Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: gs3fUPdrJTO7iSpl+ob2SQFKhWIBcQQQ1iJFs/WXQQM=
Subject key identifier: CE:F6:18:E1:BB:9A:C6:72:75:24:1C:E0:8E:BF:13:6D:C9:5B:57:E1
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 019D9C2C4B3AE28E5182F02F5BA5E53BF4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 16:00:41 +0000
Manifest this update: Fri 17 Apr 2026 16:00:41 +0000
Manifest next update: Sat 18 Apr 2026 16:00:41 +0000
Files and hashes: 1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: xThYhbvMWBQOD0nYixjvQxM0TFB02Cm6/3JpIGQVf2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:4b:3a:e2:8e:51:82:f0:2f:5b:a5:e5:3b:f4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Apr 17 16:00:41 2026 GMT
Not After : Apr 18 16:00:41 2026 GMT
Subject: CN=cef618e1bb9ac67275241ce08ebf136dc95b57e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:8f:c6:44:4e:a7:bf:fa:3b:06:0b:96:93:
fc:03:24:2e:df:33:c1:22:90:fa:f6:0a:17:b4:64:
ac:03:76:7f:d0:38:78:ba:cc:fa:3c:10:b0:e3:af:
dd:72:e9:fe:cb:9a:3d:f7:bf:0b:fc:f8:08:32:e2:
54:93:b1:7b:6b:17:28:1d:60:09:43:44:74:28:e4:
8e:b8:c1:a8:84:83:65:01:88:7d:61:b7:c2:20:51:
fd:f4:1d:ff:ff:de:6a:92:cc:b8:bd:98:1a:e6:19:
88:65:65:13:04:1d:df:64:f2:64:78:40:47:17:83:
87:9e:bb:a8:57:0d:af:56:d2:46:6c:c7:8d:aa:7c:
6a:a2:ce:20:b9:86:42:1d:c0:7c:aa:33:07:0d:9e:
79:20:83:05:d1:44:1f:a1:1e:c1:72:bb:a4:34:cf:
a0:ab:5e:ec:35:e2:a0:9f:20:ba:12:bb:0e:5d:08:
12:78:fc:42:ac:03:a9:76:e6:67:7c:c5:e7:d5:1e:
43:14:bd:fa:e8:6f:14:f3:d3:db:ab:06:2d:43:db:
09:97:05:41:c6:2d:a0:53:c0:6b:f6:bb:33:22:1b:
45:c2:08:dd:d4:91:ae:48:53:37:34:c9:f2:23:5a:
b3:e7:a1:92:79:28:01:62:2f:55:c5:23:d2:dd:bf:
dc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:18:E1:BB:9A:C6:72:75:24:1C:E0:8E:BF:13:6D:C9:5B:57:E1
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:11:a7:84:eb:61:9c:04:a1:51:a9:13:17:bb:7c:8c:fc:6e:
36:0c:ba:6d:b2:52:07:bf:df:37:15:d3:f0:f1:29:c3:0c:69:
ef:83:7e:27:f1:b7:54:3c:c9:18:df:da:86:7c:9f:65:e3:04:
77:47:de:95:32:5a:59:03:d4:e6:07:06:25:e1:eb:5a:47:c3:
f3:d1:2f:87:83:8d:b5:8e:56:4e:c1:02:57:9b:27:53:cb:4d:
45:ea:11:72:e4:8c:10:ec:2b:56:04:ba:42:a6:3e:9d:af:32:
84:51:b9:4f:df:cd:12:cf:7a:75:be:27:5f:9b:00:74:17:6e:
0a:54:3a:70:45:5b:1c:e2:4c:b3:d0:82:5b:a1:1d:8c:50:5a:
e4:e1:e5:53:12:98:ce:2d:64:69:e4:27:04:0a:e6:e9:60:cd:
df:12:b9:df:9a:17:f4:04:1a:cf:1c:bc:fd:1d:13:c4:04:25:
d8:2f:40:57:07:e8:2e:4e:ab:73:74:8c:fa:41:8f:1e:59:c9:
82:bf:12:68:1c:b6:c9:8a:87:a8:f1:f0:f8:62:94:c3:2a:48:
38:00:a5:8a:d7:cd:b0:f5:7e:8d:09:27:74:63:ee:20:7d:38:
dd:34:96:88:e0:95:99:60:46:51:d2:ae:05:64:6b:78:ae:e3:
dd:d5:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:50 2026 by rpki-client