Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
File: RENP2YwR2Nct84DKg-33n8wAhZ8.mft (raw, json)
Hash identifier: 9pKCNppJ3qnP7iCtQ5lafmBVTGuUFMgEbPPoD+BL7bo=
Subject key identifier: 26:22:F6:76:30:F1:E3:4C:C7:0A:D0:6C:DD:28:04:6E:70:0D:1A:E1
Authority key identifier: 44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
Certificate issuer: /CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Certificate serial: 019D9999AEDEC50C98E004938F481481631E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
Manifest number: 0D2C
Signing time: Fri 17 Apr 2026 04:01:18 +0000
Manifest this update: Fri 17 Apr 2026 04:01:18 +0000
Manifest next update: Sat 18 Apr 2026 04:01:18 +0000
Files and hashes: 1: OTZcNe4faH1uSoNvCZiXYbKK1ds.roa (hash: uIfg5U+1EbmCjtFgcikAr/bmU9dQajvTUZ3MYk7/2xU=)
2: RENP2YwR2Nct84DKg-33n8wAhZ8.crl (hash: i8cO5yEY1GxlLSspoF8jqAqAPeK2PXzJ+hF2J7RPArw=)
3: zRiHFdGjFdtLfm7gsvy2-5E0CpI.roa (hash: LIfEP9SyJvvx/mP2z1DtCTkpaRU2RlrQg1/zTilnakw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:ae:de:c5:0c:98:e0:04:93:8f:48:14:81:63:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44434fd98c11d8d72df380ca83edf79fcc00859f
Validity
Not Before: Apr 17 04:01:18 2026 GMT
Not After : Apr 18 04:01:18 2026 GMT
Subject: CN=2622f67630f1e34cc70ad06cdd28046e700d1ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:b7:67:0f:6d:87:59:07:69:b8:88:79:8d:
fb:1a:7a:0a:46:0d:34:15:2c:73:fa:4f:5d:fb:63:
dc:17:15:74:a7:dc:71:d2:17:79:99:6b:9d:4a:f4:
f1:a5:eb:c9:c8:57:fa:46:d8:49:96:3a:98:9e:22:
5d:18:89:c1:89:e7:2f:18:4d:63:21:20:80:a7:0a:
c0:23:0a:54:75:7a:18:84:b1:c6:ff:05:70:a5:24:
0f:da:45:36:f0:53:8c:22:7c:a8:d8:e3:88:e6:2d:
a9:cf:1a:7f:c8:81:e8:76:8e:0d:66:f4:77:5d:66:
f8:07:da:02:f4:0a:20:10:b4:9b:bb:d7:d4:95:16:
e3:dd:04:da:25:6c:46:db:eb:94:bf:9b:ab:8d:af:
08:bf:71:35:a0:6a:6c:87:36:f2:46:ea:2f:a8:3a:
b2:e8:1e:2f:23:87:12:91:41:aa:25:37:40:2d:48:
cd:98:4d:04:ce:c3:9a:a5:87:b6:e1:5b:44:41:7f:
97:d2:8d:12:23:9f:f6:68:8c:27:c8:c6:cc:62:1e:
3a:4c:78:ff:b0:ab:12:23:bb:e9:78:ac:93:c6:3e:
94:96:69:f4:5e:f5:b5:d8:a1:9c:24:f9:fa:6a:0a:
51:7a:7c:cf:d4:28:59:c4:17:37:b0:17:91:13:9e:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:22:F6:76:30:F1:E3:4C:C7:0A:D0:6C:DD:28:04:6E:70:0D:1A:E1
X509v3 Authority Key Identifier:
keyid:44:43:4F:D9:8C:11:D8:D7:2D:F3:80:CA:83:ED:F7:9F:CC:00:85:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RENP2YwR2Nct84DKg-33n8wAhZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cf520c-2893-42bf-a80f-237bb30d7305/1/RENP2YwR2Nct84DKg-33n8wAhZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7f:44:40:0c:a0:e4:e6:74:d9:36:cd:7d:c1:e3:41:9f:d4:
ce:62:7f:df:b3:f1:a9:e0:b4:8b:de:cc:1d:e1:eb:81:5b:ee:
a4:ac:61:d8:38:f6:7c:21:cf:34:50:42:00:11:e4:dd:63:68:
c3:11:8b:50:b5:5f:cb:69:58:22:89:b6:ea:e1:79:f8:c8:70:
a5:0f:a2:c2:18:ec:df:76:fc:ec:61:73:96:01:5a:8a:d1:93:
4c:af:87:26:d0:7f:4f:5b:bf:6e:73:c9:f0:c3:29:fa:dc:3d:
f0:f0:dd:cc:29:b7:1c:07:1a:41:c7:fc:5c:0f:3d:eb:6a:fa:
d9:db:ec:0c:34:37:25:5c:4c:b0:15:54:97:2a:fb:0e:e6:11:
51:59:33:58:c7:c7:0f:c7:06:8a:f5:2a:b4:3d:be:3a:19:cf:
6b:25:d0:10:98:f5:bb:50:4d:df:af:a8:8e:ac:43:0f:97:6b:
64:3c:99:78:36:9f:b8:58:59:4f:1b:29:f8:0b:50:fb:a6:69:
23:50:70:71:94:bd:c0:66:ab:2b:06:6b:40:b2:2a:bb:80:c4:
ed:fb:da:2d:c2:7a:df:00:8b:d3:c1:66:f9:7c:28:6a:36:6d:
c1:6e:59:79:35:4b:5a:45:81:8b:48:54:19:da:c2:b5:f9:4e:
14:b1:2b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:32 2026 by rpki-client