Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
File: RD7UrkP6GQwQ_SxToQ494KvZi3g.mft (raw, json)
Hash identifier: NOWVcRspGnQ0KmaeNyq4hP8xhscgVclplX31L60rQak=
Subject key identifier: 88:FC:94:B3:A6:F4:60:80:CE:CF:38:CE:B1:B9:E6:BC:E0:22:82:BC
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 019D9BBF4640FE190535317F718728B7119F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
Manifest number: 1238
Signing time: Fri 17 Apr 2026 14:01:36 +0000
Manifest this update: Fri 17 Apr 2026 14:01:36 +0000
Manifest next update: Sat 18 Apr 2026 14:01:36 +0000
Files and hashes: 1: RD7UrkP6GQwQ_SxToQ494KvZi3g.crl (hash: OtGIKvCo4icTjrA/egE7yeMjgmNg2KmDKBzb4OAn+68=)
2: xbkHK9BjxqqWppD29--gfkSmovk.roa (hash: hkkQkmlB4qFZaOaawyBYcXjPEkqDqcjHyvxZakCPMVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:46:40:fe:19:05:35:31:7f:71:87:28:b7:11:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Apr 17 14:01:36 2026 GMT
Not After : Apr 18 14:01:36 2026 GMT
Subject: CN=88fc94b3a6f46080cecf38ceb1b9e6bce02282bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:a1:7b:81:11:11:a5:09:bb:69:d6:28:2d:
ed:e8:5d:b5:fa:3f:81:9d:01:03:cc:a3:e5:c8:36:
6c:58:57:bb:97:6b:c3:94:0e:b4:e1:5e:58:ec:e8:
a0:d8:db:19:b2:6d:72:b6:30:1f:92:10:d7:f5:42:
f6:df:34:fe:23:6c:1b:07:42:3a:5d:3f:18:90:c4:
12:82:e2:ca:83:ba:6c:2a:d5:ee:96:6d:ad:7e:17:
0c:30:b9:0d:75:13:cd:53:d8:e9:3d:2e:a0:0d:70:
65:42:3a:22:3f:10:ff:b6:d4:43:d0:6f:ba:83:67:
8b:d7:db:b3:79:aa:a5:ab:48:5d:e3:5f:40:c0:26:
fb:b3:88:03:a8:68:8c:47:51:bd:e2:96:8c:14:3d:
53:fb:39:c6:61:88:34:be:00:34:15:83:c2:64:37:
4e:f5:b7:77:7c:be:f3:e6:3e:9c:0d:dc:49:04:38:
07:24:76:69:49:20:57:f5:09:6a:7f:ee:61:22:e7:
07:dd:c1:07:cc:d6:5f:b1:cd:5a:9f:71:33:fe:42:
f2:13:d3:41:f6:3a:0d:70:1f:0b:a8:71:4e:67:f0:
3c:d2:2a:c2:35:34:02:d0:17:4e:73:a2:d6:59:c6:
db:38:0d:8b:03:6a:9f:db:2e:01:af:e3:fe:f5:aa:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:94:B3:A6:F4:60:80:CE:CF:38:CE:B1:B9:E6:BC:E0:22:82:BC
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:65:a0:d3:1f:01:ef:0a:b4:ea:b3:a6:a5:8c:5b:2b:57:a0:
52:ef:4c:3a:81:6b:ae:73:30:c3:84:02:c4:f9:ed:bc:eb:7e:
da:44:9b:ae:bb:e2:73:61:76:a1:7a:68:ab:9a:35:79:59:c7:
fe:28:4f:50:ff:f8:08:15:9e:e2:0d:c6:69:f4:4e:23:e3:81:
ee:7f:0a:2a:74:70:cb:63:14:f8:75:17:62:9e:d4:b1:e0:8c:
f0:8d:80:5c:76:2a:f0:07:1f:65:d9:32:62:52:23:27:66:94:
ab:b9:18:24:10:72:0d:d1:3e:8f:29:5b:98:47:3d:1b:dc:b5:
0e:16:d0:31:90:d6:d4:85:78:46:47:b8:f2:0b:38:aa:c1:a7:
f6:aa:d5:60:30:cd:2b:42:08:a5:65:67:11:ff:3f:78:3b:dc:
1e:af:53:26:47:02:f5:b5:33:b4:d3:8d:d2:ae:4d:0d:c5:38:
bf:eb:c1:64:6e:bd:67:82:77:92:3e:b5:37:e3:ad:33:20:f7:
54:79:fd:ef:a0:5c:c7:2c:eb:f6:1b:1d:a6:70:be:df:c4:ba:
24:71:d5:51:dc:c8:2c:40:d6:4d:e8:44:14:3f:61:74:ae:03:
b1:5c:51:04:be:b8:b8:84:b1:81:26:dd:2d:18:c9:45:4f:a9:
df:38:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:04 2026 by rpki-client