Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: GnGp8iuSbg2SY207Z4UN67xRznz7NGqObY3oGyVVcYc=
Subject key identifier: 18:7E:0B:2A:89:F9:2D:FF:81:EE:D3:71:5D:4D:96:0E:ED:D3:45:74
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 019DA41D122D674DACFF88F047ADB9D7756D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 05:01:01 +0000
Manifest this update: Sun 19 Apr 2026 05:01:01 +0000
Manifest next update: Mon 20 Apr 2026 05:01:01 +0000
Files and hashes: 1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: TfKjhnrEAxO35YWejcQ2bY1rRqttVKKAADB4ws+6IJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:12:2d:67:4d:ac:ff:88:f0:47:ad:b9:d7:75:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Apr 19 05:01:01 2026 GMT
Not After : Apr 20 05:01:01 2026 GMT
Subject: CN=187e0b2a89f92dff81eed3715d4d960eedd34574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bb:26:25:88:bf:f2:e8:57:dc:ab:c0:e9:4f:
82:6d:52:69:76:28:5a:c3:b9:ad:ab:34:27:3f:31:
f6:25:58:5b:a4:be:ad:ea:d2:9c:cb:57:9c:8a:b8:
62:6c:a7:77:b8:28:df:f7:a5:6d:51:76:9f:30:0b:
49:3f:f8:19:24:b6:c2:c8:59:ba:a6:e1:62:74:61:
9b:68:a6:10:ee:ff:d2:5d:21:6a:b7:1f:b2:3e:e2:
01:15:67:b5:fe:1e:86:6f:e5:df:57:85:b5:99:c5:
5b:65:b0:2e:48:aa:5a:a6:7b:a1:26:73:ae:6c:d4:
d3:cf:74:22:e5:60:2e:4a:90:44:17:fa:fd:58:1d:
b0:14:9f:70:3b:98:be:ae:4d:84:00:59:fe:76:fc:
15:9b:40:e3:b6:86:af:98:40:0f:ba:05:2e:9b:c2:
20:bf:bd:23:ac:5c:6e:04:f6:37:b4:17:5e:d5:81:
1e:89:a4:6e:a4:83:fc:5a:be:2a:84:28:bd:e8:28:
b6:7c:65:b9:8d:68:5d:e0:24:05:d4:6a:07:96:24:
80:65:06:d4:35:21:1e:c4:bc:d1:18:dd:e4:55:bc:
b5:17:ed:09:1b:75:4f:59:f4:3f:26:49:f9:69:ea:
56:9f:b8:31:26:9b:ec:10:c0:5c:97:3a:2a:be:31:
5a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7E:0B:2A:89:F9:2D:FF:81:EE:D3:71:5D:4D:96:0E:ED:D3:45:74
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:27:f4:46:f6:dc:b3:1e:b1:5d:40:05:49:71:a5:a9:f1:ee:
21:aa:40:7b:c6:f4:a9:79:fe:6c:05:e6:73:09:43:e3:69:50:
a6:af:42:c4:77:c4:c7:58:b9:2d:eb:f0:86:6c:f6:78:54:8b:
b5:a7:ea:ea:d8:f7:c6:96:48:5b:83:8d:66:48:5c:c9:67:0e:
a9:67:c6:fd:16:73:6e:d8:c9:ec:83:c4:f1:b5:2b:12:be:e0:
07:45:b3:47:47:31:91:38:cb:ab:11:90:0b:7c:d1:0b:2b:d8:
d6:67:0b:5e:38:77:d8:30:94:eb:72:15:83:2c:62:60:d3:a7:
56:8b:6c:6a:2b:68:92:ad:80:7b:6a:9c:02:de:b4:5d:05:4a:
0b:a7:ba:ed:34:b1:24:20:ad:6f:37:3d:38:36:0b:1d:54:b2:
6d:d5:58:21:5e:b4:07:f1:15:4f:2d:75:dd:be:51:d7:7c:7e:
d0:0b:74:f6:11:86:d5:c4:0b:51:4e:fc:69:72:97:6a:48:7c:
a0:b8:6d:e8:d9:dc:52:1c:c9:53:83:10:d9:01:85:5d:d5:2b:
e5:18:4a:d5:b3:6f:c2:65:2f:bf:e3:89:eb:d0:f0:f4:3d:db:
20:c6:1b:59:2b:5b:d8:a1:62:08:da:15:7b:e1:9b:c5:da:7e:
4b:2c:e8:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHRItZ02s/4jwR62513VtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw
NTYzZjgwHhcNMjYwNDE5MDUwMTAxWhcNMjYwNDIwMDUwMTAxWjAzMTEwLwYDVQQD
EygxODdlMGIyYTg5ZjkyZGZmODFlZWQzNzE1ZDRkOTYwZWVkZDM0NTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rsmJYi/8uhX3KvA6U+CbVJpdiha
w7mtqzQnPzH2JVhbpL6t6tKcy1ecirhibKd3uCjf96VtUXafMAtJP/gZJLbCyFm6
puFidGGbaKYQ7v/SXSFqtx+yPuIBFWe1/h6Gb+XfV4W1mcVbZbAuSKpapnuhJnOu
bNTTz3Qi5WAuSpBEF/r9WB2wFJ9wO5i+rk2EAFn+dvwVm0DjtoavmEAPugUum8Ig
v70jrFxuBPY3tBde1YEeiaRupIP8Wr4qhCi96Ci2fGW5jWhd4CQF1GoHliSAZQbU
NSEexLzRGN3kVby1F+0JG3VPWfQ/Jkn5aepWn7gxJpvsEMBclzoqvjFaVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBh+CyqJ+S3/ge7TcV1Nlg7t00V0MB8GA1UdIwQY
MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt
MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1
LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyf0Rvbc
sx6xXUAFSXGlqfHuIapAe8b0qXn+bAXmcwlD42lQpq9CxHfEx1i5Levwhmz2eFSL
tafq6tj3xpZIW4ONZkhcyWcOqWfG/RZzbtjJ7IPE8bUrEr7gB0WzR0cxkTjLqxGQ
C3zRCyvY1mcLXjh32DCU63IVgyxiYNOnVotsaitokq2Ae2qcAt60XQVKC6e67TSx
JCCtbzc9ODYLHVSybdVYIV60B/EVTy113b5R13x+0At09hGG1cQLUU78aXKXakh8
oLht6NncUhzJU4MQ2QGFXdUr5RhK1bNvwmUvv+OJ69Dw9D3bIMYbWStb2KFiCNoV
e+Gbxdp+SyzoCw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:17 2026 by rpki-client