Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
File: RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft (raw, json)
Hash identifier: +1S6jYGE7dmHLEOL2oZV1yHn60wbAJGy1kpqAcNmgI0=
Subject key identifier: 02:AE:F7:ED:D4:C3:93:C6:07:25:B1:C5:D8:60:C7:53:48:76:37:5D
Authority key identifier: 44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
Certificate issuer: /CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Certificate serial: 019D9A75358B9275E4B6806A8C2AB8DB0EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
Manifest number: 15D2
Signing time: Fri 17 Apr 2026 08:01:05 +0000
Manifest this update: Fri 17 Apr 2026 08:01:05 +0000
Manifest next update: Sat 18 Apr 2026 08:01:05 +0000
Files and hashes: 1: 96uhsxBhe-FEbEFUz44UCsO9ftM.roa (hash: sX4SikCnq8N0L06GUAKXHc2cNrB1d0XvilI3V9rlkrI=)
2: RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl (hash: iGcLUoWUI1EYBTFsa2efOCd+epaZyEPfRN6eoXc3l54=)
3: hVY_dYxYhKuO3qtI4MOUcvIONF4.roa (hash: yGx/OoacbBBGFHUNn7h+o/bue//pA9bBusA+ebRU/Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:35:8b:92:75:e4:b6:80:6a:8c:2a:b8:db:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f885220f1719f5837cb5a36fa62f3f537e8e3f
Validity
Not Before: Apr 17 08:01:05 2026 GMT
Not After : Apr 18 08:01:05 2026 GMT
Subject: CN=02aef7edd4c393c60725b1c5d860c7534876375d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c7:4c:09:9b:05:c5:de:df:0a:c0:10:bd:7e:
3a:ac:77:7e:5e:f1:81:df:54:3b:42:22:26:6e:e8:
50:6a:30:40:83:bb:cd:02:a1:29:57:f9:b8:7e:dd:
55:cd:f2:06:db:35:22:52:ce:f9:92:f7:89:dc:19:
98:b8:de:20:bb:b9:8e:c7:7d:c5:38:07:de:3d:a9:
70:0c:4b:6b:91:fa:1e:77:94:76:82:08:86:f2:9a:
ee:c8:ca:6f:ee:8b:e0:99:14:b4:bc:12:f2:72:81:
f2:b7:91:a1:3f:84:92:42:66:d2:5a:4c:db:1e:1d:
bf:7d:d6:90:ea:72:53:cf:31:8a:0a:ec:09:59:01:
80:d9:33:15:5f:0f:75:ef:73:0a:4b:ae:71:ea:13:
29:5c:bb:ca:14:34:50:7c:14:b1:26:da:c4:d6:35:
0d:a0:5a:47:d0:f4:52:d1:2c:3f:4a:b6:ac:04:3e:
bd:f3:f0:1c:51:f5:78:dd:7a:1d:65:39:ee:64:52:
a7:b5:1a:94:33:a4:8f:c1:e4:13:da:c9:23:7e:fb:
1b:63:5d:40:52:d4:ee:e3:9e:23:f0:ca:2a:20:24:
fa:0a:50:24:e2:68:2e:f3:f6:af:b0:95:19:f9:08:
1a:ba:17:34:b5:4c:ae:11:2d:b2:92:8e:31:e5:ef:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:F7:ED:D4:C3:93:C6:07:25:B1:C5:D8:60:C7:53:48:76:37:5D
X509v3 Authority Key Identifier:
keyid:44:F8:85:22:0F:17:19:F5:83:7C:B5:A3:6F:A6:2F:3F:53:7E:8E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPiFIg8XGfWDfLWjb6YvP1N-jj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bab194-5e24-4ead-8f49-37ed99143aae/1/RPiFIg8XGfWDfLWjb6YvP1N-jj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:58:9c:d2:97:32:52:ca:7b:4e:44:bb:40:61:75:21:93:fe:
d1:a2:ab:f4:5a:67:9b:e2:45:55:41:5d:88:c8:30:59:37:0b:
92:ce:9b:f1:86:e9:e0:7c:19:dd:f6:f5:a4:55:4d:a7:54:74:
89:43:a4:b8:4c:9a:94:29:c9:ec:c6:8b:2f:ef:c4:74:8c:47:
53:83:62:e3:6d:1e:69:70:67:a7:00:19:ce:a6:a1:80:c4:0c:
a6:18:cb:ab:15:8b:c4:5d:dc:f0:77:d8:32:09:ad:a3:ff:9d:
fc:f8:5c:61:72:da:e4:e3:8d:5d:64:14:67:31:54:de:f0:73:
4f:b4:c3:18:d9:60:91:1c:62:86:3b:33:ca:63:bb:1f:0c:c5:
ec:c1:6a:90:4f:6f:0c:dc:1c:da:21:c5:27:82:4b:6e:d5:c8:
00:94:70:53:24:46:d6:70:dd:83:8a:e6:11:4a:3e:39:b6:e7:
08:75:ad:e3:56:25:20:e3:5f:2b:77:99:13:c0:27:f9:0d:f6:
65:9f:95:5c:5c:f6:b3:4a:03:8a:be:03:b5:a0:e6:a1:98:6e:
c6:8e:c3:55:7a:13:12:b6:2c:c0:0f:19:ab:f5:d9:48:e2:87:
0a:7f:4e:68:05:f6:e8:80:c5:13:50:59:8c:84:ba:3d:ed:71:
67:ca:50:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:04 2026 by rpki-client