Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier: iD6eMYX8w3NJvjRb9cPchY9n9ulwj2WntiLVRIRsSTw=
Subject key identifier: DA:29:C9:27:47:E7:41:44:15:AB:AE:CF:0E:3C:16:E1:40:87:2D:50
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 019D99995F2F1DF39021D2A5F16B083A3D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 04:00:58 +0000
Manifest this update: Fri 17 Apr 2026 04:00:58 +0000
Manifest next update: Sat 18 Apr 2026 04:00:58 +0000
Files and hashes: 1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
2: 3kbw1gEBJPgdXB0IaWihDI9SnkY.roa (hash: wc+w33BWiYv9rEBwRELoelpcxbBZ5Kq+Pp0M0nU7gkg=)
3: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: dMBKDzCgtKcyPkDwP72b5dqTUHcoE9Wnamuo+KfkFqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5f:2f:1d:f3:90:21:d2:a5:f1:6b:08:3a:3d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Apr 17 04:00:58 2026 GMT
Not After : Apr 18 04:00:58 2026 GMT
Subject: CN=da29c92747e7414415abaecf0e3c16e140872d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:96:f9:85:23:b5:c0:08:b5:2a:c4:2b:f0:
9e:9c:c2:0d:a5:03:56:5a:d2:3b:9f:9e:71:5c:77:
62:32:a5:92:f1:64:68:c3:d1:74:ad:f0:2a:0a:a8:
4b:45:5a:fa:2d:17:25:b5:43:60:73:8b:ba:14:0c:
02:67:c5:b2:37:f5:66:3a:50:21:fe:f0:61:f2:da:
0f:77:90:32:92:d2:c5:06:36:5f:fc:2f:d3:6d:ed:
ce:30:56:35:b0:eb:76:5c:99:d4:b2:bb:f4:0d:e3:
4e:ed:e5:d5:9a:42:20:ce:f9:c6:c8:b1:1a:50:7b:
ba:8d:cf:22:b7:fc:c7:ac:6a:d8:e9:e3:93:61:44:
15:df:eb:53:83:cc:8c:03:b8:ad:bb:7f:8f:db:2c:
eb:32:df:c4:b0:b3:d8:fd:80:fd:c0:4e:f8:41:d8:
ca:85:ce:33:b5:84:1e:ab:a1:84:f8:e9:67:bf:ad:
88:7e:a3:d0:a6:04:ae:0a:ee:45:e6:a0:76:92:4e:
01:48:4f:13:14:4c:a0:ff:88:81:e5:d4:f7:48:4d:
26:ae:1e:77:05:85:c0:fc:0b:5c:51:69:85:f7:65:
fb:c6:a1:93:aa:fd:89:24:4f:fa:c4:dd:04:be:86:
e8:f3:40:4f:f0:50:2b:14:98:ca:47:b0:74:f6:6a:
07:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:C9:27:47:E7:41:44:15:AB:AE:CF:0E:3C:16:E1:40:87:2D:50
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:69:88:b2:d7:3e:99:2f:df:14:4a:69:16:86:68:72:ee:e4:
80:80:f8:18:f7:a9:31:32:b3:96:2c:fb:9d:00:e7:a3:5b:d8:
5b:6c:f7:db:63:94:b7:eb:e0:50:3f:1f:98:0e:8c:f6:8a:f9:
ad:5e:99:11:8b:c4:3d:be:ac:5f:d1:91:78:cd:bc:1b:3f:55:
b5:4b:9c:ed:a7:ad:27:ef:55:87:89:06:34:b8:11:c6:8d:9b:
9e:9b:4e:59:60:dc:eb:f9:2a:01:e7:3f:03:69:f7:a9:c0:42:
e3:13:6f:1b:98:2a:e6:21:af:49:98:1a:a0:8c:2c:7c:03:44:
53:26:b3:a0:a9:2e:fc:c9:b5:25:81:1f:96:35:80:c0:a9:f5:
ae:1f:39:80:03:a5:9d:49:85:55:43:34:85:78:b3:ba:49:d1:
63:f9:28:f9:e3:25:e3:38:a6:4a:8e:3e:74:34:40:dd:a4:bc:
dd:18:f9:43:35:ff:8b:df:0b:db:56:35:90:5d:34:25:a4:44:
8f:a0:a6:74:fb:fa:0f:10:53:46:2f:9f:01:c3:14:2c:92:f5:
73:7b:61:f4:db:fe:b0:5a:61:e5:d8:6e:22:84:32:a1:bc:db:
ff:32:9a:e8:3f:c1:d3:6d:89:0f:9c:f1:af:fc:41:77:46:d0:
d5:cf:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:45 2026 by rpki-client