Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File: dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier: M908Nqv+Ye07u/P8QMps8clMJj0zvLb8jqMAMOAaT4g=
Subject key identifier: 67:E5:87:38:12:E8:62:CA:BC:F2:EA:F2:B0:3B:67:BF:7E:88:63:2A
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer: /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial: 019D98F48D007AFDE0EA97C63CE205BDFD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 01:00:56 +0000
Manifest this update: Fri 17 Apr 2026 01:00:56 +0000
Manifest next update: Sat 18 Apr 2026 01:00:56 +0000
Files and hashes: 1: BJ7HazHaGccfvxTQc_w6SKWhZEA.roa (hash: Pl+4ZXeFDCtsyZiimkR12UecWLcE8XYpnlEtA132eQ4=)
2: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: 3iaqRareBCa5He94PEglQMVJZbMK+mTAJ8psVCLZ2/k=)
3: vF10V7lqg_z1ClW_JFRqKWSSSgs.roa (hash: 5LcZLtIG267Hhy192bqk2cmUen7W8721AugGcNOPgeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:8d:00:7a:fd:e0:ea:97:c6:3c:e2:05:bd:fd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Validity
Not Before: Apr 17 01:00:56 2026 GMT
Not After : Apr 18 01:00:56 2026 GMT
Subject: CN=67e5873812e862cabcf2eaf2b03b67bf7e88632a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b0:23:5d:02:f0:66:16:73:cf:cb:a1:d3:78:
d8:36:0b:b5:11:c3:3f:d8:c4:49:f9:28:db:a6:14:
16:06:57:a5:4f:ed:28:80:08:36:c9:f7:82:be:c3:
27:03:14:b1:b3:1f:68:7b:bb:16:84:83:01:bd:9f:
33:a4:8b:40:6e:11:0b:8a:96:b9:46:88:b7:c8:8e:
5a:85:23:6b:cd:8d:10:c6:cb:b2:9b:52:09:a0:41:
6f:1f:04:99:48:93:0a:1a:d5:9f:f4:6f:d0:31:a7:
64:2f:31:f9:74:ca:4d:4f:8b:5f:79:02:2e:fc:5a:
1e:db:95:5e:dd:3b:3d:41:6c:b8:0a:62:84:1b:cb:
ba:ca:f8:34:18:19:e9:58:c9:8c:16:0b:42:be:cf:
01:a1:c0:c0:07:44:71:8a:23:48:c3:f9:2a:1d:42:
d4:a1:1e:7a:2c:7f:0d:5d:52:2c:8e:cb:29:02:0f:
64:0f:a4:98:9d:b9:19:2f:d9:8d:73:34:56:08:e5:
ca:d9:d7:34:ca:81:f8:19:00:7f:e6:46:7b:08:93:
f1:ff:74:19:3e:63:54:8b:fa:f9:b5:da:41:8e:ac:
c2:0a:d9:67:0d:09:86:70:b5:a8:ce:fa:5e:6d:e4:
bd:9b:88:29:84:e8:a4:50:ec:de:be:ab:35:31:b5:
05:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E5:87:38:12:E8:62:CA:BC:F2:EA:F2:B0:3B:67:BF:7E:88:63:2A
X509v3 Authority Key Identifier:
keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:43:1c:bf:af:56:fd:ab:52:fe:48:39:40:7c:06:b5:95:a9:
45:43:27:22:62:bf:07:55:93:7d:27:b3:9e:7e:ea:7d:d0:8f:
ff:7a:5e:86:a7:82:ff:53:e5:61:ef:ba:5f:74:fc:be:d6:4b:
63:a5:9e:6a:7b:bc:d5:d6:7d:d0:f2:ea:ba:fa:02:a7:d3:3e:
b2:78:61:30:73:34:d6:7b:06:5d:d7:d1:d1:d9:27:e9:fa:e6:
9d:f8:65:4c:fa:a9:c8:18:f1:9e:9a:ac:2a:72:8c:45:d0:16:
43:50:ef:31:6c:54:10:57:9d:fe:ad:a6:70:f5:d6:2b:3b:c7:
b8:75:86:5c:b3:30:f5:69:a0:0e:93:be:43:14:76:40:5c:07:
2d:ff:e3:8e:43:73:b4:f1:59:5c:fe:29:97:a3:ca:17:eb:09:
f8:10:46:b1:ae:1e:4d:dd:69:68:1f:43:25:50:49:e3:b1:89:
55:c6:20:d6:47:75:90:53:29:82:72:f2:8d:6a:75:7f:ec:90:
59:79:fd:36:9e:a2:4f:f2:dd:fa:d1:1d:73:cd:6b:33:af:20:
7b:9d:83:42:2e:01:74:29:46:40:98:93:d8:e1:8c:92:75:e5:
32:b8:7a:02:86:df:a3:07:66:b4:5f:f6:24:20:e1:7c:a7:ce:
ed:55:da:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:09 2026 by rpki-client