Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
File: aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json)
Hash identifier: H9cw2YPVwKEw/wS+MgQLdX7hF2dwmDYsEw2EjzeXsv8=
Subject key identifier: 01:48:F9:B3:01:5D:35:FF:98:B9:5A:C9:90:04:78:68:F1:D6:8D:4F
Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02
Certificate serial: 019D99D05549DCA0D7F94AE801E34C8D970E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:01:00 +0000
Manifest this update: Fri 17 Apr 2026 05:01:00 +0000
Manifest next update: Sat 18 Apr 2026 05:01:00 +0000
Files and hashes: 1: 1U6aj4iJ-y4osFcsxDSCV5GyIkA.roa (hash: UcR0Wdw86ylcwoNswSuJ+itYBJCzYFEmZPLbaTiKVvU=)
2: IGOtfSCHb-PcgN6otd-LjwgBgcY.roa (hash: mIaFqnuv58vVdHvIIehpAChWeIDBu6nXZiEhEu38H88=)
3: QgnGVYDtjT7Xiv9bSXAiMYcOfC4.roa (hash: 7jyRblRC2U+uJRMS8zI6UzI2pyhKabixPwkdu8GGav8=)
4: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: O7RNwTm0AHfE01f3P+0EXmGElVf40AnhHQnkMY2C2J0=)
5: rgfQ7RnUFYhCryuejjkJdBuljlI.roa (hash: zzWPOS9zzP/+5hzXtVsNoePksI2Qor0wOj+9tNGbjH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:55:49:dc:a0:d7:f9:4a:e8:01:e3:4c:8d:97:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02
Validity
Not Before: Apr 17 05:01:00 2026 GMT
Not After : Apr 18 05:01:00 2026 GMT
Subject: CN=0148f9b3015d35ff98b95ac990047868f1d68d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c7:15:e7:44:42:6d:b0:46:fe:41:f5:cd:c2:
76:df:6b:f5:54:78:d7:fb:9a:0b:f7:e1:73:c6:25:
fc:cb:dd:ea:04:7d:85:ca:a9:a9:e9:6b:2a:fd:e8:
c2:bd:10:b5:f9:85:93:d0:ad:1f:eb:d5:0a:ad:26:
24:84:b4:3a:bf:04:ee:b4:bb:dc:ec:d1:43:6c:1c:
df:6c:09:52:27:d6:8b:e8:25:d9:25:ef:31:ed:a1:
4b:a4:51:87:32:0d:4e:93:ba:26:7b:6f:72:d5:c4:
55:e1:69:fa:9b:26:d3:d2:c6:21:09:50:43:96:af:
d5:a6:ca:93:7e:f0:d9:b8:66:db:f1:f7:47:fb:a2:
da:c4:12:aa:93:ba:62:dc:16:29:19:6a:be:90:92:
e4:b5:cb:25:fe:77:07:50:b3:fa:b1:9b:90:9c:9c:
c1:98:e5:1a:ea:48:2d:c5:84:0f:b4:53:09:35:53:
28:e2:e9:09:ca:d2:04:f5:57:6f:63:0d:d4:07:87:
24:c1:19:7e:08:f6:32:57:11:55:1c:7d:72:28:7e:
cf:3b:26:00:d4:8b:82:bd:01:38:fd:14:65:44:5c:
e9:aa:15:14:5e:d8:0d:9a:c4:a7:0d:a7:19:2b:f4:
a8:b0:17:c8:a8:7a:97:ab:2b:a7:a1:ed:41:ce:a2:
3b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:48:F9:B3:01:5D:35:FF:98:B9:5A:C9:90:04:78:68:F1:D6:8D:4F
X509v3 Authority Key Identifier:
keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:10:05:04:c9:af:e1:97:66:ee:40:e9:44:bf:8e:dc:df:0d:
19:70:49:fe:59:cb:2b:ac:1c:ce:5f:1c:f3:fc:6d:92:9a:72:
23:d7:13:6c:81:84:f4:f8:ac:cb:26:5d:77:a9:17:91:0f:bc:
7f:7f:86:15:37:cd:d7:38:f5:48:04:87:76:70:a0:27:3d:97:
8f:45:03:dc:b3:f8:19:e8:32:77:76:6e:28:f8:71:59:e8:05:
36:3f:66:de:2a:85:8f:8c:1d:9d:3a:ec:d8:9e:41:b1:3e:53:
51:d7:da:a6:08:e9:b1:ed:75:0f:75:e4:05:07:51:9c:59:28:
e9:95:6e:9d:69:13:0b:f9:7d:dd:26:cc:45:23:8d:81:07:e1:
dd:f7:53:a8:3e:64:d2:20:50:fe:43:62:fb:1a:99:38:23:b7:
1d:9c:c3:48:30:fb:58:7a:4d:4f:52:ad:fd:c4:49:82:fc:67:
32:b5:b4:e5:d5:c2:20:9e:82:83:02:4b:7c:a3:60:a9:c3:56:
09:c4:38:0c:c3:07:09:e5:32:47:22:b8:43:48:6b:0b:73:12:
3f:b6:af:84:dd:83:75:87:df:28:a6:af:f5:c1:ba:bb:9e:e5:
16:28:2d:fa:2f:77:2e:7b:f7:7b:16:08:32:33:50:9a:78:d9:
8c:45:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:54 2026 by rpki-client