Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: qCLirXaTVoBXcngJEyMpGhMpP/vSuLZK1FXMLklVqV8=
Subject key identifier: 48:7E:8C:09:39:7B:11:92:A1:C6:A5:8F:D0:5D:CA:56:E7:F0:9A:B6
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 019D99D0053F48479FA6CDC2DE79175124D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 05:00:40 +0000
Manifest this update: Fri 17 Apr 2026 05:00:40 +0000
Manifest next update: Sat 18 Apr 2026 05:00:40 +0000
Files and hashes: 1: 40MEQ_c5MiDjeIZ7q43bI9wM90k.roa (hash: ELdX8WZ/ccLW8SSZjkL2cwPjtp0f+jq2mrorQX0hzwQ=)
2: 71hLP2iLb16Ja7jTFMHRm2jnG4s.roa (hash: uX7PtYBV/V7p3RQFDa+MhX5C5sTxOsiUcDeuAHVj/vk=)
3: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: weMpoHZtvGF9HHJjmzE9/ISu0irHHAvWfL8SGRiwFO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:05:3f:48:47:9f:a6:cd:c2:de:79:17:51:24:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Apr 17 05:00:40 2026 GMT
Not After : Apr 18 05:00:40 2026 GMT
Subject: CN=487e8c09397b1192a1c6a58fd05dca56e7f09ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:17:94:c9:ea:61:47:c6:95:90:e4:70:34:
01:f6:04:f4:43:9a:e2:5b:9b:7e:a2:25:bd:6a:ec:
6e:04:2b:c0:19:3c:17:c2:ad:c3:0e:a1:27:80:ca:
3b:5b:99:94:c1:b7:c0:ed:41:0a:a5:a4:e2:8a:a4:
77:82:6a:c1:8c:bf:1c:c0:1c:c5:01:cf:a1:08:ea:
5b:8c:5d:81:8e:74:be:a3:5e:28:d2:e5:bb:8e:93:
68:6f:6e:d5:2b:3f:b4:17:0d:87:94:2a:19:2c:d8:
df:53:83:06:e2:57:1f:ad:f2:b0:fa:f7:d4:e7:90:
3b:ce:2c:f8:28:30:a5:91:43:6d:14:7d:2a:c8:16:
cf:72:25:6a:6d:33:f6:8f:a6:40:ab:c2:df:53:1f:
0c:b9:f8:5e:24:75:06:73:84:a6:21:a3:3a:e3:68:
ca:b2:b8:4c:6b:06:bd:6b:23:c0:ba:ba:2d:e0:c0:
32:3b:8b:e4:bf:0a:55:f7:47:0e:8a:23:79:e9:ee:
09:73:2c:2b:8f:99:ce:cd:01:41:61:2f:09:38:02:
5f:1e:1a:0b:a7:72:59:e3:48:a6:74:87:ec:1a:55:
9b:2a:c8:11:d8:91:a1:5c:90:f4:92:6c:ca:3b:eb:
d9:e7:b3:7e:84:46:9d:86:f2:fb:cc:7b:bb:54:29:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7E:8C:09:39:7B:11:92:A1:C6:A5:8F:D0:5D:CA:56:E7:F0:9A:B6
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:f8:21:aa:59:f9:3c:57:04:3d:81:3d:69:3a:e7:d0:ba:2f:
9c:8e:7e:e6:39:b0:2e:2e:07:92:8b:0d:0e:31:38:7f:5b:6c:
ec:6e:a0:3e:04:c8:64:58:64:43:e6:15:93:d4:84:2d:8c:1f:
a5:d5:34:c6:c2:93:4a:2f:0b:27:16:6d:db:a7:5c:70:fb:be:
9c:96:c5:c5:e7:5a:0b:d1:8c:c1:b7:fc:3e:f2:33:7a:8b:cd:
b2:03:45:8d:e5:3c:9e:b8:f7:45:25:95:b7:66:79:d8:de:46:
75:01:fb:ab:33:9f:db:58:94:07:19:ba:0d:3d:30:00:2e:4d:
ad:5a:59:f2:06:3b:3d:17:bc:af:18:14:94:13:b0:bd:b5:03:
75:76:3f:42:4c:05:0a:f9:b2:00:c2:a1:fd:a0:91:db:1a:09:
6f:db:27:6f:bf:18:49:c6:4b:5a:da:1a:b8:33:ee:71:99:57:
8c:c9:2a:be:76:40:01:50:2c:44:d2:99:c1:bf:94:88:33:cf:
af:e4:98:b5:8c:ac:a5:90:d2:f2:c1:77:d4:5d:8c:30:e6:72:
df:02:1a:52:5b:d4:cf:60:cf:4a:65:85:05:d1:86:2c:81:b8:
6f:8c:ee:f9:d3:4c:d1:e5:a5:2f:14:d4:09:35:7b:1b:e0:7c:
6f:67:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:59 2026 by rpki-client