Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File: pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier: C2zOFhE2af59nhOSeoVrFg88esN+lQGvvbBe8aZMSl0=
Subject key identifier: B2:18:35:5A:C3:5E:BB:2B:AB:DE:A9:A1:CC:EC:8B:52:E5:B5:CF:AD
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer: /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial: 019D9B5083FE0767171C51C1EBAF80794F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:00:38 +0000
Manifest this update: Fri 17 Apr 2026 12:00:38 +0000
Manifest next update: Sat 18 Apr 2026 12:00:38 +0000
Files and hashes: 1: A9Bi8Cx9s5eBAL60l2qMt4h9sE0.roa (hash: AC4LzrIhV3YAzRN5mHN75qp4tUeiM+KW6TE9bEVKoxI=)
2: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: nYCwledxddmy9UsLbCH9CXHjW3QZ6BBunhw42+yNrok=)
3: vdQ8Xor9Vehtiv0Bg_9ca6wd1w8.roa (hash: s2e/NrFq+wqQKph1EQxPVpjpr6FbDPVVUYvD7GykSEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:83:fe:07:67:17:1c:51:c1:eb:af:80:79:4f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Validity
Not Before: Apr 17 12:00:38 2026 GMT
Not After : Apr 18 12:00:38 2026 GMT
Subject: CN=b218355ac35ebb2babdea9a1ccec8b52e5b5cfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:59:c6:34:f8:d6:45:1d:ed:19:1b:ab:e0:
29:48:d8:4d:23:37:8f:43:0e:56:8b:6b:5e:63:d0:
3e:90:85:12:11:23:8a:6b:3a:a5:7b:07:95:6d:5f:
f8:71:48:7c:0f:ca:4f:ff:84:30:20:22:9b:b8:20:
f3:a2:b9:e3:bd:7f:0b:f0:02:a2:a2:44:fd:5a:00:
46:fd:33:7a:89:a0:34:68:3d:06:09:16:70:e8:7a:
da:62:2a:47:fb:94:c5:a6:ba:f2:dd:83:ea:9b:e4:
c1:aa:bb:47:83:76:36:7d:4a:fb:af:58:50:3c:72:
a2:8f:2e:01:0e:14:03:55:9f:69:a3:06:ac:75:a4:
ca:0b:33:45:85:42:5f:20:d8:39:7a:13:6e:33:0e:
da:ce:79:02:4a:ae:4f:4f:2e:5f:97:b6:2b:16:94:
21:29:e2:ff:c3:2b:89:7a:31:92:57:75:a6:9c:5a:
d3:24:58:ff:ec:84:86:e6:4e:74:8a:e7:42:4b:0b:
50:be:bb:e1:bd:25:c6:2d:c7:18:04:fa:89:80:5c:
00:e8:31:0e:74:51:2f:16:fa:e0:28:02:e6:58:a0:
6d:bf:15:9e:ea:a3:c3:27:bf:a3:e0:73:97:db:11:
87:65:b1:60:3b:be:f1:17:ad:bb:9a:e8:dd:08:ab:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:35:5A:C3:5E:BB:2B:AB:DE:A9:A1:CC:EC:8B:52:E5:B5:CF:AD
X509v3 Authority Key Identifier:
keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c3:99:df:35:b8:98:98:47:2e:58:5b:3a:f6:35:0c:ce:fc:
9b:1f:2d:b3:e9:19:cd:a0:71:a6:65:14:39:7e:2f:a3:e1:60:
9d:48:5b:36:ae:e4:e2:9c:c2:74:8d:bc:66:f1:44:d5:76:ac:
e9:28:90:14:3f:72:9e:26:37:d1:f6:a0:6c:cd:0b:fb:35:1b:
97:95:bc:4a:8e:17:8a:22:d6:3c:df:71:c6:a2:88:2c:d9:dc:
90:fd:32:50:34:44:9a:72:63:eb:b0:ef:b9:a4:13:f6:0f:e2:
c5:04:73:0a:79:33:8b:69:8d:ad:c7:4d:1a:f5:2e:d1:a9:1b:
37:ec:08:1e:63:29:3a:93:69:dd:aa:bd:d3:cb:f1:50:00:fb:
5b:b6:39:48:7a:30:1c:d5:0a:16:1d:a8:1e:33:a9:77:29:40:
13:72:7d:40:2b:0b:26:71:ce:de:2d:2f:eb:66:91:e3:ec:e6:
2d:21:56:ae:86:1e:da:82:f7:1a:54:8b:28:14:05:a6:37:91:
e0:78:98:af:c8:6f:7d:13:34:01:3b:bb:97:c3:fe:58:7f:db:
0d:6d:11:b9:c2:a9:07:6f:25:47:89:d3:63:d3:ad:f1:eb:9c:
80:56:c1:62:f0:f9:93:1e:fe:83:e9:f2:4b:ac:54:21:b7:76:
48:9b:e9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:25:53 2026 by rpki-client