Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: N+VeuDzk16ogKy5oD8CaFCjuTohwNXjTmsQmWCgYU/0=
Subject key identifier: 2E:AD:5C:0B:42:C8:70:AB:DB:D8:0D:3D:65:5E:9B:75:02:76:8B:B1
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 019D9AAC481D795E29EBBFF50BBCAEAC9E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:01:15 +0000
Manifest this update: Fri 17 Apr 2026 09:01:15 +0000
Manifest next update: Sat 18 Apr 2026 09:01:15 +0000
Files and hashes: 1: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: YMdzsZjWsoPsntThUwQnS0LkNrCB+h5/+obmv/MdKHs=)
2: heI6_nt9P_HwBy_T8oGJnHTTh5g.roa (hash: u5XqVFg6oCgpt4OHeWuXYXSoPOakGmDYPh6j3OSR1w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:48:1d:79:5e:29:eb:bf:f5:0b:bc:ae:ac:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Apr 17 09:01:15 2026 GMT
Not After : Apr 18 09:01:15 2026 GMT
Subject: CN=2ead5c0b42c870abdbd80d3d655e9b7502768bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:bb:b2:f3:47:f5:be:b6:e0:4e:fa:2e:ca:
e5:37:54:84:35:2a:27:70:22:01:27:bf:9f:81:ea:
64:ec:68:01:cf:16:50:6d:0a:4a:9e:9e:c1:d9:fb:
26:15:f1:fd:79:37:34:49:8e:5f:97:0d:3c:31:e4:
38:01:5d:04:6d:7b:b7:f7:02:cb:25:66:6f:6a:6b:
16:2e:f7:3f:34:75:ab:6b:97:61:35:30:3b:f7:10:
9e:5a:cf:7d:9a:6b:18:fa:fd:84:36:6c:b7:d1:7a:
6f:87:c2:89:40:8c:eb:a3:71:18:d7:32:ce:46:93:
41:e4:27:55:4a:00:23:c7:28:2a:12:87:51:1d:96:
97:69:53:89:9e:2d:54:2c:ac:8b:7a:14:e4:7c:ac:
07:c2:60:c4:a6:d6:45:44:60:51:7f:16:01:1d:27:
32:7e:29:86:3c:f0:24:b5:df:01:e7:75:be:7c:93:
5f:e0:ec:fa:29:7a:6a:24:02:b3:46:b2:b3:ce:d0:
e7:98:f9:85:3d:21:6e:7d:76:1f:22:63:60:11:0b:
1d:1f:e3:86:96:4d:58:4a:3a:ac:7f:ba:0a:40:ee:
a3:4e:e7:ee:4e:1c:1c:c4:97:45:dd:02:a2:54:e5:
b1:af:b1:4e:09:3d:86:66:95:2e:a0:a3:5b:26:c3:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:5C:0B:42:C8:70:AB:DB:D8:0D:3D:65:5E:9B:75:02:76:8B:B1
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c9:c1:50:a5:57:02:44:2d:38:5b:fb:a5:b3:37:79:61:ea:
9c:b2:14:3c:45:1e:8a:f4:3c:a6:d0:1c:30:43:f9:92:54:cf:
96:9b:74:f1:1f:dc:97:bf:42:45:ca:8e:7f:90:d0:91:ee:85:
22:8b:ef:51:50:33:9e:1d:c7:11:ec:a6:a3:4b:7c:72:b5:f5:
d7:40:4f:73:7a:49:b6:5b:36:ec:0f:63:ed:4d:4e:5b:98:69:
3b:00:82:4d:60:b1:0e:15:45:41:2a:cd:ac:54:a8:c7:ee:99:
b7:ef:da:89:92:6f:fc:f1:cb:95:a0:e0:cd:4c:70:3f:97:7b:
7f:f9:c7:11:a0:f9:17:4b:1d:5d:f0:3f:85:59:39:fb:c2:a6:
9c:69:63:6b:95:44:10:9d:8e:1d:d2:c5:66:a7:92:53:6c:76:
a6:84:53:61:6c:70:a9:51:b2:38:88:bc:8a:29:a8:ce:8a:c1:
c7:64:06:48:06:3b:fb:14:b7:1c:65:f9:f7:c0:69:ed:ea:1e:
ce:68:62:3f:a6:11:8e:e9:89:f3:17:04:83:9c:6d:00:84:3f:
52:2d:27:df:ca:9e:94:c8:5c:71:f9:cd:e3:01:2b:20:bf:e2:
25:81:e3:fa:09:92:fb:56:90:e8:c5:f9:02:af:ee:50:7b:85:
f2:9b:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:52 2026 by rpki-client