Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File: RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier: SDJwrEFMR1Z3m4vKJEpSK6zF0JvLjXp8leqtwbecFGQ=
Subject key identifier: C4:7C:03:DA:B9:57:55:68:79:58:8C:B7:86:19:A7:D7:57:81:D6:99
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer: /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial: 019D9C2CB97B7E7DC4778C2E16DEC7D05EEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number: 068B
Signing time: Fri 17 Apr 2026 16:01:09 +0000
Manifest this update: Fri 17 Apr 2026 16:01:09 +0000
Manifest next update: Sat 18 Apr 2026 16:01:09 +0000
Files and hashes: 1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: eIonS3hMYVMaSIvsbrMDszqW3uEYcTL89I5k1O5hrIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:b9:7b:7e:7d:c4:77:8c:2e:16:de:c7:d0:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
Validity
Not Before: Apr 17 16:01:09 2026 GMT
Not After : Apr 18 16:01:09 2026 GMT
Subject: CN=c47c03dab957556879588cb78619a7d75781d699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:52:7d:96:2d:d0:33:44:1f:60:5e:84:56:
d1:c4:28:13:57:45:46:fe:72:ba:d1:47:6b:28:ae:
82:4c:a3:2d:77:90:bd:1d:55:d6:74:cb:c1:76:fa:
86:e8:a7:fa:86:03:f8:ec:8a:70:1b:bb:57:8a:fb:
56:40:cf:a4:f7:8f:fb:97:a4:1f:08:a7:72:b3:ed:
f4:7b:2a:96:82:94:6a:d6:5a:25:7d:27:88:0a:57:
e9:e3:e2:48:2d:99:5e:77:e8:15:08:da:06:d4:28:
bb:7a:50:c1:e3:0d:dd:73:c2:fc:24:c8:3d:f2:f0:
f2:10:f9:40:b2:7e:99:c2:24:d3:77:a7:c7:ae:9e:
03:d5:6e:07:70:c7:45:83:bd:fd:62:5b:e9:c8:e5:
0f:b1:71:cb:64:99:1c:d8:db:f8:a3:aa:85:9d:b0:
14:65:51:5c:57:5b:2e:39:97:28:73:61:4a:21:ac:
bf:c1:62:23:71:88:9e:c4:e7:e8:18:2b:7c:c2:dc:
84:b2:28:46:84:88:81:1f:44:e6:3f:a7:5e:d8:6b:
06:e5:3b:35:e4:bf:b8:f1:fd:ec:9a:5c:94:5f:6d:
dd:81:e8:b9:39:bb:18:df:39:f7:99:3f:44:35:2a:
91:0a:19:61:46:7a:63:8c:0b:61:b2:d5:9a:67:2c:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7C:03:DA:B9:57:55:68:79:58:8C:B7:86:19:A7:D7:57:81:D6:99
X509v3 Authority Key Identifier:
keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:29:0e:7b:93:dc:83:29:32:08:98:d3:72:87:e0:39:b8:07:
dc:16:aa:a2:23:d9:e5:5b:41:72:5a:a9:4c:b8:88:1e:4f:01:
51:1f:15:dc:8b:3c:77:88:45:83:c6:50:01:b5:7b:ce:34:8d:
1c:a1:7a:de:96:18:ad:ff:8c:25:d9:66:c0:b5:49:e0:34:d5:
f1:f7:4b:cb:39:01:b5:2e:df:c3:d8:70:ad:69:ce:bc:74:e2:
7d:ab:05:3d:44:99:88:39:79:38:e1:ab:8c:d6:63:c3:00:86:
af:d5:3b:e8:03:bc:4e:ba:7d:1f:17:7d:cc:35:9d:b4:aa:66:
fe:df:fb:0e:e0:4c:3f:0b:ec:3c:19:25:f8:33:1c:64:38:dc:
f3:14:ae:1a:e4:fb:c7:0b:2b:1a:6e:af:ee:35:fe:65:c5:89:
7f:e5:9d:9b:4c:43:d5:20:62:68:95:30:d9:e1:95:d5:fd:5d:
88:9c:6a:51:25:6a:c4:47:fc:2b:35:85:26:fa:d1:f1:88:83:
0d:ac:5d:3e:2a:b9:13:c0:d4:38:2d:63:0f:d8:9b:9b:b1:e1:
d8:6d:41:69:4b:c7:1b:d7:16:69:69:63:6f:30:1b:cf:75:86:
bf:ea:f1:f5:9d:ab:76:2f:f6:93:7b:79:0f:eb:11:57:e5:32:
b8:f5:79:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:37 2026 by rpki-client