Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
File: RzsJuP3t5sq1JPyqOzHmFrouSJY.mft (raw, json)
Hash identifier: W/OE4ZmnGfT0LkI0nJrlSobDzd5ToYRgFlo8fRa/dvQ=
Subject key identifier: 68:B1:CF:F6:D6:02:20:1D:C9:EA:9F:44:01:40:D8:3C:A5:63:63:0B
Authority key identifier: 47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
Certificate issuer: /CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Certificate serial: 019D992B4E53151CB71231D39346A975E273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:45 +0000
Manifest this update: Fri 17 Apr 2026 02:00:45 +0000
Manifest next update: Sat 18 Apr 2026 02:00:45 +0000
Files and hashes: 1: RzsJuP3t5sq1JPyqOzHmFrouSJY.crl (hash: BN8ZoDkZvY0yH6HOMoN1Uosuz0N8wHOLOR1j3yX8/GE=)
2: qULAWziRR6EpNTlUGRYiVItcoc0.roa (hash: mkeeUvNAxFPl7/hk9APPcp6mDqYe93qja/XRGGlJYVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:4e:53:15:1c:b7:12:31:d3:93:46:a9:75:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473b09b8fdede6cab524fcaa3b31e616ba2e4896
Validity
Not Before: Apr 17 02:00:45 2026 GMT
Not After : Apr 18 02:00:45 2026 GMT
Subject: CN=68b1cff6d602201dc9ea9f440140d83ca563630b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a2:77:92:0c:09:0f:a1:a5:fc:c9:3d:0a:93:
d1:f7:2e:2f:8a:de:c2:d3:e3:3a:86:a1:a3:a3:43:
2e:e9:33:d3:df:df:e9:94:42:c1:de:33:20:b5:2e:
92:27:a0:be:54:74:2b:f3:4e:13:98:b6:ba:d2:00:
6f:de:b1:00:b3:5f:71:fd:20:53:88:e6:6b:28:f1:
68:d1:68:b7:ec:ca:b1:35:58:62:ee:2a:80:d3:de:
a9:8f:30:29:a6:43:f5:f2:da:3e:83:91:68:19:2d:
e5:e7:f3:20:bd:74:56:27:4d:54:66:aa:8c:30:69:
ed:5b:f9:3f:9b:e5:b5:c1:ec:37:a8:16:96:73:11:
c6:0b:8c:60:2e:35:a2:2b:69:f7:32:c1:40:5f:cb:
ec:4c:2a:18:67:73:85:5e:7b:eb:f5:58:d0:77:c5:
4a:19:dc:d9:a1:e4:2c:a3:a2:6c:ea:87:81:05:04:
4f:6d:18:c7:fa:4f:22:9c:00:6c:39:b7:e7:b3:e4:
30:3c:29:17:c5:37:ec:05:07:7d:ce:be:6e:1e:44:
cd:f0:b8:5a:22:fb:7c:33:48:a3:f8:93:28:63:5c:
35:b8:f8:ed:72:52:36:6b:eb:61:d1:8d:f1:44:49:
d0:e5:7f:14:ae:68:0d:60:c7:00:e3:4b:e4:63:3f:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B1:CF:F6:D6:02:20:1D:C9:EA:9F:44:01:40:D8:3C:A5:63:63:0B
X509v3 Authority Key Identifier:
keyid:47:3B:09:B8:FD:ED:E6:CA:B5:24:FC:AA:3B:31:E6:16:BA:2E:48:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzsJuP3t5sq1JPyqOzHmFrouSJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c04674-e9ac-4547-bcda-258854e50cf8/1/RzsJuP3t5sq1JPyqOzHmFrouSJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bd:52:da:f4:61:ed:7c:d7:c4:65:c1:27:ca:ea:e1:52:92:
87:3f:d4:a0:f4:fd:ba:47:a3:22:9e:95:a2:77:9b:e4:7f:d3:
fb:0a:ff:a0:a8:9d:91:57:e0:75:e1:93:06:72:84:b5:d6:59:
c3:36:2e:1e:be:40:d6:5b:b1:4f:4f:94:80:a4:09:c0:30:79:
21:83:f1:91:d7:53:3f:4e:fe:de:d9:b0:bd:60:a2:ae:94:f1:
6c:a6:95:b0:eb:a5:0d:6f:09:d9:e8:60:c2:1f:36:1c:23:42:
23:15:02:75:7b:89:79:b1:a0:fb:cc:e8:40:c9:af:6a:88:42:
0c:4c:45:77:21:bf:b3:d3:a8:76:68:44:e9:6b:45:0c:25:b2:
f7:e1:b2:bc:13:f6:e4:b0:38:db:90:8a:83:de:6d:4f:46:01:
91:7e:73:e9:34:74:d4:0d:1e:6d:f4:e6:e5:31:d0:7d:dc:ed:
a2:a7:f0:b0:bb:60:54:81:29:fe:02:39:fb:8a:8a:24:cd:4c:
e2:10:ac:cf:1c:5e:6d:be:1c:15:a1:05:c4:7c:22:68:b6:13:
73:fb:9b:6c:a4:cf:e2:6f:63:04:8e:df:f6:b1:0c:0a:1c:27:
54:cf:8c:64:84:64:b4:b2:ae:cb:8b:f3:e3:49:9e:c5:9c:98:
4f:43:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:49 2026 by rpki-client