Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
File: pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json)
Hash identifier: qOrHKsMDWmsrJCd8wrVBTBNvg+gE8OZS6qCEltWkHdE=
Subject key identifier: 60:42:B5:E0:EB:42:EC:C0:70:51:BD:0A:79:45:5A:0B:14:3B:B7:68
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial: 019D988671F0AA8E9CA895C3F06182F87309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:00:40 +0000
Manifest this update: Thu 16 Apr 2026 23:00:40 +0000
Manifest next update: Fri 17 Apr 2026 23:00:40 +0000
Files and hashes: 1: SiKhmBqx288_iA8YdORMHjIzhN8.roa (hash: lmaMDWK3PpIdhnJCYtTeNySaUk10VMAD50KNNgmgGiM=)
2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: 85q/OvymzgSzYHq7vjPfX+WC9sqYBiW/n+Kuqq/c+lI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:71:f0:aa:8e:9c:a8:95:c3:f0:61:82:f8:73:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Validity
Not Before: Apr 16 23:00:40 2026 GMT
Not After : Apr 17 23:00:40 2026 GMT
Subject: CN=6042b5e0eb42ecc07051bd0a79455a0b143bb768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:24:29:67:fb:3c:c9:84:e3:5f:f0:08:5b:2b:
49:f6:d6:4c:d4:17:75:0c:1f:e1:b1:e2:f5:80:c9:
60:7e:84:c6:f8:77:6b:84:9c:aa:3a:64:c4:ef:69:
1f:9b:d3:c7:de:26:d8:90:2f:fd:57:16:64:90:70:
87:7d:28:90:81:f4:b3:4d:01:ca:7d:c1:4d:e4:0f:
3b:11:e5:d3:6e:9a:a8:bd:53:35:4d:c7:04:cc:18:
43:59:45:d0:ae:2a:e2:f1:b3:73:c8:56:9b:1c:e1:
d5:ce:94:97:b6:cd:c1:82:e3:41:4d:8d:03:1b:2a:
34:a2:ec:a2:17:e4:7e:89:09:8b:67:50:82:be:7f:
b5:24:18:75:a2:dd:f0:e6:01:d1:73:a7:4b:92:8b:
94:9f:c9:f1:24:6f:70:8b:d2:c0:ef:8b:35:58:5c:
30:03:5c:83:78:70:79:fb:d9:bd:22:2c:50:b3:aa:
bd:ca:0a:33:ba:18:89:40:c1:b4:49:6e:d7:65:c3:
6d:ac:9c:1e:02:0e:c7:ed:68:c5:91:e0:ef:4b:c9:
5f:f7:54:07:33:e0:54:55:71:57:99:27:12:5d:a6:
84:53:73:63:64:08:ca:6c:96:ed:05:1d:ed:03:81:
67:97:8f:cb:84:04:94:ef:10:bf:8c:04:6c:a5:08:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:B5:E0:EB:42:EC:C0:70:51:BD:0A:79:45:5A:0B:14:3B:B7:68
X509v3 Authority Key Identifier:
keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:79:32:ce:15:6e:6d:7b:4c:d4:b7:1b:e1:6d:6d:11:f1:b7:
71:c7:37:3e:19:25:7b:27:82:26:a1:7e:54:7f:dd:b7:23:9d:
8b:a1:a2:92:9a:05:cb:d5:5e:15:e7:ef:44:7e:aa:e2:9e:d6:
e5:3d:1e:6e:50:e8:17:f5:78:29:e1:7e:5b:a2:12:8e:18:2e:
b1:2c:8b:cd:1f:1e:4b:53:77:14:e4:fb:22:28:26:ff:a9:a2:
ad:b9:b6:ff:4f:d4:c4:3e:1e:e7:81:e1:56:ce:70:4d:57:6d:
d0:b1:6d:48:b6:89:a1:bb:d4:6b:ab:6f:d9:3f:a3:ec:d6:43:
cd:d6:1d:c1:83:a0:65:13:61:b2:57:bd:ef:48:98:61:6f:52:
af:3f:0c:10:54:9c:07:85:5e:e8:04:54:6e:17:d0:c6:c4:03:
3b:84:ce:dd:d0:08:d2:32:fb:33:d6:00:d9:52:05:bd:0b:b6:
2f:38:36:d4:e1:30:53:bf:1e:a4:d9:51:ff:cc:ad:04:77:1e:
e0:32:50:1b:97:2d:5d:f1:c7:63:dd:b0:ba:87:b0:94:74:ff:
b6:d6:e8:11:4f:e0:66:70:24:fd:3a:e2:fa:2a:97:6a:72:14:
e4:64:1e:69:29:ec:aa:a1:13:8f:29:ed:9e:1e:17:54:d1:6c:
39:16:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:35 2026 by rpki-client