Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File: t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier: 7k2c34cqkwnSxDQKtdOL9+qkRRE/StC0vE+4m/vjh4Y=
Subject key identifier: A7:F1:A0:D2:E3:7B:49:52:9B:3B:24:4E:85:33:5F:B7:FE:39:A0:0D
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial: 019D98BD98932A147E7426D93D4DE96A44A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:55 +0000
Manifest this update: Fri 17 Apr 2026 00:00:55 +0000
Manifest next update: Sat 18 Apr 2026 00:00:55 +0000
Files and hashes: 1: E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa (hash: uZyNbiAwY6QAC7VVWqEYh3JF/qKdTnkMJgQyPmYloS4=)
2: H_uDKBlLLYWjSkRrdAcK39eeDV0.roa (hash: sLa+J14Ys0E4r0lAG5B4hthFqhO6LkphRctxzt1Vj/U=)
3: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: ghvskthK+XTFKyCaqDfvuVhiFyJKo3Tuxis45I+PLe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:98:93:2a:14:7e:74:26:d9:3d:4d:e9:6a:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Validity
Not Before: Apr 17 00:00:55 2026 GMT
Not After : Apr 18 00:00:55 2026 GMT
Subject: CN=a7f1a0d2e37b49529b3b244e85335fb7fe39a00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:cc:9a:e7:19:fd:3e:53:e2:ac:ad:1a:bd:
4b:67:3a:89:75:8d:cd:df:2a:dd:a9:d8:f4:40:d9:
86:05:3d:74:77:88:59:19:75:96:90:f6:94:a1:8e:
7a:55:dd:f9:cf:e9:3d:c1:8a:a8:4d:77:6a:c2:10:
a5:47:1a:31:f6:8b:9b:48:53:73:f7:2c:a4:f5:52:
62:e3:24:4c:1c:70:36:52:80:61:9a:22:5c:72:dc:
84:02:37:80:a8:15:ee:b1:9f:d6:79:90:66:46:b4:
f4:9e:44:cd:c0:e9:3a:81:0c:2e:6c:b8:a5:90:02:
8f:76:59:09:f4:75:8e:41:55:35:cc:ec:73:53:5e:
8e:8e:23:88:75:2d:f4:b7:f7:0f:3a:81:aa:7b:3b:
bb:03:98:ad:ec:42:3d:44:67:fb:8d:cc:e1:84:f8:
dc:4b:37:7a:f2:50:8e:4e:bc:42:fb:25:ab:31:3a:
0d:a4:3b:58:3b:a6:04:c9:24:19:68:ab:83:66:17:
b5:7a:f6:80:8c:13:5a:91:a2:6b:3d:dc:a7:41:cc:
9b:04:fa:fb:a6:62:61:24:b0:dd:ba:3b:a8:2a:8d:
bc:a6:e9:4b:17:30:0c:be:f0:58:33:17:8b:e9:79:
44:ee:05:ed:53:58:c1:fe:16:8f:fb:3e:18:ab:d3:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F1:A0:D2:E3:7B:49:52:9B:3B:24:4E:85:33:5F:B7:FE:39:A0:0D
X509v3 Authority Key Identifier:
keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:18:20:5e:95:48:33:ec:a0:19:2b:21:af:4f:1f:86:9d:d5:
5b:22:74:00:61:ae:23:14:fc:ae:5b:45:b9:cb:21:f9:8f:b4:
87:d1:ab:4e:90:49:19:c0:d7:c5:32:d2:52:b4:06:aa:87:e7:
a7:bc:b6:bb:6f:a7:25:e5:d5:07:a5:12:91:00:5f:0c:54:62:
a9:1a:47:c4:7c:23:c7:de:65:c3:f9:47:2b:9e:51:45:f9:13:
f0:dc:dd:19:38:ec:8d:97:06:3d:68:e1:73:7c:a1:23:33:78:
5b:24:76:b6:45:4d:49:1c:a6:b5:d6:ac:dd:f3:4e:b4:c0:34:
46:8a:8b:0c:a5:f5:cf:ff:89:0c:5e:90:ae:e5:1c:cd:4d:f2:
9f:cb:02:e5:c9:2d:5d:05:5a:be:11:dd:4d:72:90:ed:19:89:
63:71:23:9e:1c:f6:e1:9c:c6:88:04:52:03:69:51:a7:ea:f0:
b8:48:7b:bd:68:6a:3b:3d:4c:cb:2c:49:5b:a1:f1:17:da:b8:
d8:ca:8e:c6:a7:fa:ba:f7:cd:67:fd:8b:44:c8:b2:8f:ba:f1:
f7:24:68:28:3f:60:6b:96:02:a8:fe:9e:8d:3f:ed:5a:8a:30:
cd:7f:2c:04:97:32:b9:f6:ad:b2:81:e0:43:19:9c:bd:bf:d3:
0e:a1:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:39 2026 by rpki-client