Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json)
Hash identifier: 8ZVTwTTSo60gAOIwZhtDJ9/KEA2PwEW6gn/HIAFIDVc=
Subject key identifier: 32:36:2F:48:70:28:35:5F:E6:AF:D3:4D:03:91:68:44:BF:36:13:91
Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Certificate serial: 019DA29CB84068BF1F0712B352F612E566AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
Manifest number: 18C3
Signing time: Sat 18 Apr 2026 22:01:12 +0000
Manifest this update: Sat 18 Apr 2026 22:01:12 +0000
Manifest next update: Sun 19 Apr 2026 22:01:12 +0000
Files and hashes: 1: Hxp2KZnDVTAomBXoNFjjRH1VUTM.roa (hash: 6wCn2sStp7lMoBisyxoOVg7CQrVyP+8JEmZ6TdkNK6k=)
2: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: WzhLb3acTj46pku1EzLLodUdqm8gWzNaaIeX0Z/EIs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:b8:40:68:bf:1f:07:12:b3:52:f6:12:e5:66:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd
Validity
Not Before: Apr 18 22:01:12 2026 GMT
Not After : Apr 19 22:01:12 2026 GMT
Subject: CN=32362f487028355fe6afd34d03916844bf361391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:f2:32:54:08:8c:87:13:60:a0:70:85:d2:
c0:4a:11:e7:1e:82:f3:6c:ed:44:0c:df:81:52:0e:
d4:bc:71:7a:c8:0a:63:ab:d6:29:8e:d2:01:43:70:
9c:16:2d:26:eb:13:96:75:48:d8:fa:bd:6b:16:81:
61:27:36:25:47:00:0b:51:ff:95:3e:5f:fb:1e:35:
86:e7:98:13:d9:1c:e0:f7:21:81:54:68:3a:09:0c:
3b:5d:6b:ef:ab:c9:c2:52:6b:10:5b:c7:4f:a5:8a:
9b:78:d8:50:91:d1:d8:a9:43:34:7c:50:ff:ea:43:
c8:02:c8:f6:e4:48:18:02:35:f3:08:7d:92:9e:0c:
d9:a4:08:99:f4:8a:a4:09:84:19:33:5a:7e:26:da:
29:3e:be:7d:c9:f8:e6:86:e1:31:2e:77:87:fe:07:
97:4a:5a:0b:22:0e:45:47:90:87:f8:07:05:67:36:
9a:ca:5e:b4:ae:88:ec:e4:db:c2:24:d2:73:77:5c:
ef:6c:22:2d:f7:94:ee:a8:68:03:eb:0e:63:9b:81:
54:0a:cf:e4:8b:52:a0:2a:19:64:2a:9a:c1:a6:71:
ac:25:99:67:17:12:49:87:6c:4f:cc:4c:42:ea:85:
4c:04:9e:e5:8b:b1:d5:ef:d7:6c:78:8c:c1:91:fc:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:36:2F:48:70:28:35:5F:E6:AF:D3:4D:03:91:68:44:BF:36:13:91
X509v3 Authority Key Identifier:
keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:80:ae:86:a0:41:4e:17:7d:71:64:0e:87:b6:42:1c:94:ac:
ef:15:61:32:a7:45:ec:73:10:7d:2f:64:7b:94:c1:03:2f:1d:
ba:91:54:42:dc:5f:43:17:47:dc:da:d3:cb:cb:30:8a:c6:f8:
69:13:65:af:7b:ec:f4:69:13:63:66:f6:2b:7a:95:e3:b9:e8:
84:cc:ad:95:b1:03:37:d8:31:fa:a7:4e:34:ea:be:09:ae:cb:
94:cf:83:0f:ac:20:91:2b:1a:98:51:45:90:b8:ae:44:e6:c6:
06:44:42:9d:e1:75:81:c1:12:c3:19:5c:0e:f2:d2:65:ec:06:
39:6c:4a:ef:0e:91:1f:06:8d:60:33:f4:05:77:78:e0:22:15:
14:a8:52:00:2e:d0:b2:b0:97:50:7a:54:25:ff:5b:e6:9b:4d:
a8:11:9f:ab:ef:ee:b5:07:41:93:f7:37:37:a5:04:07:62:6e:
f9:56:57:03:64:fe:45:9b:cc:ee:75:0a:5a:ad:fa:a1:fd:5c:
b1:9b:e6:90:db:5c:02:51:34:dc:3c:4f:cf:c3:e3:26:9b:74:
07:54:39:be:f7:7e:96:81:36:09:cc:40:98:09:67:5f:d0:8c:
86:7c:28:83:bd:35:52:f2:f5:87:35:2c:a9:be:58:50:ac:d4:
61:8e:14:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:16 2026 by rpki-client