Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
File: RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft (raw, json)
Hash identifier: 66SJpSU2y2365yOf/OkOvqkl7txMlYObh5tgJGaPNgk=
Subject key identifier: BA:2E:62:E7:46:3E:85:6A:53:BB:98:28:65:3A:12:E8:9F:97:4C:E3
Authority key identifier: 46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
Certificate issuer: /CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Certificate serial: 019D98F4597047F6C32E64801D7ADEA3B28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 01:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:00:43 +0000
Manifest next update: Sat 18 Apr 2026 01:00:43 +0000
Files and hashes: 1: 4LkdmcjKUPYnNsC8p4HbsE6JtNw.roa (hash: jmfhhWKdSP4GG97BLqMH7I/oq4F3yyozqjmgiw+P0ts=)
2: RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl (hash: t1Bon/iYJrU8xA+g8vS8+msUFLJNfzG2Awp/ibmtyZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:59:70:47:f6:c3:2e:64:80:1d:7a:de:a3:b2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464528d9080c665db0551d8ad8b0f71f7bb76996
Validity
Not Before: Apr 17 01:00:43 2026 GMT
Not After : Apr 18 01:00:43 2026 GMT
Subject: CN=ba2e62e7463e856a53bb9828653a12e89f974ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:88:67:a2:eb:01:3d:b5:c6:b0:c2:1a:ce:
66:e1:fd:a9:0e:b0:5d:4e:88:13:07:e0:0e:ea:4d:
92:eb:a3:20:2c:78:28:4d:20:cb:85:35:ad:f6:27:
88:b4:3e:b0:64:2a:2d:83:69:b2:ba:d0:d5:23:98:
98:c0:eb:9e:2b:1e:0d:73:c5:55:5c:f4:54:64:52:
a5:ac:c2:92:43:a8:cb:f4:48:c4:d5:90:2f:80:ed:
8e:92:a7:ca:5c:6f:7f:4b:44:c8:c8:85:d2:e1:99:
c0:2a:73:cd:ee:7f:11:41:53:b9:8b:42:2c:a6:b2:
90:1a:6e:a6:3e:71:2c:ae:9f:21:07:55:7c:98:90:
7a:05:bd:37:af:38:0e:d5:84:2f:12:66:3e:4e:35:
c4:2f:b3:7f:21:d7:db:dc:7d:76:d0:67:e5:6a:77:
e5:14:90:c1:e1:69:7c:0b:17:f6:0e:5e:9b:b5:5a:
29:7b:b5:e5:e6:73:72:95:c8:7b:5b:45:7c:9b:e0:
66:f1:67:4c:c4:1c:51:2f:9c:01:01:3c:32:d8:d2:
19:52:d0:9e:b7:7d:9f:f2:74:89:ec:24:89:3a:46:
dd:0a:4f:29:5e:f9:15:54:d4:c5:4b:03:52:39:a0:
e0:e0:59:bc:78:ed:8b:fc:49:9c:2b:5b:df:f8:96:
96:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2E:62:E7:46:3E:85:6A:53:BB:98:28:65:3A:12:E8:9F:97:4C:E3
X509v3 Authority Key Identifier:
keyid:46:45:28:D9:08:0C:66:5D:B0:55:1D:8A:D8:B0:F7:1F:7B:B7:69:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkUo2QgMZl2wVR2K2LD3H3u3aZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/45852f-8fae-441d-b10c-0a1bf5bf0ca2/1/RkUo2QgMZl2wVR2K2LD3H3u3aZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e2:96:eb:3c:2a:06:ae:bd:d6:34:3a:7d:51:48:1e:d6:94:
14:f7:69:a3:c8:16:68:94:72:d9:0f:73:95:fa:72:44:ce:d9:
6a:ef:ef:cf:9d:d3:ae:f1:3a:51:23:46:0e:df:0d:0d:83:5a:
2e:5e:0a:c0:c1:92:28:72:78:40:f5:c1:c1:d9:58:bd:1a:cb:
62:68:85:45:78:d3:8c:05:f1:81:52:4f:db:1c:ea:7f:e6:f0:
04:25:d7:ae:9a:e4:a4:0b:d1:4c:a3:d0:98:81:73:13:3b:8f:
de:01:1e:b8:31:e7:0d:d9:26:f9:44:f7:3f:07:e2:65:61:0a:
e8:a5:0e:93:6f:f2:1d:4a:9c:2d:76:73:d9:9d:b8:58:0e:56:
6e:fa:87:1f:19:e7:0d:1f:f0:0f:e7:62:c8:18:21:c2:c8:2f:
71:db:ea:0b:10:86:8c:e6:d7:f7:ef:c6:83:fa:2b:a9:e7:35:
cd:24:bb:93:e4:68:76:25:e8:9c:e6:f4:c3:c2:5e:e5:01:ee:
ba:7d:2c:3c:44:68:68:4c:31:22:62:7f:b5:fb:4c:fb:7f:17:
b7:c7:df:60:f3:67:85:aa:22:06:69:a9:94:57:6d:0d:a4:e3:
ba:56:68:d5:04:37:77:d8:37:30:f7:67:1e:31:80:e0:32:b5:
85:67:b1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:42 2026 by rpki-client