Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
File: 01Cgds5KjOb7afH9pKGUYUqUGvo.mft (raw, json)
Hash identifier: JPeYGDh1xCVeq9j+NXTrkLOcSGnT1L4rC7rUBAkXp0M=
Subject key identifier: C7:D2:8A:16:A8:02:9C:77:9A:1A:D7:31:77:41:19:85:A4:52:B6:17
Authority key identifier: D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
Certificate issuer: /CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Certificate serial: 019D9962D4B0F9A09D5AD7370EA3D44EAE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 03:01:23 +0000
Manifest this update: Fri 17 Apr 2026 03:01:23 +0000
Manifest next update: Sat 18 Apr 2026 03:01:23 +0000
Files and hashes: 1: 01Cgds5KjOb7afH9pKGUYUqUGvo.crl (hash: 7ZHwNM+rIHOpeFqgs+fx+q2ZUD+9n51vl3i+jOlssYU=)
2: EkysD1nuSYyDinbnDahfH-VyT0k.roa (hash: I2/OA/U368nOnLRCtdWjPsJgwSqvtccdxmLHw2kJW9Y=)
3: RbJbPNiBU0kAmqUheDo0szIBjek.roa (hash: CTVJkxKyBFMb7b5JJrpF23blu0aI0z8ZUdPB6VOt7qQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:d4:b0:f9:a0:9d:5a:d7:37:0e:a3:d4:4e:ae:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d350a076ce4a8ce6fb69f1fda4a194614a941afa
Validity
Not Before: Apr 17 03:01:23 2026 GMT
Not After : Apr 18 03:01:23 2026 GMT
Subject: CN=c7d28a16a8029c779a1ad73177411985a452b617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:69:7c:36:1b:bc:e1:2a:7b:b9:5b:8d:86:
bc:65:c9:c2:d3:92:de:be:e7:65:ce:f9:96:20:00:
da:72:c4:34:fe:97:36:1a:9b:5a:17:d0:d2:59:ae:
1f:db:df:c5:1a:bd:23:05:ad:27:d4:1d:ab:98:dd:
fb:ea:6b:43:28:62:bc:9e:45:a9:0f:f1:39:d7:c4:
60:db:0f:1e:09:7b:97:ab:b3:f8:2f:58:7b:5b:7b:
7e:d6:09:e4:ed:90:20:c3:2e:be:0e:59:08:91:c2:
cd:cb:61:31:e0:cb:41:5a:5c:f8:cc:38:ae:d0:e5:
4e:83:bc:e1:14:8a:7e:dd:82:2f:99:a0:95:f4:f5:
11:53:fb:0a:94:83:5e:4c:98:2c:78:ef:b9:7d:03:
82:c6:c3:a0:95:fa:a4:b1:5e:30:7a:94:ae:01:12:
61:7c:61:1a:19:15:5f:7c:61:4c:e2:37:67:e6:de:
9b:1e:7d:08:b9:4d:72:c0:07:75:b8:aa:23:e2:89:
32:eb:70:f6:7e:ed:4c:91:9f:10:6c:ee:01:8d:40:
97:7a:d5:05:ee:a5:b0:01:86:00:69:c2:e4:cb:a3:
f1:71:e6:24:06:de:5b:4e:be:6c:df:8c:50:d5:2b:
f2:42:e7:95:7c:14:b2:cd:42:7f:30:8b:68:6a:db:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D2:8A:16:A8:02:9C:77:9A:1A:D7:31:77:41:19:85:A4:52:B6:17
X509v3 Authority Key Identifier:
keyid:D3:50:A0:76:CE:4A:8C:E6:FB:69:F1:FD:A4:A1:94:61:4A:94:1A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01Cgds5KjOb7afH9pKGUYUqUGvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3cac6b-2c2a-4b66-adee-d52325de6b08/1/01Cgds5KjOb7afH9pKGUYUqUGvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b0:c4:51:13:99:ea:66:b1:59:d4:16:2f:d8:5c:95:08:c3:
65:50:c6:33:ce:c2:45:85:bc:29:d9:23:41:04:f0:3a:e3:91:
df:c7:26:ff:7b:ba:a8:b0:18:ed:4d:20:f5:14:18:2b:42:e8:
37:33:f3:00:3c:c0:89:86:a2:a5:2a:bb:c0:e7:ff:10:09:d0:
b6:9e:e7:5e:27:d5:e7:39:8b:75:87:b8:00:1d:a7:d2:6f:0f:
4e:dd:e9:ab:5f:58:7a:9d:0d:73:87:84:1e:27:16:4b:ef:c6:
bc:35:ee:b2:cf:7b:82:64:7f:37:92:aa:a6:b9:da:68:29:d5:
fd:db:ba:77:7a:b6:6f:f3:41:9e:95:af:9f:a0:f2:05:95:32:
c6:88:3f:5e:a2:e1:3b:40:e2:d9:32:22:86:b4:e8:08:c5:e5:
52:48:e4:57:5c:18:bf:b2:ed:b9:c3:a9:00:5d:b0:88:eb:3d:
bf:57:a0:42:9a:f4:72:28:4e:11:f3:de:b6:a0:98:e8:94:ca:
f6:8a:62:d8:5b:74:12:2f:3d:39:ee:2c:4c:e2:5b:7d:36:0e:
98:e4:bc:fd:60:c5:66:78:29:83:4f:d3:0d:83:c3:dd:28:d1:
45:58:7e:bf:c2:1f:2b:26:ab:40:3a:81:b8:c6:b8:f8:e6:85:
82:42:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:12 2026 by rpki-client