Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: SD28RLDgGdtiqlReIHId4+YpHjTARd1GUvUbFgXVuy8=
Subject key identifier: 3A:3C:78:98:E5:5B:D2:33:60:09:C8:39:8A:26:78:06:D9:F4:BD:63
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 019D992B68D541ABFFE728AA41CE18D690C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:52 +0000
Manifest this update: Fri 17 Apr 2026 02:00:52 +0000
Manifest next update: Sat 18 Apr 2026 02:00:52 +0000
Files and hashes: 1: 4H3kqbZKgvCRJ41TW2E8J1NDC88.roa (hash: ah0Wo037A9MM/sUCKBiJ/BqofxWUcKYL1Cq5STwAUy8=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: uwjeoD1vQrhXNxO0pCsRL4ip4mgwpQeGySX2vEZas9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:68:d5:41:ab:ff:e7:28:aa:41:ce:18:d6:90:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Apr 17 02:00:52 2026 GMT
Not After : Apr 18 02:00:52 2026 GMT
Subject: CN=3a3c7898e55bd2336009c8398a267806d9f4bd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:a0:3c:a2:b5:a3:00:b0:5f:7c:4e:ff:70:
ec:42:1e:91:b8:8a:9c:d0:63:b9:5d:f5:a4:c4:80:
f9:08:74:b1:4f:5d:1e:74:c5:e8:ea:5f:eb:72:af:
e0:e0:80:ff:94:b3:39:b4:1f:c6:c3:d8:4f:93:79:
82:ef:ef:76:61:9d:60:ed:a0:af:d8:ff:e3:c8:df:
d6:a1:ce:b0:f5:56:ae:20:7b:4d:0c:1f:d5:14:14:
97:38:eb:97:fa:1c:1b:47:a5:38:83:ca:1e:60:7f:
64:92:29:dd:28:f3:28:c9:61:6e:33:eb:b6:71:65:
b7:e9:5e:a8:83:f4:95:d9:c2:99:92:bf:e4:3d:99:
01:99:29:ba:2c:ca:06:6e:4b:86:0d:5c:00:3f:1c:
fe:be:40:0f:48:54:e1:98:82:b3:a0:ff:b2:64:97:
f6:9a:1e:46:cb:0a:97:18:7a:8d:53:2c:1a:d9:14:
d0:1f:98:cc:ca:e4:ca:04:f7:ac:18:c8:d8:15:51:
df:2b:65:d1:7d:b7:8b:a2:00:a6:05:7d:2e:0d:c7:
a1:ae:f5:71:87:38:9d:22:9a:dc:64:cc:3c:9d:08:
48:ea:a6:01:55:aa:b5:c4:1b:be:fb:51:e8:81:79:
c9:e0:d0:80:13:97:65:e2:eb:57:d2:1d:ec:09:8f:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3C:78:98:E5:5B:D2:33:60:09:C8:39:8A:26:78:06:D9:F4:BD:63
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:70:15:00:f6:6c:33:82:ef:32:55:9f:70:aa:83:fa:80:22:
95:c8:27:c9:4d:05:15:56:a2:d2:53:13:4f:e6:51:ad:b6:b0:
f6:fa:74:37:42:91:e6:9f:be:c2:d3:f7:63:79:ca:d1:a9:4d:
37:5d:bb:f7:6c:83:f1:ad:3e:80:48:3a:78:2b:5a:86:5e:8f:
71:1d:52:cb:c8:30:ba:8f:57:2d:ac:f0:e8:4a:ca:90:45:a5:
c4:76:29:bc:d8:64:13:11:a1:af:f9:37:14:90:57:66:0b:7f:
6b:e2:ef:98:10:79:2e:b6:49:6c:0e:4b:c0:ad:76:70:03:5f:
2c:d4:3a:5b:5a:e6:01:f7:6f:45:da:f2:b7:ac:8e:d0:44:b0:
06:69:43:12:19:45:14:a5:f2:b1:cc:80:86:82:d5:46:b3:f5:
34:02:66:2b:d3:79:26:8b:9f:98:8e:61:4a:93:d8:18:76:fe:
ab:f3:37:c8:87:df:e2:2b:3c:83:6f:51:b8:85:dc:7a:a5:1e:
0c:f6:f4:6f:1b:97:aa:6c:e7:ef:2c:d5:7b:e9:a7:60:f7:3d:
9a:40:05:b3:89:dc:14:27:3b:b8:b8:c5:41:61:2c:52:44:3f:
ff:75:93:0d:17:da:53:99:6b:3c:2e:b5:71:6b:28:19:72:43:
39:9d:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:23 2026 by rpki-client