Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
File: RFbBTNhyT5qQlie5TgBs9p0SMHs.mft (raw, json)
Hash identifier: LeklJw4O/ijYun1VWMEhKjT/AkH7zClswfWyY+P/DKY=
Subject key identifier: B7:54:CD:59:6D:0F:70:FA:AD:B0:4C:BE:A3:1B:51:3B:EE:46:AB:6D
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 019D99D009E521EF385CEB412FC2827E0084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
Manifest number: 12C6
Signing time: Fri 17 Apr 2026 05:00:41 +0000
Manifest this update: Fri 17 Apr 2026 05:00:41 +0000
Manifest next update: Sat 18 Apr 2026 05:00:41 +0000
Files and hashes: 1: C8ndRUP4mG5i6Z7S5iDRwDHVA7s.roa (hash: x5nMtbiYKs0LuaiMOIAvyWWd3XFr7UWf1LhYWiYg0uo=)
2: NVB0QUSWgn0ALHFZa2k8iucL56s.roa (hash: SyvOCJbzAEZ79Mu8MDdowadmy7cSY/kE23r919PmAwQ=)
3: RFbBTNhyT5qQlie5TgBs9p0SMHs.crl (hash: /hqHYGNMxJib0QcNkN9Cvbm3kqyvWsx4lFdRQ9V0WKU=)
4: UE4weRulHKd2U5hzedQBoBdW7EU.roa (hash: DosbwlBCkgxdag2oJAnKZZvqZ/yPmW0ETRIlz2+CQ04=)
5: WZPhvrVWJ7TbYiNT2ZcXtbK7KLw.roa (hash: gT6kAy3QC3WFVHTaMinwFIa4C3kHsmkq2W1J4go59R8=)
6: ZSIuTwmYgVcQgO6LO0MnL_67E1E.roa (hash: oy/YErxqFRT8VyOcydqK3d11iP1CeKQirD3giIZVXPc=)
7: eFwfcJ8TYubsvnJGV3ToNuHTt0E.roa (hash: 6yiyUfT0vs7d3osCrcXjtKOvrYeh/el2zH8u6misslY=)
8: ed8yDMGRECTMaD8k-df_wcQHSQA.roa (hash: cwhw+g6gV0Cc1yz+CyTGqM6EEaAW5Bb5GiWG5Dbv1YY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:09:e5:21:ef:38:5c:eb:41:2f:c2:82:7e:00:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Apr 17 05:00:41 2026 GMT
Not After : Apr 18 05:00:41 2026 GMT
Subject: CN=b754cd596d0f70faadb04cbea31b513bee46ab6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:a3:65:e1:a0:97:65:85:59:6a:f2:ff:46:
9c:2b:2b:77:c0:9d:7b:85:82:77:ea:d6:0d:e5:1b:
ef:c3:88:98:f5:f6:db:43:fa:63:d5:af:08:e9:55:
31:06:be:58:d5:f8:ce:41:9e:ce:13:d9:ce:e9:6b:
f1:48:be:98:cc:ca:57:e2:b2:a5:cf:97:7c:c6:fd:
f1:26:66:ff:f0:99:e4:70:0f:4a:a8:11:14:7d:6f:
89:28:78:ac:6b:c1:57:4f:b7:68:86:53:a2:f2:c3:
9e:7e:37:e3:b6:a4:50:19:50:06:ac:b8:e3:5d:a7:
16:7e:df:c8:03:d2:8d:65:a3:4f:ed:e0:52:54:93:
7c:df:9f:4c:6e:8a:f3:ff:33:80:1b:2e:0e:1c:f7:
32:69:e5:f4:79:a5:cb:ec:cb:4c:ad:d1:6c:68:6b:
cc:85:7f:81:4e:55:88:00:5c:b5:29:d1:76:5c:5f:
e6:09:12:f4:41:5d:cd:28:6f:b2:fe:b4:35:22:c3:
e8:27:9b:ad:a1:41:e9:ec:c9:17:2d:b1:ab:23:92:
ee:2e:da:e0:ec:df:a1:9e:1f:69:c2:6d:28:13:24:
44:bb:5e:be:97:60:dc:5f:fc:fd:53:fe:b5:a0:64:
07:43:f8:76:24:de:92:43:13:e7:10:7f:8f:58:dd:
af:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:54:CD:59:6D:0F:70:FA:AD:B0:4C:BE:A3:1B:51:3B:EE:46:AB:6D
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1a:31:65:01:6d:c4:ce:7f:e4:af:6f:c0:8b:b1:07:5f:13:
59:c8:3d:b9:fb:e6:fd:0b:95:c9:12:9f:28:a4:b9:e3:ae:1b:
dd:72:1a:31:4f:80:b2:04:f6:d3:0a:0c:b1:e3:8b:82:5d:f8:
74:d1:b2:1e:71:81:dd:ab:7b:73:b7:ce:85:10:f6:44:cd:66:
e8:83:b6:64:37:a8:a8:42:13:3e:ca:3a:e2:89:77:84:89:46:
1e:61:35:6b:9f:04:90:2c:04:40:b4:dd:14:d2:63:ca:93:37:
f0:05:fb:78:08:54:ea:b9:aa:1b:99:29:b8:47:16:46:90:44:
b2:5b:a0:d8:18:1a:49:cf:47:26:4f:c0:b2:fc:79:b2:d2:98:
7c:9c:95:ce:c8:20:3d:4b:c2:64:e9:70:9a:53:77:0a:52:7c:
93:e3:1f:81:20:30:aa:3e:31:d5:43:25:1a:36:13:a6:99:b9:
c6:1c:8f:b7:b2:b7:3c:81:2a:71:50:7d:88:af:bb:65:0f:c2:
f2:82:05:48:3d:16:56:52:21:44:2d:b4:d6:01:1e:e4:b4:29:
ea:aa:3b:5b:40:37:05:08:ef:67:e4:94:4f:f6:03:30:0e:ee:
50:05:e8:8d:21:a4:42:98:55:3c:8c:9a:54:91:15:e4:b5:c4:
07:1d:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:24 2026 by rpki-client