Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: sUwfc1mYf7dPFTWLfJ1TYryTAnz4pixeF6nYW3WydC0=
Subject key identifier: 6B:20:97:ED:FE:E5:48:A3:D8:82:87:1A:DB:59:45:65:53:9D:DA:68
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 019D98BD7D7F10A63F659AA6C3D91FBCA159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 00:00:48 +0000
Manifest this update: Fri 17 Apr 2026 00:00:48 +0000
Manifest next update: Sat 18 Apr 2026 00:00:48 +0000
Files and hashes: 1: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: sqDjE4pN1RhSb1sGtgTTCrmEW+yVskhyDPdNUI8QhMk=)
2: hKVvr_-aCZpRix4ibxuUNSgCtto.roa (hash: rliNtwotXP1DxwetaWAK+AjUBqpkTMwr5I+2We2lWL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:7d:7f:10:a6:3f:65:9a:a6:c3:d9:1f:bc:a1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Apr 17 00:00:48 2026 GMT
Not After : Apr 18 00:00:48 2026 GMT
Subject: CN=6b2097edfee548a3d882871adb594565539dda68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:20:77:e8:33:2a:7e:43:d6:76:69:c9:38:
3f:bf:43:39:35:3d:f5:7c:a6:2d:b1:a7:85:af:cd:
86:37:20:8e:af:d2:bd:42:f7:55:89:cb:bf:36:43:
bd:61:e5:b3:54:a8:bd:d3:8b:5e:a6:e7:14:b8:c7:
6d:8a:53:ed:23:ff:d3:7b:0f:cc:15:eb:2c:d0:ea:
17:aa:4a:47:39:48:29:d4:0a:8f:88:72:98:3d:e2:
46:3d:c2:be:35:ab:9f:6c:64:88:12:d8:46:3c:87:
cd:b5:5b:d9:33:d2:31:bf:29:03:d7:cd:0c:65:80:
0e:41:6e:a3:90:5a:d7:90:f1:b7:9e:42:c9:d2:61:
68:4e:4f:b1:de:d7:aa:82:18:56:9a:f9:b8:c3:dc:
48:9f:87:98:2e:c1:48:b0:96:6b:76:97:fc:02:0b:
8d:b8:a0:a2:f7:c0:ad:f1:52:f9:c2:e4:41:50:75:
c3:5e:e8:d4:5b:16:9a:c0:51:cc:37:e7:e5:1f:5a:
1c:bc:bb:2b:88:17:95:ab:ba:7b:5d:60:78:d6:b1:
d8:bc:44:be:cb:a2:68:3a:e7:46:b5:1c:f4:21:b4:
04:91:63:91:be:c4:79:da:b6:43:9c:c3:5c:24:05:
d0:e8:7a:91:b6:c0:c5:5d:32:7c:19:b1:97:78:b2:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:20:97:ED:FE:E5:48:A3:D8:82:87:1A:DB:59:45:65:53:9D:DA:68
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ef:27:96:bf:32:bc:cd:56:af:d4:55:3d:db:37:df:6b:eb:
61:de:bf:77:0e:ff:c1:d9:c1:50:ed:2e:bc:e5:73:05:13:4d:
81:79:31:1c:da:41:18:bf:1d:e9:cd:95:da:26:33:d9:d4:9b:
57:c5:b5:32:10:5c:a8:d3:dc:2e:77:9f:fe:b7:56:73:39:32:
f7:c7:97:55:12:f3:f9:f4:85:d5:17:df:a5:3c:d5:6c:b7:ee:
ba:c2:31:f2:cb:e2:2f:d6:cc:7f:c4:a2:9b:aa:66:d5:35:dd:
46:af:ad:02:9d:89:0a:86:57:5b:9b:a2:85:84:7b:12:b1:36:
ad:64:65:2d:ed:d9:f8:43:2a:fc:b4:eb:72:33:cf:d7:cd:58:
97:b5:d6:c0:0a:6c:d3:25:87:29:09:5b:43:a6:75:cc:15:76:
a0:4f:38:36:b9:29:b9:c5:52:9b:b7:40:c3:e4:40:06:10:59:
7a:73:04:9e:55:1f:3a:30:18:ca:b9:7a:db:09:ee:5f:56:b6:
07:59:99:d0:93:02:5e:39:8a:70:81:6f:6b:c1:03:0b:5c:d5:
05:40:23:26:c6:a5:25:27:cf:ae:0b:a1:63:65:d7:f1:31:ca:
42:bd:7c:10:47:da:d9:c0:9a:08:d7:30:cd:6f:70:aa:ce:fe:
51:93:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:30 2026 by rpki-client