c1:60:c1:2e:30:a6:98:15:af:f7:
29:7c:6c:d8:8e:20:62:d2:96:1a:21:09:63:dd:41:78:f2:8f:
fa:20:0a:bf:b7:8c:3b:61:76:55:cb:20:2a:1c:5e:7d:b2:4e:
9a:cf:7a:23:ef:ca:c2:95:14:32:16:55:8b:ec:8c:a0:8a:3d:
2e:1c:1c:54:f4:c2:da:30:12:80:05:ff:35:fb:a2:99:fb:5a:
ce:48:ae:33:40:a9:ec:fc:0e:3a:64:f3:d2:00:65:4d:4d:e0:
20:43:b7:b7:58:c2:3d:e5:ad:13:24:ba:87:ff:9c:2d:6c:e0:
f0:2f:d4:0e:0a:97:cf:d5:2e:8c:cf:cb:33:12:b3:e9:48:f1:
6e:cc:ac:e6:07:1a:39:c6:cc:12:ba:3e:fb:f2:42:76:71:fe:
56:40:1c:8a:cb:61:47:a2:26:ad:71:18:ae:81:4d:48:ea:b6:
4c:a9:a7:f2:6f:dc:ac:a6:b2:99:ca:6f:ef:29:99:2b:d1:a8:
03:d7:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:12 2026 by rpki-client