Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: uWdsaDwKNgqtLbzL2RxcdzKmd1OrrfL1UOCJ6ysmjqQ=
Subject key identifier: FB:FD:EC:3D:CC:EE:B9:FF:93:D3:94:3E:0D:5F:89:8B:ED:C7:C5:B8
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 019D98186BB2B1FE325C76D684EE86194C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 18D5
Signing time: Thu 16 Apr 2026 21:00:30 +0000
Manifest this update: Thu 16 Apr 2026 21:00:30 +0000
Manifest next update: Fri 17 Apr 2026 21:00:30 +0000
Files and hashes: 1: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: NQpk0avp8Ea8Vp5EklwPQOh723Qgbf+rNpm72Oy5ifA=)
2: Rn6gBvYPX3hQXv1hSbp5uIqfLTU.roa (hash: s2MjAbFmZskhe8c8syDINl1Qg2IP1alqQzWM8hgpGaM=)
3: TlxudI56qO6of0dAIoNLmCi7I34.roa (hash: B3yUGQlhYhc7VNecnPXWnG2paPKfqBVLLURsN83ieM0=)
4: bBRHEbBLhbg9wCsS_iJI_qQCtmU.roa (hash: OVMMAYB5tWUbOWSKmmoDK0ZdfXUXKleZ2dlScSPtSDQ=)
5: cYkdq7RvTgo2pKuXFLBexq9t3Ok.roa (hash: WW1sV/JlbJIiOPshgqbWE3XdqcXrSGfYrIMBmLnGHOI=)
6: he4JY2N5j1RFVekn19UcBublhH4.roa (hash: zGU9xsq9X0zM4oIz4ddypQ8oes1HfykPzY/Z6pokZvs=)
7: ilv6pJFlbr4GWPw2GwOQzeaVJrA.roa (hash: nRolxWCEegQPS3m6t9UXAzzNjfiOdo+TR28a/j2xZSo=)
8: z6aB_tk9HXWBZFMdk6CTGtazxPg.roa (hash: 8IbY39xTjqBHsVFai4Fj5PzkqHzZhOmpMa5oZHBzBMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:6b:b2:b1:fe:32:5c:76:d6:84:ee:86:19:4c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Apr 16 21:00:30 2026 GMT
Not After : Apr 17 21:00:30 2026 GMT
Subject: CN=fbfdec3dcceeb9ff93d3943e0d5f898bedc7c5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:23:63:0c:b6:6c:02:07:e6:92:dc:30:a1:
a3:5e:60:c7:6a:1a:ac:b1:e9:c8:f0:bb:04:80:18:
d3:9a:b9:f4:58:2a:c1:6c:cb:44:7b:cd:96:34:ff:
d7:18:13:f2:c7:69:7a:f1:70:31:75:db:02:2d:4c:
13:9b:53:4b:50:f9:f5:60:2c:8b:79:ad:c9:95:55:
96:4e:1c:d3:de:df:80:7b:ae:9a:91:2b:04:32:1b:
b9:78:25:e7:ff:da:2e:af:8a:46:db:59:d8:c6:a5:
0f:84:d0:0a:f2:09:1e:35:1c:36:9b:91:e9:f6:ce:
5a:9b:43:47:4f:9c:92:78:87:80:13:8e:c3:fc:84:
70:99:c5:48:a0:42:df:3b:db:ac:7a:6b:f4:e6:bb:
4c:58:99:4a:d7:db:0c:79:4e:7f:54:af:b4:51:37:
6d:6b:60:05:6a:af:2b:c1:12:5b:fd:9c:bf:9e:0b:
fd:b6:f1:d3:0a:21:16:30:49:cb:35:37:9d:2f:3a:
d7:1e:62:3d:46:64:46:80:dd:a8:7b:89:98:e3:ba:
0a:01:70:d9:35:00:df:09:86:81:9d:9f:fa:58:eb:
c4:ac:25:29:a2:c1:df:4d:af:00:90:fc:0c:d3:8f:
f8:42:6d:ea:7c:02:21:16:89:6a:3c:71:d3:ab:20:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:EC:3D:CC:EE:B9:FF:93:D3:94:3E:0D:5F:89:8B:ED:C7:C5:B8
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:47:81:8a:b5:04:20:57:d9:66:c8:fa:d0:0d:c4:01:c9:d9:
08:53:ba:ad:42:f4:f2:de:27:ee:1c:63:c7:89:90:5b:51:81:
95:22:fa:f0:9b:51:18:a4:20:da:f7:46:bf:da:6b:74:cf:33:
cb:a4:d6:cc:71:ca:cd:fe:3d:d3:2c:1c:ec:95:a8:c4:76:f9:
c1:3a:b8:66:be:4c:3a:4a:08:f2:4b:e8:93:3a:d5:51:09:70:
32:75:b8:85:77:c0:04:4e:ef:90:6c:4c:35:55:5d:65:90:0b:
02:6e:d0:d4:86:b8:45:aa:29:32:4a:4e:48:c1:29:e3:9e:ed:
45:0f:86:f5:99:d5:c4:04:60:dc:cd:8e:74:2e:55:1c:e0:2b:
33:bf:0f:1f:bb:cd:98:46:17:8e:ab:5b:6f:29:a5:22:30:f9:
8b:a0:61:75:1d:57:c0:f4:45:c7:7c:ef:20:ae:65:75:07:25:
de:35:4b:2a:fb:6f:4e:6f:a5:06:e5:d6:21:dd:e0:a7:5c:6c:
6b:09:31:d3:7a:05:d4:ad:39:45:3c:ce:6c:ab:89:46:28:45:
c8:eb:67:0e:95:20:e7:1d:1e:8d:9b:8d:55:b1:67:e7:9d:99:
15:d3:fa:07:eb:c9:b6:93:b9:b6:ac:13:fe:ac:ed:18:11:a8:
99:96:c9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:47:49 2026 by rpki-client