Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
File: cd9sdT6ghb7zcrOSYw90uldpbuU.mft (raw, json)
Hash identifier: yJoQZChK3cRBlzEWsjOCEt2eajAHpghNYIQruG9k4zA=
Subject key identifier: E7:6C:D6:FD:82:E2:D3:AA:A4:D0:2C:E0:2F:B2:AE:05:AE:3B:FC:C4
Authority key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Certificate issuer: /CN=71df6c753ea085bef372b392630f74ba57696ee5
Certificate serial: 019DA41D025B770A6424E1418FDD78EA19B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
Manifest number: 15D8
Signing time: Sun 19 Apr 2026 05:00:57 +0000
Manifest this update: Sun 19 Apr 2026 05:00:57 +0000
Manifest next update: Mon 20 Apr 2026 05:00:57 +0000
Files and hashes: 1: 90fOLXtBv8zjOyjcz26gkbyoNvE.roa (hash: Ru1YTQpQd39yRjLzCahK22aUJjQHLniT2w2j16/8ijY=)
2: GNQd5Bm0mjUJd67uPNG6cQdgvFk.roa (hash: 0ulANNIaOCC2eudb71uMMJn10FX8G4OgvsoxQ5AP27o=)
3: cd9sdT6ghb7zcrOSYw90uldpbuU.crl (hash: rc5kyIHcOBbRgjKOY4yKWCEu8Yvs7xffad9ii1fI//0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:02:5b:77:0a:64:24:e1:41:8f:dd:78:ea:19:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71df6c753ea085bef372b392630f74ba57696ee5
Validity
Not Before: Apr 19 05:00:57 2026 GMT
Not After : Apr 20 05:00:57 2026 GMT
Subject: CN=e76cd6fd82e2d3aaa4d02ce02fb2ae05ae3bfcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:23:33:3a:44:a9:b4:c8:c6:34:59:76:60:
79:29:0d:76:b1:30:0f:5e:fe:d0:07:c1:e3:88:21:
47:e6:55:a6:a9:e3:78:f0:0f:a2:12:84:64:ef:c0:
b8:30:d5:3d:25:85:6d:b4:ec:d4:da:a7:14:83:3b:
cb:b3:92:18:c3:88:3e:02:9d:0c:40:5d:59:84:f8:
6e:d5:ee:c9:e9:da:67:df:4b:d5:14:09:68:7c:51:
10:78:e9:34:70:27:20:e1:0e:1a:c5:21:5f:05:ff:
d0:19:d8:04:b3:2e:3a:9a:cd:7f:10:62:a1:e6:39:
de:30:b6:10:f2:cf:4b:06:92:1c:83:e0:14:e6:34:
98:6b:10:8e:77:f2:6e:a5:cf:e0:77:f4:20:dc:2f:
61:73:d9:83:58:b6:b0:05:25:ec:d6:42:31:aa:8c:
01:83:0c:2d:76:32:a3:81:69:1d:94:d3:59:18:0c:
cb:23:84:d2:0f:06:7c:ff:e4:42:34:f8:9b:a2:fb:
1a:7b:54:a7:cf:ee:ab:69:bb:7c:eb:81:b2:d2:64:
81:40:8d:7f:72:bf:c7:a0:fb:9f:56:c6:2b:be:e9:
33:6e:99:10:0a:06:1d:ec:dc:c1:b1:09:cc:c2:ec:
e9:f6:04:f1:a4:aa:bc:cc:43:32:c3:a6:ad:29:e1:
18:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:D6:FD:82:E2:D3:AA:A4:D0:2C:E0:2F:B2:AE:05:AE:3B:FC:C4
X509v3 Authority Key Identifier:
keyid:71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7a:5b:1f:bd:b1:5b:6d:70:a1:63:47:be:0e:0a:be:17:d3:
47:ce:21:71:2d:45:44:57:38:d8:54:52:74:13:c9:7e:91:c8:
92:4a:a0:73:48:5b:cb:7a:e7:ba:20:b9:e9:44:a9:7b:b2:38:
51:51:ea:c1:62:69:e0:a4:bb:20:9a:cc:fe:ad:cb:bb:3e:bb:
43:08:a1:9a:70:cb:7e:e1:17:88:e4:04:d9:e3:ca:48:b5:16:
c3:56:26:da:f0:62:d9:0f:52:6b:14:4a:f7:94:8e:44:d5:4f:
85:b4:e3:43:4f:a1:4e:fd:d9:8d:f2:57:85:b2:a8:b2:3a:e0:
f2:89:3e:35:6c:44:c6:37:ba:21:06:04:c8:d2:b2:2b:fc:73:
96:d3:50:ec:13:b9:1f:99:4a:8f:20:37:25:0e:4b:c1:66:12:
03:83:11:a1:76:c2:7a:ef:0a:a6:ba:ea:93:03:87:9b:ae:c1:
aa:95:b5:60:33:42:13:73:2a:1d:cd:32:81:8d:85:32:19:1e:
3c:c4:51:48:5c:f3:81:07:8c:55:5e:ea:b1:22:ad:9a:af:0b:
7a:18:63:73:ba:60:f6:ca:ea:30:2d:18:d1:12:8b:29:14:76:
3e:30:ab:37:10:b1:0d:71:97:f2:7b:44:7d:ab:2f:75:43:87:
a5:9a:09:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:46 2026 by rpki-client