Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: qjbuFAXcZtkRZ2p6vhxRCapk+ia673HCeHmCa3YSKEg=
Subject key identifier: A7:CC:E6:70:11:34:AD:35:48:66:02:C9:19:80:93:38:A2:20:4C:BA
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 019D98F43D628B1A90CE217330EF961AD2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 01:00:36 +0000
Manifest this update: Fri 17 Apr 2026 01:00:36 +0000
Manifest next update: Sat 18 Apr 2026 01:00:36 +0000
Files and hashes: 1: 5L0ahpPNayrPxYi122Pi5vNAm_w.roa (hash: cz2iEH8qpiosJzyQ+ZNV5ATx1OTP4StLUP1VtKdnYPs=)
2: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: JogQoMTspvz7E351Sot55DMjEUEhotaGa5ZB6PaDSBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:3d:62:8b:1a:90:ce:21:73:30:ef:96:1a:d2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Apr 17 01:00:36 2026 GMT
Not After : Apr 18 01:00:36 2026 GMT
Subject: CN=a7cce6701134ad35486602c919809338a2204cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d8:e5:66:e4:80:5f:af:80:13:ac:ae:d1:94:
9e:5b:33:ce:36:af:d9:8e:55:28:0b:e7:4e:a8:29:
36:3c:a2:6d:6c:15:e5:da:f8:ee:ea:2e:5c:26:30:
ce:94:e6:c3:c3:f4:ee:86:3f:a3:ab:bf:12:5b:9d:
b3:d6:6e:86:0d:b7:37:e3:68:f9:c9:32:6f:cb:89:
af:64:c2:76:36:d6:6e:ed:eb:f2:5f:40:6e:22:1a:
b5:99:7a:33:93:54:f2:c2:38:00:f8:fa:a3:b4:40:
b4:81:d8:d1:14:86:a9:3f:9a:4f:6e:a7:45:b6:30:
db:19:dd:5e:c4:13:9f:dc:df:20:c4:3b:2f:4d:80:
65:24:bd:f7:0e:9f:fa:44:cd:c8:f8:13:b4:9c:aa:
c7:b0:6a:c2:31:14:2c:0c:d1:a1:0c:1f:90:02:a1:
9d:25:7c:37:e6:90:f0:6e:d7:21:1c:db:7e:2a:0f:
dc:a1:41:33:33:70:4f:9d:00:08:1f:59:b4:35:6f:
93:d5:35:f1:d0:30:30:26:ab:06:63:bc:47:a9:5e:
6b:fc:73:2a:2e:99:f6:04:81:48:8a:c3:8d:c4:a1:
44:47:73:79:2f:ba:a7:de:41:45:f8:6e:0e:3f:64:
50:da:bf:44:a6:7d:15:e0:e5:eb:4e:a0:0f:dc:97:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CC:E6:70:11:34:AD:35:48:66:02:C9:19:80:93:38:A2:20:4C:BA
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ea:a9:38:81:5b:e8:b1:e8:48:a8:e1:fb:8d:6f:00:fe:b9:
cf:6c:66:4b:2f:34:fe:44:68:48:34:44:ff:ce:66:23:a5:0a:
d0:50:27:b9:1f:80:92:a4:f7:09:50:2b:6d:51:ae:25:40:3d:
e1:82:aa:dc:fc:9c:01:ea:b7:dd:80:6c:82:c5:d9:7e:df:a4:
5d:83:8e:d5:d5:d6:3a:f7:0e:b7:0f:a2:85:33:0a:14:dd:99:
4e:72:56:14:a8:30:1c:14:09:19:92:7f:ca:4b:8d:6d:e5:85:
66:34:c7:c5:e8:ef:f3:fc:13:37:36:d5:8b:47:5b:f9:9b:48:
8c:c5:6d:25:4a:21:c2:5b:fd:b1:fc:de:d7:80:dc:0c:45:b1:
cb:c6:26:96:10:c2:eb:4b:06:d6:fa:c8:7a:f0:26:87:86:e5:
52:62:8f:1a:71:40:64:bf:a8:b0:11:14:c7:8e:36:12:21:20:
28:83:d5:c9:9d:96:a8:4a:44:72:c4:73:71:e4:5c:f6:ff:88:
19:48:21:7c:71:9b:09:11:e0:53:a7:e4:ce:fb:23:6a:32:ed:
ba:d0:19:f3:3e:1b:ea:5f:21:f6:f5:44:bc:f2:d3:52:bf:45:
04:8d:18:43:30:a7:08:8f:d4:9c:4c:df:c8:2e:72:31:a0:89:
77:a0:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:46 2026 by rpki-client