Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: 73nbMv3Arn+0crPGHMJq0WdhrHB1j6FbNb9HpjPOi8E=
Subject key identifier: 9E:46:02:AF:52:FE:E0:B9:BF:61:C1:39:64:E0:78:0E:4F:79:DB:77
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019D99D0925385625D5E63B7B1CCF6615992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:01:15 +0000
Manifest this update: Fri 17 Apr 2026 05:01:15 +0000
Manifest next update: Sat 18 Apr 2026 05:01:15 +0000
Files and hashes: 1: Yg6FVNZBl1w2Rze2Thsw4t3zCtA.roa (hash: r0yjU3GNEbU4eEC9QPmI7gQD6DPzo++uXSGijCopcR8=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: J4+alZOkc3zL77lfIJHyIm696jECqIukiQC6xh6gnhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:92:53:85:62:5d:5e:63:b7:b1:cc:f6:61:59:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Apr 17 05:01:15 2026 GMT
Not After : Apr 18 05:01:15 2026 GMT
Subject: CN=9e4602af52fee0b9bf61c13964e0780e4f79db77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:5b:34:2f:05:04:fc:f8:e4:82:fb:29:74:
e2:1d:07:00:4d:41:e3:1f:f0:da:21:a7:a3:8a:80:
d4:a3:e8:49:4b:f1:d8:99:c3:81:d7:b5:b2:5a:dc:
61:f4:3c:14:d9:e8:cc:ef:e5:fb:27:a1:1c:b9:12:
20:e0:f0:38:6d:73:72:05:5f:32:bf:57:6a:c5:b3:
d9:76:08:b9:3f:52:36:22:4e:ec:4b:46:4e:ab:0d:
80:d0:48:b6:3e:3b:73:9e:2e:a1:50:07:3d:2a:c2:
6d:96:b1:43:8a:af:b9:25:cf:f6:d4:67:59:a1:e2:
53:9b:bf:8e:38:56:12:98:37:22:20:c8:a9:28:59:
8b:91:fc:a1:8b:8e:f5:07:f1:6f:df:63:43:ac:71:
e0:e9:b3:f9:72:0b:c2:59:cc:cb:e1:31:e3:1a:ee:
38:3d:30:40:6d:ba:b5:1d:0c:d4:0a:57:e7:7b:62:
e0:28:ff:20:22:e7:3c:d7:78:00:7c:e5:d8:2d:de:
4e:0d:3d:93:28:9f:33:76:1f:bf:b4:1c:71:5b:e2:
a3:1f:23:7f:52:f6:3a:45:c0:9e:b7:61:43:9b:73:
23:37:f9:d7:80:b7:1d:af:ae:f1:70:0f:8e:e0:aa:
b9:c4:8d:8d:a0:27:da:81:88:da:12:15:74:f5:e2:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:46:02:AF:52:FE:E0:B9:BF:61:C1:39:64:E0:78:0E:4F:79:DB:77
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1b:78:8c:15:22:14:d9:6c:f6:26:53:1f:76:bb:1c:76:79:
38:4f:d0:47:b0:57:c8:e5:30:70:99:03:9b:88:5d:fc:95:fb:
bd:ad:84:d2:20:57:d0:9c:4a:26:f6:60:d7:58:04:4c:68:ae:
df:02:b4:3e:f7:f4:d1:8b:66:b4:5f:b2:2a:2e:12:9d:3f:63:
3d:47:88:47:3e:d3:14:60:1e:14:67:16:d7:56:86:8f:8c:8c:
f1:fc:1b:02:ae:9e:a9:f9:c0:83:77:69:37:af:46:b1:e1:f8:
67:e9:de:2a:f6:77:72:70:e6:fa:e2:2e:fb:6d:ed:51:aa:c4:
a1:49:64:13:35:d2:2b:68:ea:7d:76:32:be:21:c1:54:1c:2e:
75:67:63:11:fc:4f:ff:5a:f6:bb:1d:20:3c:c4:b4:22:82:ac:
e1:d6:06:3f:47:b1:fc:1d:b8:08:d7:85:92:81:8a:30:8c:5f:
74:9b:2a:dc:9c:01:bd:cc:9a:fd:c0:61:79:b4:3b:b6:e6:36:
ca:d4:3d:4f:c6:6b:4e:1b:b8:7d:e2:40:e9:34:ce:b3:8c:b4:
90:a4:32:ca:b2:f7:02:65:24:48:4f:2d:25:fb:51:27:14:6b:
4d:bb:3a:56:91:37:b5:30:0a:4e:72:6b:28:3b:c9:e9:ab:cf:
a0:32:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:38 2026 by rpki-client