Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: i+rUhnV3MkCmF5/YY7i97PDyBa/12nivaPKxEN+cH0s=
Subject key identifier: A6:50:10:C8:B3:73:4C:F0:DD:11:FD:7D:39:0D:6B:50:A3:3E:98:FC
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 019D99D0220B9CA4C931B3B7895784DBB245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:47 +0000
Manifest this update: Fri 17 Apr 2026 05:00:47 +0000
Manifest next update: Sat 18 Apr 2026 05:00:47 +0000
Files and hashes: 1: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: QANB/7uGY9VnUxxFe1uM5Nze31/RteOD6dLmW1CA9po=)
2: grB1qqfTRQP7MTNrrn-WzmUk8gw.roa (hash: +6I+Ww911XZBE+FZXYbMuXqk8USqXVoE6JeVtzI2oaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:22:0b:9c:a4:c9:31:b3:b7:89:57:84:db:b2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Apr 17 05:00:47 2026 GMT
Not After : Apr 18 05:00:47 2026 GMT
Subject: CN=a65010c8b3734cf0dd11fd7d390d6b50a33e98fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:62:55:f1:9b:a9:b4:1f:49:df:09:64:00:
b7:41:98:89:8e:36:a4:1c:1e:ff:79:96:52:bb:d1:
b1:95:c3:dd:68:19:1d:f8:77:88:b9:1f:e8:9f:b7:
a5:30:7f:16:c9:30:d4:3d:96:ff:31:28:31:b8:ee:
3d:e1:7d:d4:0c:07:d6:05:df:4e:14:ac:dd:a8:22:
01:95:2a:1a:f9:bd:ee:5b:02:a3:9e:18:60:69:48:
22:78:8e:27:58:ca:9a:6c:70:d8:37:78:ef:c5:d3:
ed:66:b5:a8:9f:0f:5f:77:9a:a1:e1:1b:12:5f:58:
2d:37:3f:66:a2:4d:96:4e:fa:f8:75:61:92:42:27:
4d:83:b2:ff:d1:4e:cd:93:10:1a:b7:a2:01:b3:ce:
72:f6:fc:a6:8f:f5:b1:e3:fe:f2:73:0a:59:10:71:
41:5b:62:e5:62:78:5f:10:81:f0:9a:f9:44:f7:70:
95:89:ad:18:d4:a2:9c:8a:74:98:46:60:12:59:75:
e2:94:f1:a2:9d:10:04:5a:db:f9:8c:8f:b6:f8:19:
02:63:70:38:66:1f:d2:40:b3:01:7a:da:3b:91:6a:
2a:e8:cb:e9:1e:0c:ce:0a:1e:38:5a:ed:ea:55:6f:
98:d8:8a:e0:2a:21:fe:0e:30:bf:21:1c:7b:2c:68:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:50:10:C8:B3:73:4C:F0:DD:11:FD:7D:39:0D:6B:50:A3:3E:98:FC
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6e:11:83:7c:41:d9:e9:39:eb:65:df:fc:a0:b4:01:4d:e7:
df:98:ce:87:d3:dc:e3:a5:62:b6:71:ea:bd:52:af:1a:06:e7:
23:c0:bc:6f:e1:3d:a3:40:4b:fe:08:59:ae:df:b5:83:53:a1:
0e:ab:9d:65:86:0b:c9:e7:44:d8:d0:1d:00:0b:bb:3e:a8:a5:
8e:7d:08:df:6f:3d:f1:90:5b:72:8b:8b:1e:cb:75:82:52:83:
f7:02:a1:fe:5f:94:0e:29:71:0f:16:20:51:94:3f:cd:22:37:
c8:3c:4c:fc:5d:ed:d8:42:df:c1:08:68:8b:05:01:5d:2b:7a:
fc:82:34:84:eb:f6:0d:1e:a8:31:1b:7d:6d:bb:69:27:6a:25:
31:ae:1c:2f:be:76:c4:20:08:66:ed:91:03:80:32:e0:a2:6f:
33:25:75:c4:95:24:3b:17:d2:22:13:e3:bb:fb:57:d0:e0:60:
c9:d9:da:89:5a:1a:65:7a:c1:8e:e1:09:1d:29:97:d5:52:46:
47:0e:c4:ed:32:65:95:f9:ed:1b:e5:92:3e:57:5f:6c:63:d2:
b8:31:f9:5a:6f:88:f9:3a:13:4e:04:9d:1a:63:ce:dd:fb:c0:
9b:06:61:5f:f6:94:53:90:1f:b0:b5:4c:df:e3:66:3c:ca:ed:
23:d9:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:27 2026 by rpki-client