Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier: /D7dR8k/kaSnhw+XAyqmiYGNvX10x0NyV/baFldI68I=
Subject key identifier: 56:7D:3A:45:66:77:6F:75:07:44:7B:C3:D9:BC:3D:F9:0E:EE:2F:15
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer: /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial: 019D9AABAB238F3D217BE8B329C6D1B9E186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 09:00:34 +0000
Manifest this update: Fri 17 Apr 2026 09:00:34 +0000
Manifest next update: Sat 18 Apr 2026 09:00:34 +0000
Files and hashes: 1: J5kWKaTeftcxN3T6_7jKcPf3Q4g.roa (hash: ZKoxCa2uj0cYbH0WJu6XJV9TAVwhK/nXaOs/emSjvm4=)
2: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: CY5ycMzOynB9Bnw/BBxqJktbLvnIg7Edv2x3Q44ZUac=)
3: gmSsfOKXQkDDy4ovXXqyVsXoK10.roa (hash: Fo+hT/a1FZatdtcuWByXNim69uyN5v6qXMsqXNhOVFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ab:23:8f:3d:21:7b:e8:b3:29:c6:d1:b9:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
Validity
Not Before: Apr 17 09:00:34 2026 GMT
Not After : Apr 18 09:00:34 2026 GMT
Subject: CN=567d3a4566776f7507447bc3d9bc3df90eee2f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:c9:9b:e7:a0:ea:07:1d:a7:7c:a5:bd:68:
68:89:e0:1f:d6:c0:62:09:81:d0:7d:29:e5:17:82:
89:41:f8:d2:73:eb:2c:d5:63:5c:8d:0f:d8:96:c0:
25:28:22:f9:fe:f9:41:36:56:e5:91:e8:6e:7e:1f:
b7:8d:e5:72:35:53:73:59:71:88:e0:a2:3e:00:5d:
49:09:73:83:6c:bd:9a:18:4f:33:f1:d8:f6:61:9e:
84:18:04:a8:40:89:4d:dd:95:f9:57:1f:4d:da:a9:
56:a3:66:23:f5:fb:7d:ed:56:53:ba:59:49:77:61:
7c:24:af:b6:19:45:aa:2c:99:08:e8:27:96:7e:a8:
32:dd:b5:57:2b:f1:88:df:f8:28:22:52:35:c2:56:
21:06:47:c6:7e:01:05:3a:b1:e8:07:59:aa:24:4d:
a4:91:e7:b4:fc:93:c1:12:38:d3:de:00:e9:5d:61:
b2:e1:fc:20:73:95:a7:8d:ac:c4:3e:a5:26:02:68:
4e:d3:bd:3c:9b:15:50:c8:aa:fc:f6:e9:12:5e:c2:
bb:8c:19:bf:de:6a:b6:67:09:32:fc:4d:5b:c5:e9:
d3:27:48:f9:ce:06:ee:b1:f0:16:aa:42:0d:65:ac:
61:ee:ab:c7:36:e7:c5:8e:b4:ac:12:35:45:f4:e4:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7D:3A:45:66:77:6F:75:07:44:7B:C3:D9:BC:3D:F9:0E:EE:2F:15
X509v3 Authority Key Identifier:
keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a8:75:41:a5:93:ea:42:c3:9a:0b:4c:89:46:7c:e8:9b:43:
79:d8:55:ec:2e:fd:7c:5a:3c:1a:e7:e4:63:71:90:42:c7:f7:
7f:99:61:a9:f5:22:08:3c:61:41:9a:a1:84:8d:e8:a7:aa:39:
64:05:1c:36:76:aa:37:c4:c5:ec:8a:87:8f:25:c1:2a:2a:8d:
49:94:27:81:ff:db:cc:f7:dc:52:73:9b:a6:d8:e9:e5:25:32:
2e:d6:ed:09:1d:30:36:90:aa:08:02:97:8b:f8:fc:c1:54:a6:
cc:d7:69:dc:28:a3:6e:9b:71:22:48:ae:bf:f7:c0:02:80:e8:
ff:6c:46:52:75:6a:aa:03:c4:0c:1d:e6:05:c9:1f:89:1e:ea:
c6:1f:89:10:fa:e6:8e:32:ab:03:25:bb:4b:55:a8:b2:17:1d:
5b:43:4d:20:98:41:25:97:ae:20:52:c2:1e:4b:b1:fa:0f:fe:
3b:59:e5:a8:2f:32:1e:96:75:39:f7:74:b9:57:10:7f:5c:92:
4e:c5:11:63:9a:bf:b6:cd:f7:65:be:3c:ab:76:e5:f7:71:14:
96:61:ce:ba:76:2c:01:cd:16:63:9e:0a:8a:dc:86:85:18:fe:
4c:36:8c:cd:cd:ad:1f:e0:bf:c1:a9:df:ef:02:ce:c2:4e:ad:
35:53:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:54 2026 by rpki-client