Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
File: ot5KBypby3TSDpLdu9f2R3w8j84.mft (raw, json)
Hash identifier: /S+nk4UzceL4cAhvpWUD9rU1hy4P1qZqIDf7LCZOHaU=
Subject key identifier: A2:FA:EA:63:5B:A4:57:0C:28:F1:D0:6F:F9:92:F5:E7:8C:3A:BB:8C
Authority key identifier: A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
Certificate issuer: /CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Certificate serial: 019D992B9AD021C494CE0F890089213ED85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:01:04 +0000
Manifest this update: Fri 17 Apr 2026 02:01:04 +0000
Manifest next update: Sat 18 Apr 2026 02:01:04 +0000
Files and hashes: 1: QVqjoZxOanPkSrpEE0sDBKehWCQ.roa (hash: k/xCn5DILtdCdVds1aCxyFqhcnoj9r7lODhjJ0bo6sk=)
2: ot5KBypby3TSDpLdu9f2R3w8j84.crl (hash: OjxJ5BqRi31xBYZpu5CfKFnn2DPGBkYol/zPotuxqoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:9a:d0:21:c4:94:ce:0f:89:00:89:21:3e:d8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2de4a072a5bcb74d20e92ddbbd7f6477c3c8fce
Validity
Not Before: Apr 17 02:01:04 2026 GMT
Not After : Apr 18 02:01:04 2026 GMT
Subject: CN=a2faea635ba4570c28f1d06ff992f5e78c3abb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:1d:58:c6:e9:16:98:cc:68:6d:6b:ee:a9:
2d:f8:e7:93:93:17:1b:43:90:36:ae:81:a2:c4:3f:
21:a7:f6:21:98:56:f9:34:80:22:c1:d2:aa:f5:8a:
84:ff:2b:78:05:eb:6a:cb:d4:f0:b0:20:79:cd:d8:
e1:48:d2:43:0f:23:ee:7e:89:76:e1:c3:51:75:a8:
d6:bf:99:0a:de:72:d7:de:6d:27:bd:d7:df:c5:37:
32:b0:c9:bb:08:96:f5:a0:4f:76:5c:60:af:39:67:
91:4a:16:4b:df:a5:91:de:a3:46:0e:1a:cc:b2:c0:
ab:16:7d:92:01:4a:fa:84:37:94:34:46:72:0b:29:
cc:0e:0a:00:1c:21:16:0a:c4:1d:b6:bc:8d:7d:10:
81:68:8d:96:c9:b7:da:40:fd:63:41:a7:a7:89:0a:
48:e1:c0:ce:4e:bd:77:10:68:1f:db:be:9f:d0:b0:
af:e8:ac:e6:3b:01:e8:20:60:0e:bd:c2:ef:c3:4f:
1b:15:c4:24:a8:2c:84:87:58:71:9c:b8:49:f9:ac:
e0:36:a7:bc:c7:3b:86:cc:ce:e3:e6:74:de:a3:cd:
62:2a:ea:50:1c:02:03:26:74:f0:10:fa:3b:e5:1a:
c2:6f:31:6e:5b:9c:b7:e9:79:6b:e3:a4:40:dc:fe:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FA:EA:63:5B:A4:57:0C:28:F1:D0:6F:F9:92:F5:E7:8C:3A:BB:8C
X509v3 Authority Key Identifier:
keyid:A2:DE:4A:07:2A:5B:CB:74:D2:0E:92:DD:BB:D7:F6:47:7C:3C:8F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot5KBypby3TSDpLdu9f2R3w8j84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e05a3a-1307-41cb-b4c1-64a56046bca7/1/ot5KBypby3TSDpLdu9f2R3w8j84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a3:79:09:8a:7e:86:f4:78:fc:da:34:fb:c8:76:6e:fa:df:
43:99:ac:8e:16:78:4d:ac:88:95:90:fa:f9:1c:a1:24:aa:8a:
d4:c0:b8:8f:58:ab:31:f2:0d:18:10:66:27:72:56:51:92:3c:
d7:f6:45:f7:62:94:a3:08:2e:7f:f6:f2:e3:7b:cd:05:9b:14:
c8:cb:6d:28:1a:d9:b7:da:42:8f:73:af:8f:86:ab:da:e0:27:
5b:d6:94:74:28:31:d1:b6:b8:c2:0c:92:e9:00:6b:f4:d7:fe:
08:34:e4:8b:82:9f:01:36:f7:e1:52:90:6a:c3:f0:9f:91:9d:
e1:bf:96:99:77:7b:6e:27:74:39:ba:98:9e:c6:5e:e0:bb:57:
06:04:55:0e:b5:8f:e6:95:1b:62:1d:c8:11:94:d1:77:99:9e:
71:1f:a4:21:5f:d2:a1:da:3b:c9:55:4a:c4:46:9b:aa:8f:ec:
3b:66:eb:a9:cc:a2:71:b4:1e:46:bc:76:c5:2e:a2:24:58:70:
a9:88:6a:e9:0d:11:5d:87:21:72:ea:75:3a:a4:22:f1:42:96:
14:c7:13:82:f4:f4:42:2e:a2:d5:57:18:e8:de:6e:df:d2:86:
8e:07:7c:2d:fa:01:76:8f:f9:21:6a:3b:76:cb:e4:f6:69:b2:
86:72:e6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:03 2026 by rpki-client