Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier: eVBpyoA8U98l4yQN8/VbdxMqSUYdgDN40RaADABM/Z0=
Subject key identifier: 7D:E9:90:A8:D5:E5:0D:8F:13:74:9B:FD:56:EE:06:DE:F4:83:CF:34
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial: 019D99D04E73B00F186913B9CE695C38EE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number: 0CAA
Signing time: Fri 17 Apr 2026 05:00:58 +0000
Manifest this update: Fri 17 Apr 2026 05:00:58 +0000
Manifest next update: Sat 18 Apr 2026 05:00:58 +0000
Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: xmfIai4gg6krPSfv/hVPBcGIUIZ1KXM9VArwXaxm6NA=)
2: qm9g69jYnWNc78LF3m9f86Ep1QU.roa (hash: M/tK1MAFQ93LFa0QgLHnChdjSMrNpdZDpgg6UVG6Za4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:4e:73:b0:0f:18:69:13:b9:ce:69:5c:38:ee:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Validity
Not Before: Apr 17 05:00:58 2026 GMT
Not After : Apr 18 05:00:58 2026 GMT
Subject: CN=7de990a8d5e50d8f13749bfd56ee06def483cf34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:27:5c:81:c6:e6:96:da:2f:83:17:d9:40:5d:
24:1f:7d:30:21:3c:6c:bc:ca:8c:69:18:3e:4f:cd:
4a:ee:7f:d0:d9:46:1e:f7:99:0c:e3:63:4b:e9:95:
ef:21:57:a4:fd:64:4b:85:7a:0b:b1:88:fb:73:20:
d4:05:3c:29:13:e5:46:93:0b:bb:a4:ff:18:72:3a:
49:5c:f7:3e:a2:a8:85:50:64:f6:66:4f:93:2b:79:
44:79:bf:63:5e:b7:4b:e5:18:9e:d0:15:9b:d4:ab:
a6:2a:84:08:ac:63:df:01:43:4a:63:20:52:ec:69:
96:70:04:1a:01:8b:06:9c:03:26:e1:c8:2c:07:77:
b9:89:2e:4a:69:e6:33:ba:3f:35:ff:d7:72:ec:12:
36:b0:e5:64:df:61:b9:b7:51:e2:38:78:9c:70:1f:
51:79:84:d7:9b:03:ae:55:5a:e0:71:ce:86:37:bd:
6f:af:c8:13:51:71:6a:20:4f:b9:5d:62:b4:fc:43:
e7:33:73:50:b8:08:a4:e7:9f:1c:26:05:4a:2b:fc:
36:3b:88:43:c3:70:d2:26:3d:27:61:12:e7:73:ef:
4a:3c:58:45:85:c5:85:81:0f:68:2b:f8:ed:3b:b0:
6e:5a:b8:83:1c:5e:8e:03:07:65:14:0b:dd:da:2f:
c0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E9:90:A8:D5:E5:0D:8F:13:74:9B:FD:56:EE:06:DE:F4:83:CF:34
X509v3 Authority Key Identifier:
keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:1d:6d:2e:6e:e8:bd:8e:3c:d1:15:ad:f0:45:a2:13:60:26:
a6:01:57:d3:70:3d:c0:42:8d:b3:22:b0:3e:8e:25:c8:69:35:
e2:cf:58:81:f6:38:13:f1:23:52:a4:f8:94:1d:a6:9c:e7:00:
e1:2f:c9:21:c1:31:ae:82:78:6e:12:db:cf:a7:b4:b6:8d:30:
0f:d3:5a:31:16:a9:da:92:59:a8:0f:52:68:e2:6c:f8:97:2d:
f7:5c:2f:90:65:a0:7e:05:27:df:d4:a1:c2:7a:59:0f:fd:ea:
49:b3:8e:e6:59:c4:e3:63:56:3b:49:10:81:f5:f8:f8:3f:03:
e8:04:cb:40:a7:f1:f5:02:55:7c:be:fb:0a:48:e6:7d:d4:ea:
49:1f:40:92:ea:5e:f5:c7:66:9f:e7:36:6b:d5:8f:10:5b:71:
8b:1c:d4:e8:c4:a5:19:bb:29:eb:39:1a:76:5c:48:19:47:a4:
f7:94:ea:ac:42:5e:54:36:02:d9:d8:a3:f6:c2:1f:4b:d3:bf:
46:03:24:13:16:57:7d:36:d7:ec:f6:ab:a4:57:04:39:67:3e:
83:72:d7:41:b8:ce:0f:42:b7:a6:7b:58:c2:96:48:27:b9:a0:
f2:95:7d:60:ef:66:76:17:69:62:bd:69:74:df:05:6e:3a:8d:
16:87:38:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:59 2026 by rpki-client