Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
File: r070qO03Ebas1owPSPYhgx_Vqq4.mft (raw, json)
Hash identifier: sdn4QZkXB/Tjm3oQWL+sh0IDPHI6UdYk3vCDV9doC60=
Subject key identifier: 0C:EC:25:E9:EE:49:C1:67:5E:85:8A:C4:1C:A8:D0:23:BF:A3:32:EB
Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Certificate serial: 019D9886A24EFE71072369AE396747CEE120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 23:00:53 +0000
Manifest this update: Thu 16 Apr 2026 23:00:53 +0000
Manifest next update: Fri 17 Apr 2026 23:00:53 +0000
Files and hashes: 1: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (hash: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E=)
2: cmKT8tNT04DB4snpmXdQUr0nl3Q.roa (hash: PNE5CH9WwmP98sniR82D6V4y4hCcTeAU6RiNs++jAdg=)
3: r070qO03Ebas1owPSPYhgx_Vqq4.crl (hash: E4cwuibtg8vKIvY/FXGz/oe/SBw+d10TboyARmyaMbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:a2:4e:fe:71:07:23:69:ae:39:67:47:ce:e1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae
Validity
Not Before: Apr 16 23:00:53 2026 GMT
Not After : Apr 17 23:00:53 2026 GMT
Subject: CN=0cec25e9ee49c1675e858ac41ca8d023bfa332eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:8c:07:92:2e:2c:d0:42:9b:c9:a9:66:9b:
2b:9e:e4:84:35:da:46:9f:50:7a:95:0e:99:bc:1f:
6b:0c:d3:d0:7d:3f:ae:06:0b:19:35:04:34:2c:eb:
35:45:b5:9d:9e:a9:bc:7e:8d:7b:17:9b:47:ce:fe:
11:82:17:91:66:ae:f5:9f:02:9d:de:c1:97:23:e5:
27:51:ab:ba:b8:90:05:67:50:d7:73:48:98:72:cc:
d6:fb:8e:1d:d7:6c:d0:ca:c0:2b:b2:4d:b2:22:ad:
df:a3:52:6a:1e:6d:8a:1a:23:56:04:8a:49:8d:1c:
0d:c5:80:f7:18:52:3a:a0:52:7c:b8:76:a4:f1:5b:
e6:96:0e:0d:fb:7b:c1:87:e2:38:df:06:84:81:77:
b8:e2:54:92:b7:70:49:6d:97:ef:0c:12:62:0b:39:
63:4a:6f:d5:30:29:ce:24:18:92:e0:e7:3d:d2:3f:
50:dd:ac:60:16:6c:1d:1c:14:18:cf:af:2c:17:e6:
54:a6:be:0a:46:3a:1a:1e:84:4a:1d:58:b0:07:07:
43:e7:17:14:3f:23:07:d3:ea:9e:65:c1:fc:71:72:
79:99:02:6d:cc:20:4f:ce:a4:46:66:36:a4:84:fe:
f7:a8:48:2a:0b:6d:86:34:81:37:af:0f:1c:f4:72:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EC:25:E9:EE:49:C1:67:5E:85:8A:C4:1C:A8:D0:23:BF:A3:32:EB
X509v3 Authority Key Identifier:
keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:15:c4:2c:29:79:5e:e6:f4:d0:56:52:b6:d2:61:95:79:76:
62:57:1b:9d:e9:13:ae:14:2a:f0:72:5e:2e:41:2d:7c:2b:63:
b1:75:ae:54:6f:6f:7f:2d:a9:58:de:d6:5e:8d:0d:c3:1d:63:
a0:78:53:c3:0d:7f:b2:ab:ca:4c:50:24:cb:59:bd:f0:6d:b9:
89:20:79:f4:55:61:33:7d:16:84:9b:8b:59:c2:93:52:51:ae:
bb:55:1d:e7:1b:3b:e6:65:58:25:58:7d:d9:74:9c:df:1d:80:
2f:df:24:b2:ce:75:20:2b:85:f4:a0:a7:3c:2b:a3:36:16:35:
85:0b:cf:74:4c:10:d7:10:00:4f:1a:e5:94:58:75:45:65:0b:
49:72:33:86:9e:89:e9:36:f4:6f:47:ac:0f:ba:ce:1f:93:66:
40:59:f8:8c:d8:b3:10:2f:0d:32:13:d8:02:2b:71:26:13:0e:
92:8a:d5:f3:25:c5:37:ae:8a:2e:ee:cf:0a:ff:81:10:f2:0f:
b3:17:ef:1f:a7:57:78:9d:0b:40:c6:f4:f8:df:3c:8b:94:22:
a8:4d:15:f0:69:fd:33:af:5a:c6:cf:d2:95:73:74:c8:19:3e:
80:3b:44:f0:85:f2:0f:4e:00:9c:08:c9:4c:8e:09:dc:05:bc:
23:ad:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:08 2026 by rpki-client