Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File: rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier: Z1QFd2xpgJoJh/ubeoip8dKnDFeEug9qg4HzBcjKxAw=
Subject key identifier: 24:A1:43:77:BB:C1:13:E4:1E:5D:AB:D2:79:0B:22:B5:87:01:E9:7C
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial: 019DA3E606674ED486C0657B313A9B2D4F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 04:00:54 +0000
Manifest this update: Sun 19 Apr 2026 04:00:54 +0000
Manifest next update: Mon 20 Apr 2026 04:00:54 +0000
Files and hashes: 1: cuuVCevCVUzGr-kAkN3m1WE9FDE.roa (hash: D4SsZHbQIEHtfRHXbg7otJ679eXTgRTgVgeBr6U9wDI=)
2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: omh+I1fXFKiOB+SVFdWhTdv3GA3WVkVAvGwGaHI0g2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:06:67:4e:d4:86:c0:65:7b:31:3a:9b:2d:4f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Validity
Not Before: Apr 19 04:00:54 2026 GMT
Not After : Apr 20 04:00:54 2026 GMT
Subject: CN=24a14377bbc113e41e5dabd2790b22b58701e97c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:20:2b:89:c4:b4:53:38:c5:37:64:9b:46:43:
46:bb:b2:c9:06:fb:75:c0:80:ba:46:08:35:be:4a:
9f:65:e4:b5:4e:55:5c:7f:22:d1:f4:d3:31:3e:e2:
be:27:95:30:55:6f:4e:b7:b2:37:d8:d7:95:ee:ed:
3b:b1:d8:2e:af:b5:e5:65:dc:2b:0f:b3:49:2b:9c:
27:7b:94:8f:90:4e:66:43:1b:3e:40:79:db:55:4b:
60:ac:3b:04:ad:c5:b0:b6:1f:86:77:d9:c6:b4:40:
94:0a:73:90:e3:5c:c2:dd:47:cd:04:c8:95:d2:46:
0e:8e:ca:11:bb:57:76:6c:5f:f5:db:4e:7f:7a:79:
44:c8:aa:d7:f4:f8:7a:3e:89:76:45:d9:8c:44:83:
64:47:1a:c5:bc:bd:73:1e:cd:35:04:72:28:0e:e6:
9c:5e:0d:56:7e:3f:b6:56:e5:a2:9b:00:fd:3a:58:
a7:20:b8:f9:bd:01:4c:51:50:d7:71:da:ea:a3:2a:
7e:66:31:be:34:63:d9:f2:f1:77:ac:42:a9:63:ba:
4f:48:76:d5:7c:f8:84:89:18:9d:8d:42:0e:d4:56:
75:f6:bf:c3:8f:a9:62:29:6c:37:e9:37:7f:68:3d:
45:81:df:75:4b:76:f9:1a:bd:f4:35:a1:53:e3:04:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:43:77:BB:C1:13:E4:1E:5D:AB:D2:79:0B:22:B5:87:01:E9:7C
X509v3 Authority Key Identifier:
keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a6:d5:1e:eb:06:f3:65:96:51:ba:30:45:c2:98:bc:f2:54:
ba:f2:0a:08:b5:af:d2:2c:ee:1f:56:e3:0f:39:8e:66:bd:22:
6e:9d:c4:d2:e2:cb:c4:e2:e6:5f:f3:4b:d4:7e:56:8c:7b:c9:
37:15:78:e7:0b:a7:4d:5e:c2:f1:a5:6e:b6:4b:fd:fd:de:79:
be:db:20:f0:db:82:11:ce:85:e9:d2:8c:60:d5:82:8e:6c:9c:
3b:ed:7d:a4:df:44:a4:45:a1:7e:45:7e:ef:91:8d:4b:06:b3:
06:84:1c:bb:c8:38:5b:b9:8d:cb:96:3c:49:b6:ad:d5:9a:f5:
63:96:54:b3:7f:f5:11:7f:c3:47:20:f1:e3:48:0c:3b:25:de:
e5:dc:ce:e0:ee:02:8c:12:03:41:16:ce:98:90:79:35:b2:41:
56:52:a8:c5:98:62:ca:74:0c:70:92:a2:b6:9e:7b:0a:0e:5b:
2a:eb:f4:e9:7f:cd:e2:82:90:c3:0f:3f:c4:ce:e3:a6:ef:28:
ce:c0:d4:b8:da:6c:9a:79:5e:2c:95:c0:74:3c:26:95:76:36:
ab:a3:74:75:f0:03:84:66:a4:2a:74:34:52:f2:e4:27:62:c6:
8d:fd:a4:ae:12:16:1b:82:d2:0e:02:96:97:bb:be:60:3f:bc:
48:d6:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:48:29 2026 by rpki-client