Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
File: sN-v02cwOW_jOOdy2tvkw8hc2VI.mft (raw, json)
Hash identifier: 1BJWsWvGJBYLKlDpeCN0MQ5zPfwDSznw3RgJBMOUTfA=
Subject key identifier: 1F:D7:E8:29:E9:B1:A4:38:29:0F:66:A8:4D:1A:F7:B7:7F:F8:F0:9F
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 019D9B87A53C175F941E735A785F398DB1C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 13:00:51 +0000
Manifest this update: Fri 17 Apr 2026 13:00:51 +0000
Manifest next update: Sat 18 Apr 2026 13:00:51 +0000
Files and hashes: 1: SQCsFnrjeuZiVY1_BfYgIg4qi-k.roa (hash: 5RBF/vlBHGxON2JarwGOKKIBZfcvo+qjnXq8BAVhPwI=)
2: dPW253uLNkMC6hq3xNGknvYUUCk.roa (hash: lFOPNOmhkr/l52mg27uVNBuUyHirwJeRRAr2NLCO680=)
3: sN-v02cwOW_jOOdy2tvkw8hc2VI.crl (hash: Q0fS+9ZDoa+J4QxEb+LPByo8zFNesIw7/Sv6Csn/awU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a5:3c:17:5f:94:1e:73:5a:78:5f:39:8d:b1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Apr 17 13:00:51 2026 GMT
Not After : Apr 18 13:00:51 2026 GMT
Subject: CN=1fd7e829e9b1a438290f66a84d1af7b77ff8f09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:34:10:59:78:02:c3:98:74:54:17:8f:e5:be:
da:46:76:01:32:0e:a3:c3:17:56:84:65:e1:25:89:
ea:44:9e:9b:91:2f:64:c8:b4:0e:52:1e:ce:e0:01:
ca:02:51:d5:6c:fe:09:07:03:95:f9:2a:e9:c1:4d:
f1:cf:c1:bc:de:71:b1:56:df:2a:4b:89:07:cd:9a:
35:f2:2f:07:db:90:a3:90:f7:ff:59:64:88:47:82:
21:5b:88:9d:12:0c:7d:53:43:ef:14:52:2c:f2:f6:
9f:a5:a7:51:cc:40:d7:46:48:fd:a2:0d:c2:b1:b2:
11:4a:76:78:86:18:72:dd:f9:4b:ae:0b:59:10:c3:
23:26:83:9a:fc:64:e6:f9:b9:10:bb:a5:f7:19:00:
e2:30:5c:95:4e:5b:0b:e6:a2:d5:64:9e:6d:cd:02:
6e:61:b2:54:3f:12:25:a4:4a:d7:00:87:53:79:27:
37:ca:79:19:d1:95:bc:cc:43:79:e8:c8:0a:e4:4a:
61:f8:4c:9f:19:ee:a8:90:be:05:92:bf:3c:98:ed:
47:56:bd:95:3d:b6:44:10:1d:5d:a9:8a:70:ab:0a:
61:0f:6c:f3:9e:86:e5:27:f9:35:8e:f8:e2:d3:ec:
5b:4d:c0:f4:32:00:17:74:8e:29:f5:79:5d:69:86:
8a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D7:E8:29:E9:B1:A4:38:29:0F:66:A8:4D:1A:F7:B7:7F:F8:F0:9F
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:68:f3:e4:ca:1a:6d:f9:97:b5:a3:49:0e:06:fc:f7:f3:06:
6e:9c:7d:ed:2f:61:f1:74:fd:37:a0:04:5c:f7:ee:e5:76:36:
44:01:0d:5c:1d:25:76:58:ef:d0:01:18:8a:6d:4e:47:36:c3:
6a:f2:fb:dd:54:0e:f4:97:97:d6:6a:12:61:46:08:e5:8d:35:
60:ab:35:80:10:88:aa:d8:9f:4b:4b:0d:2f:da:28:44:04:2c:
c0:64:be:48:8f:15:39:00:7f:61:de:64:54:a5:41:db:ad:5f:
2d:cf:a5:8e:df:79:2e:f8:57:71:0b:50:00:2a:1e:5d:f3:1a:
1c:08:72:e6:62:de:90:e1:09:52:12:22:ea:be:0e:9d:b0:a6:
0a:2a:c0:96:71:ba:21:f1:50:bd:44:d9:ee:72:f2:56:db:1a:
3a:59:99:6b:16:f0:24:53:c2:6d:7e:e3:c4:18:b2:85:3a:80:
b9:8d:cc:95:e7:cd:21:a6:b7:a6:90:c7:b5:ed:4e:a5:06:bf:
f8:94:c3:f0:ef:1e:82:13:17:6a:c2:99:1f:3f:69:1f:40:dc:
e8:48:ac:0f:89:14:14:c9:81:72:ef:f2:cb:17:05:3a:73:22:
de:c7:2b:29:98:e6:35:4b:8e:a2:35:12:f2:bf:fe:e5:3c:6e:
63:5b:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:26 2026 by rpki-client