Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: mD5YbagefcBvEP+8FEbvwOa/GS4OirSGmB8jaik6GAo=
Subject key identifier: 32:8E:4B:9B:80:C9:37:F1:45:18:96:1A:2D:86:42:44:5B:E9:D2:44
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 019D98869BC934331ABAA6CA25756F9DA636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 23:00:51 +0000
Manifest this update: Thu 16 Apr 2026 23:00:51 +0000
Manifest next update: Fri 17 Apr 2026 23:00:51 +0000
Files and hashes: 1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: HWhRQQLa74B5GRSWXSXEiYs+1gAsCQYxnFSLA5MoEyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:9b:c9:34:33:1a:ba:a6:ca:25:75:6f:9d:a6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Apr 16 23:00:51 2026 GMT
Not After : Apr 17 23:00:51 2026 GMT
Subject: CN=328e4b9b80c937f14518961a2d8642445be9d244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:b8:77:43:81:14:6c:79:85:d6:7e:91:b1:
69:3c:b4:72:85:aa:34:78:33:23:3d:74:bf:a1:c4:
f1:f6:53:5b:bf:7a:21:f3:6c:5c:50:0d:67:12:d6:
d7:19:1d:ed:ce:1b:b4:99:34:05:e1:2b:d7:6d:ae:
fc:13:36:d7:6d:d0:99:08:90:94:f1:d1:be:4f:a9:
b1:49:e8:d4:1a:03:8c:fa:fd:e0:30:73:10:3c:a6:
47:81:36:84:5a:a8:05:31:c0:a6:d3:3e:f4:57:4d:
58:88:ed:1a:c8:a0:f2:64:b0:a6:f6:d7:2a:00:89:
b2:32:61:c2:68:55:2d:9f:00:10:5c:b5:b3:3f:74:
5b:78:c0:fe:1f:6b:cf:af:56:db:8e:f3:ac:73:03:
96:25:b1:da:4a:6c:36:8b:3e:6c:74:dc:e8:20:21:
c4:2e:0d:89:01:1c:cc:c5:4b:c2:bc:7e:78:de:6c:
fe:52:0d:1d:ec:8e:66:0e:e4:37:27:68:a0:ed:53:
cf:20:12:61:df:8c:d2:ae:a1:94:d0:59:3e:a0:d8:
26:cb:1c:e1:7a:66:2f:16:1f:26:dc:8a:39:1a:e1:
85:00:b5:31:2d:f3:6c:e9:bc:28:32:00:8e:0b:88:
c9:17:bd:e7:15:b2:1b:47:af:b5:1e:5b:1f:1c:7d:
df:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8E:4B:9B:80:C9:37:F1:45:18:96:1A:2D:86:42:44:5B:E9:D2:44
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f0:f7:71:9b:3c:b2:41:ff:16:ab:3d:b3:2a:46:da:76:16:
2b:52:ec:88:a6:2c:0b:d9:00:7c:f3:99:01:a1:ef:e1:00:3d:
79:b8:8e:6e:b7:73:af:2e:09:ea:33:af:26:80:27:0a:e8:6e:
7b:49:b1:0a:5e:9f:67:93:89:e1:e5:36:fe:52:dd:f1:b4:47:
d2:46:d3:4b:7f:be:40:a2:e3:e9:db:20:29:13:fa:ab:50:81:
66:cb:73:54:7b:cd:ce:7b:de:61:f7:4d:45:e6:7d:5d:4f:d1:
28:9a:00:67:61:b1:1a:f9:2d:4b:24:d1:af:3f:7c:67:7e:49:
f6:f8:d3:95:38:8d:07:dc:bb:91:69:08:72:97:fb:82:ba:8b:
a0:9c:e4:d2:9b:cf:89:1f:42:bf:66:74:eb:6b:07:9b:44:44:
cf:f0:a9:0c:42:82:68:e0:5f:11:e4:44:56:dc:b8:eb:b7:c0:
67:13:87:25:5e:fb:d6:af:29:00:5f:d6:fd:12:c1:51:bf:bd:
4f:32:00:2c:13:93:3c:19:3d:7f:e0:0e:20:39:16:92:c2:b4:
bd:7f:50:0d:fc:78:88:f8:4e:3c:3d:4b:d7:4a:92:ae:c4:73:
3c:25:19:73:59:56:ee:36:29:22:e6:8c:7c:7d:d9:a7:95:b9:
41:8e:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:07 2026 by rpki-client