Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
File: c21yTiOe-38ve-pSap4MXn_Im74.mft (raw, json)
Hash identifier: qp7pyp7MouDFIooLR2KGyXk2BNNLB3MioOOGOIw1RA0=
Subject key identifier: A5:58:0D:15:C1:2C:FF:8F:2B:20:B8:3C:1C:AB:0B:93:0B:9D:49:36
Authority key identifier: 73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
Certificate issuer: /CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Certificate serial: 019D9961DD571E0A0F74A2A9CC87D94A8E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 03:00:20 +0000
Manifest this update: Fri 17 Apr 2026 03:00:20 +0000
Manifest next update: Sat 18 Apr 2026 03:00:20 +0000
Files and hashes: 1: CzuBwM8BexrMvmVe1lNGnFx0SsI.roa (hash: oYbWXOSCXTX+A100giVddYXbi/Uhc0FrRcUcum8QwfU=)
2: FArXL1JBxBIhbGVrwaflCucFOq8.roa (hash: AOe3tdekyCDra8yyNdQxen9Bx4xuh6A4UvlcGwvAu1A=)
3: c21yTiOe-38ve-pSap4MXn_Im74.crl (hash: 71lVdQHfNmvW+wdwi4wkdNJXCPjRrRtFTPsHWP6cIcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:dd:57:1e:0a:0f:74:a2:a9:cc:87:d9:4a:8e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736d724e239efb7f2f7bea526a9e0c5e7fc89bbe
Validity
Not Before: Apr 17 03:00:20 2026 GMT
Not After : Apr 18 03:00:20 2026 GMT
Subject: CN=a5580d15c12cff8f2b20b83c1cab0b930b9d4936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:05:ba:af:d3:ca:64:e3:d0:2d:61:0a:9a:
09:42:70:d1:67:83:80:3d:f6:d3:e0:3d:97:68:e1:
3b:99:8b:c7:ac:2b:ac:07:26:c1:40:96:50:a5:37:
40:ba:7f:80:8f:fc:4d:a5:29:54:52:a8:c0:62:3f:
a2:5b:8d:c9:be:93:ba:69:1c:d7:45:b9:d6:40:3b:
d6:0c:38:bb:54:08:36:96:30:86:50:5c:42:04:25:
d4:f1:22:b6:55:ac:2b:3c:59:57:7c:4c:54:97:10:
89:60:88:da:4e:36:f0:66:84:51:b2:e7:bf:f5:c5:
01:8a:c3:10:96:46:c9:1b:b8:cf:00:ee:56:1c:89:
c7:59:23:33:74:99:a7:7d:3e:af:b3:d1:3d:00:83:
7e:b1:6e:e2:84:d7:84:83:91:2b:e3:15:48:ea:18:
27:85:98:18:52:f0:99:6b:21:a3:41:e0:7b:f9:65:
01:27:fa:3f:c5:95:91:e1:31:5f:b1:36:13:ff:98:
45:6f:7c:5f:54:f8:c1:bb:a2:c2:89:2b:5d:de:5f:
10:f0:00:c7:d2:63:df:91:1f:d7:5c:d6:7f:e3:5d:
62:9e:f8:6f:7b:93:16:c9:fd:76:91:93:9a:76:56:
b0:b3:8c:32:b9:d9:17:22:55:a3:87:0a:3d:8e:01:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:58:0D:15:C1:2C:FF:8F:2B:20:B8:3C:1C:AB:0B:93:0B:9D:49:36
X509v3 Authority Key Identifier:
keyid:73:6D:72:4E:23:9E:FB:7F:2F:7B:EA:52:6A:9E:0C:5E:7F:C8:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c21yTiOe-38ve-pSap4MXn_Im74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dfc110-7924-49a9-8564-0bebfcbde1f3/1/c21yTiOe-38ve-pSap4MXn_Im74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d9:e8:27:cc:4c:13:07:77:1c:da:44:20:1d:00:f1:21:d5:
b3:12:e6:9b:6a:8e:ed:3c:ad:6c:8a:cf:57:74:47:e2:a4:7f:
d6:ab:d6:94:9f:f1:88:72:3c:e3:a8:ef:69:a3:b6:8b:c2:97:
42:47:a7:5b:b2:c6:10:c4:78:5e:fc:d0:53:e3:c1:d7:70:48:
82:3e:a1:71:3e:e1:b1:9d:aa:fb:1d:27:91:d3:df:cb:c5:3c:
9a:b8:fb:75:82:87:09:84:98:3c:05:e9:9b:68:94:1c:2b:70:
bc:1a:8e:a9:28:6e:1c:6e:89:d2:36:c2:95:22:46:cf:af:7d:
a4:ea:81:4f:4f:40:e3:3a:43:92:87:22:62:b1:9d:ed:f8:08:
5e:41:62:81:af:97:89:92:c4:89:cb:4d:65:3d:ed:7b:89:84:
34:08:32:19:59:e0:87:97:9b:77:43:9b:01:86:43:b8:1d:9b:
ba:d7:98:15:70:3b:09:9c:49:e2:54:a9:f7:bd:a7:bb:34:32:
25:72:3f:88:f8:a4:71:49:ac:38:ac:8d:66:71:ca:b7:3c:72:
16:ee:a0:da:b7:4e:8f:2c:1a:76:f1:a9:d5:2a:ae:06:b5:8b:
09:e0:2f:f4:0e:90:d1:52:61:d8:da:4c:0f:5a:a3:36:5a:f6:
2b:82:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:29 2026 by rpki-client