Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: 0wnKDt6t/or7GgU9lmv4l1Hts/370PPXdDiZoHlSReA=
Subject key identifier: 5E:77:D7:69:28:3A:16:39:36:BF:C7:19:2B:6A:D0:9A:71:CF:C8:22
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 019D98BDAEFBBD04D2D215DA2EEF9ED3B10F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 18E9
Signing time: Fri 17 Apr 2026 00:01:01 +0000
Manifest this update: Fri 17 Apr 2026 00:01:01 +0000
Manifest next update: Sat 18 Apr 2026 00:01:01 +0000
Files and hashes: 1: 0ihzHauFogznBZ4D95qRfmh5DWY.roa (hash: pm2OFW8n3jM91O28PWSYiZEPtxsO4IG0tuEGJsYy+tw=)
2: aXqn4kbdTiISCg3qjch21kWiAS0.roa (hash: fWTEPBg8GhRwpF6veTh6PUPLm3Q1obhdo3c/16/83Z4=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: cr75iqMe4LB7/h3xznETOUz/mKwCPqrcFlv9c+/IneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ae:fb:bd:04:d2:d2:15:da:2e:ef:9e:d3:b1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Apr 17 00:01:01 2026 GMT
Not After : Apr 18 00:01:01 2026 GMT
Subject: CN=5e77d769283a163936bfc7192b6ad09a71cfc822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:6e:53:f1:2b:1d:1d:47:cc:32:ae:de:72:
66:8f:cf:49:ab:3f:9d:ba:3b:37:83:78:74:67:15:
a6:27:7b:c8:65:2e:89:f4:fe:a9:7d:3f:28:67:ca:
d3:e0:46:d4:51:f9:6f:9c:e1:f2:09:93:7b:7a:17:
9a:19:db:2e:2a:5d:ee:87:50:f8:c7:d3:dd:84:52:
0d:f9:a2:6c:66:1c:f2:25:e3:9e:d1:bc:d7:21:1b:
ca:3d:31:8f:9e:24:51:3d:a3:54:78:69:45:24:02:
34:79:eb:47:aa:a3:a9:4b:7e:bf:19:41:9f:a6:65:
db:1c:c7:6a:aa:f3:b2:7c:38:1e:28:c4:8e:19:d4:
f5:8a:f3:f6:ff:d9:5a:a7:b4:ee:62:b3:73:00:6c:
c4:5d:b6:b1:60:95:b0:b4:25:8e:40:30:a6:3e:18:
cf:ab:60:43:32:7c:43:36:3e:0e:2e:39:92:45:50:
5c:5f:ee:d9:5a:9e:38:68:c3:1e:88:46:ec:6f:94:
26:3b:d0:9d:93:2b:c0:fb:ef:f3:33:7f:82:7c:2c:
32:b4:80:04:c3:f1:07:0c:12:42:50:78:26:34:c9:
31:8e:08:9e:6e:ba:a7:3b:ed:36:ef:f9:85:2c:75:
aa:79:09:8c:2c:ac:be:51:71:21:93:e6:3d:9e:42:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:77:D7:69:28:3A:16:39:36:BF:C7:19:2B:6A:D0:9A:71:CF:C8:22
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ac:09:7f:29:6b:cb:1d:12:8f:71:0a:02:e3:67:78:fa:7e:
f8:b2:d1:b8:df:b0:73:e3:39:eb:a5:b8:79:63:6b:3a:8c:11:
0c:45:7b:a1:87:11:90:21:02:9d:ff:d3:27:fc:64:71:c7:47:
9f:c9:9c:d1:32:e4:a3:5a:76:76:d1:2b:8b:72:08:e5:04:08:
3e:a6:b7:60:6f:a3:8e:9a:53:26:a2:d4:0e:85:1e:f2:0f:82:
8f:b6:c8:67:63:bf:92:c5:48:7a:1d:dc:53:6b:38:7e:57:f0:
ff:25:a4:26:a1:9c:c6:ed:ba:8c:42:1e:98:4f:df:d4:50:4b:
44:fd:22:43:b6:9c:e1:4c:6e:b0:ca:a4:8e:8c:8e:d8:46:42:
13:64:00:26:d3:a4:04:9b:5e:85:7a:b9:43:78:57:ff:d6:51:
b7:ea:2d:48:c5:c4:ee:39:9b:d3:cb:7d:61:7e:c5:79:39:45:
e4:6f:e2:21:e1:e1:60:89:0f:5b:af:7e:4f:76:4f:22:1b:f5:
92:4e:5b:34:2c:47:37:43:71:e6:8d:bd:53:70:f2:41:65:c7:
e2:46:c2:91:cf:5c:e6:58:af:cc:6a:6b:72:08:c4:cf:e3:94:
f3:88:11:1e:84:71:9a:58:a4:08:b2:b8:7a:db:86:4e:18:16:
e2:b3:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:17 2026 by rpki-client