Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
File: rLwtpPrHe7qtKaWYa0EH9THtLj4.mft (raw, json)
Hash identifier: Wxflo6eUKyj3mvxbXEdrVLyMWi7R39eycNqacM7c7cE=
Subject key identifier: 04:1B:78:E2:C1:5D:47:A3:56:D1:73:AF:B8:16:65:0E:1E:64:BE:BE
Authority key identifier: AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
Certificate issuer: /CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Certificate serial: 019D9AAB9965E0F2B081855691248A5071DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
Manifest number: 1778
Signing time: Fri 17 Apr 2026 09:00:30 +0000
Manifest this update: Fri 17 Apr 2026 09:00:30 +0000
Manifest next update: Sat 18 Apr 2026 09:00:30 +0000
Files and hashes: 1: rLwtpPrHe7qtKaWYa0EH9THtLj4.crl (hash: BUfz7wrw/pLBPXZm7W+85K+v0xrpfeQqNWwKLVGbo/I=)
2: y8suQO3vpggb8SQxYQwAFafoDS8.roa (hash: EDpf6LTQFooyZUqxXXBv0qWQ0K8M8GX1XuFaFPpkkiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:99:65:e0:f2:b0:81:85:56:91:24:8a:50:71:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbc2da4fac77bbaad29a5986b4107f531ed2e3e
Validity
Not Before: Apr 17 09:00:30 2026 GMT
Not After : Apr 18 09:00:30 2026 GMT
Subject: CN=041b78e2c15d47a356d173afb816650e1e64bebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:30:db:0c:5d:b8:1b:19:c9:8c:33:0e:3d:
cb:2e:11:49:12:8e:9c:de:8d:15:77:f2:c2:5f:dc:
05:2c:02:2c:92:6f:fe:8b:f4:05:3c:36:7e:ce:65:
f1:57:fa:09:7b:38:ab:a6:10:be:8b:0c:b0:10:a9:
a6:f5:ab:fd:a9:28:8b:e5:b1:fc:81:28:34:86:9a:
a4:5f:ff:6c:70:68:51:73:cd:44:a5:17:12:4f:d2:
fa:49:0b:5f:a2:34:8c:c7:fb:46:89:8a:b2:c7:1c:
f4:33:85:8f:18:20:d3:c0:5c:0c:f0:bd:a8:6d:ed:
d6:a7:da:94:c9:2e:df:a5:85:7a:a7:52:4a:cf:e4:
b6:98:21:3b:77:60:c3:5f:7e:e1:98:36:c2:38:3f:
39:bc:9b:66:89:9b:bb:32:ac:86:29:5a:8f:1a:5c:
af:68:4f:77:1b:1b:ac:fa:e5:08:95:65:b1:a7:03:
d2:5b:db:87:88:3b:2c:e8:56:55:b5:3d:1d:b4:97:
a8:96:b4:5d:45:38:46:9d:0f:ce:f0:18:7f:0f:75:
ea:5e:7f:f1:5e:ae:bc:5f:d8:e2:69:bb:eb:4c:c4:
4b:99:17:e0:04:a9:ae:02:ab:77:da:6a:49:d1:04:
bc:7e:73:45:48:fd:c6:06:22:e1:45:8f:da:22:cb:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1B:78:E2:C1:5D:47:A3:56:D1:73:AF:B8:16:65:0E:1E:64:BE:BE
X509v3 Authority Key Identifier:
keyid:AC:BC:2D:A4:FA:C7:7B:BA:AD:29:A5:98:6B:41:07:F5:31:ED:2E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLwtpPrHe7qtKaWYa0EH9THtLj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/98a8b9-8e99-4db3-b061-e9230e588626/1/rLwtpPrHe7qtKaWYa0EH9THtLj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:9a:21:1d:4b:52:32:58:57:49:77:8c:47:ef:ac:d3:c2:
26:34:99:b7:a2:1a:22:fa:1b:9d:b4:9a:0c:b6:c9:17:cf:b1:
4d:b6:55:77:81:bf:fc:3d:62:a4:ab:68:8c:88:14:ac:26:0a:
f7:38:04:6b:5f:e0:dc:17:4c:a5:42:f3:a9:fc:f6:24:cc:03:
c7:c5:aa:c2:4f:49:61:bc:6b:70:52:b5:06:be:3a:fd:35:aa:
cb:f5:04:20:23:45:4e:ec:00:f2:1b:27:75:eb:05:33:49:e1:
12:4b:95:d7:e0:75:06:32:5a:64:b0:40:ee:3b:30:20:99:af:
3a:78:e3:ef:b4:fa:15:3f:14:22:b3:43:00:3b:6e:ac:5a:ff:
75:a9:58:72:86:2f:15:55:aa:7a:de:5f:cf:3f:4a:06:0c:a9:
ae:89:ad:8b:21:3b:4c:f1:7a:a8:aa:d3:01:67:d0:1e:0a:dc:
c3:fd:1b:3a:67:54:13:86:e7:bb:85:b3:dc:42:cb:62:9d:b5:
04:07:63:75:1f:5f:d5:e1:1a:f4:a7:49:38:82:2e:f9:47:a7:
8f:42:44:75:14:00:e9:61:f8:03:ca:36:e6:99:03:73:54:87:
86:7a:54:19:97:48:b4:14:e8:5e:3d:bb:0d:d4:a5:01:76:04:
94:9f:73:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:46 2026 by rpki-client