Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
File: cGdfald5fFypbD-0XlMb0yeDAWw.mft (raw, json)
Hash identifier: IqTmN1KIx/U6uxJH8bs1XQxqKQOJdT0VgYNXGmht8mY=
Subject key identifier: B7:EE:5B:2B:35:67:97:0D:3D:B1:97:BD:A5:80:33:83:E6:89:16:0B
Authority key identifier: 70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
Certificate issuer: /CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Certificate serial: 019D98BDA253A75C9F6D49D1883AA667BBB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 00:00:57 +0000
Manifest this update: Fri 17 Apr 2026 00:00:57 +0000
Manifest next update: Sat 18 Apr 2026 00:00:57 +0000
Files and hashes: 1: HukEo3cVqcCZCNkQC8Fo0OdcPV8.roa (hash: uaWWBhq83jLIq6e0tcD+B+F+JyjozNUJczctcyW3h1k=)
2: cGdfald5fFypbD-0XlMb0yeDAWw.crl (hash: KBvZcSfQFalKEvL4zYvVJzd5CL45t099QFZOvVWXczU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:a2:53:a7:5c:9f:6d:49:d1:88:3a:a6:67:bb:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70675f6a57797c5ca96c3fb45e531bd32783016c
Validity
Not Before: Apr 17 00:00:57 2026 GMT
Not After : Apr 18 00:00:57 2026 GMT
Subject: CN=b7ee5b2b3567970d3db197bda5803383e689160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:58:d5:3e:d0:0c:d0:ae:f4:b0:a8:8a:3c:
1b:e0:1b:f3:87:d2:51:dc:15:97:2d:99:b6:92:25:
54:e3:27:13:45:35:a0:89:6b:5c:c5:bb:b0:de:3c:
09:99:c2:a1:9b:2a:67:06:e5:ff:87:ca:02:da:eb:
71:d9:37:e3:77:52:9c:73:ac:f8:3a:a0:74:8e:f2:
b2:bd:b8:00:12:83:a0:ea:5c:f5:09:74:ce:3a:f6:
9b:c6:1a:2a:aa:6e:bf:45:37:40:b9:57:10:b1:d6:
06:21:5b:4d:63:61:98:92:99:57:49:15:86:a2:e4:
93:37:9f:cd:15:ee:be:25:41:97:5d:23:8a:2c:e3:
5f:7f:d9:94:f3:69:b2:62:b7:8e:d1:82:2e:2a:60:
b3:61:5b:4d:5f:56:7d:43:52:ca:6c:e0:6c:9c:e9:
db:10:70:66:bf:f7:2c:46:0c:be:b1:cc:29:7e:33:
e2:b5:8e:95:c5:15:88:5c:1d:1b:aa:d2:4a:7b:05:
c3:54:aa:3f:96:d5:c2:45:49:85:65:bf:80:a8:77:
22:03:d5:90:57:97:91:2f:97:b8:35:89:9c:df:0f:
70:89:14:ca:12:88:8f:e3:be:f7:28:21:19:35:b9:
22:39:86:30:8e:2f:3e:1d:26:24:ff:f9:9f:c9:66:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:5B:2B:35:67:97:0D:3D:B1:97:BD:A5:80:33:83:E6:89:16:0B
X509v3 Authority Key Identifier:
keyid:70:67:5F:6A:57:79:7C:5C:A9:6C:3F:B4:5E:53:1B:D3:27:83:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdfald5fFypbD-0XlMb0yeDAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac9481-6fca-4240-9ed1-c277d3716bd9/1/cGdfald5fFypbD-0XlMb0yeDAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:bd:e4:c7:b0:28:31:0c:06:21:a3:88:e8:da:1f:2f:a2:35:
17:66:64:84:c6:7e:db:3e:21:e9:68:eb:ee:8f:ba:f7:d9:9c:
9d:06:66:7d:3c:e4:4d:c1:45:78:82:d4:80:63:3e:e8:9f:49:
82:17:09:fa:b6:b0:0e:de:c6:97:b8:e5:10:c4:88:19:e5:ad:
43:71:9c:2c:70:6a:8d:48:64:2b:7d:64:11:a7:71:62:e8:6a:
55:56:34:af:fb:ae:8a:a3:0e:3e:9a:61:e9:13:06:60:af:37:
54:10:03:99:79:b1:86:d3:38:d0:23:56:ed:9e:e5:88:b7:ef:
3c:57:67:99:7c:f6:70:b3:52:8f:58:96:69:e5:a7:e8:27:e0:
8e:92:70:e3:d8:37:8c:c6:5a:6e:20:a0:74:ec:56:05:e8:9b:
03:b1:a1:22:27:4c:eb:18:0e:3e:6f:a3:69:48:16:31:74:ce:
0d:66:28:6f:92:ee:a5:28:8e:29:12:54:eb:2e:20:4e:47:d6:
9a:44:c5:5c:c7:75:a5:40:e0:17:c8:85:16:04:3c:87:a4:40:
9e:26:9e:27:dd:d1:a8:59:41:c5:c1:70:96:1a:9a:c5:dc:8e:
6d:a0:ea:29:53:b9:c8:74:83:1f:34:d9:0e:5f:e5:04:31:15:
e7:46:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:44:58 2026 by rpki-client