Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: 0lMrLOSv2gTOi8GRwAF/3yyNmSzATMo8UUk/N7zRPl0=
Subject key identifier: 58:A0:85:3B:04:6D:E8:46:92:4B:6B:41:25:91:DD:D1:C6:75:24:2E
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019D98BD75A75305A435BF79772A9ACE7275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 00:00:46 +0000
Manifest this update: Fri 17 Apr 2026 00:00:46 +0000
Manifest next update: Sat 18 Apr 2026 00:00:46 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: khF6C/NdCUuymFcItW3o7SnomD7jcVdfvqXgGy8k9Z4=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:75:a7:53:05:a4:35:bf:79:77:2a:9a:ce:72:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Apr 17 00:00:46 2026 GMT
Not After : Apr 18 00:00:46 2026 GMT
Subject: CN=58a0853b046de846924b6b412591ddd1c675242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:46:83:4a:23:f8:ad:2a:e4:c1:1b:5d:4b:0a:
3f:e9:5d:55:4b:f0:77:f5:bc:c1:fc:e8:73:17:0f:
6c:be:70:3b:f6:10:57:b8:18:bb:58:cd:38:26:64:
95:99:46:7c:1c:ea:c5:d4:8e:cb:36:58:ee:ff:e0:
3d:41:c6:2f:72:7f:05:9d:2c:12:96:ba:30:17:86:
a4:7d:74:99:b7:b0:a7:bd:1f:73:ec:75:68:e1:a0:
8e:cb:5a:57:c6:2a:8f:56:96:80:6a:cd:c9:22:cd:
f4:8e:42:00:ee:32:2d:f8:e1:d7:b5:24:28:78:48:
ca:3a:e8:8a:19:67:9f:39:06:60:e4:90:f9:c7:9d:
53:5f:25:1a:86:1e:74:47:2b:49:6c:79:45:be:95:
50:43:1c:c8:2d:84:04:c0:4d:47:ab:1d:ce:9d:fb:
c8:73:e3:26:f6:cb:f7:32:8d:b1:1f:39:80:6c:27:
d5:e6:d6:92:87:bd:66:0c:3f:a9:b0:d9:e8:6a:64:
c6:a5:5b:8e:c3:47:ac:d8:14:b7:56:78:9a:d3:5e:
bd:b0:d7:b5:d1:25:01:78:8d:9f:4d:b4:2c:8f:28:
74:82:38:31:bb:71:66:cb:d8:7b:bb:db:48:8d:95:
cf:fe:31:5a:70:d0:6b:d6:10:c2:69:13:91:a5:ff:
17:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A0:85:3B:04:6D:E8:46:92:4B:6B:41:25:91:DD:D1:C6:75:24:2E
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:5f:e5:41:e7:bb:15:dc:14:f1:ba:af:ec:00:22:8c:7e:32:
b8:eb:4c:d3:70:fe:dd:12:61:f6:f7:7b:f9:63:6f:93:f4:86:
9a:f1:3b:0d:cc:3d:2d:ee:6c:4c:7d:3e:66:a6:b0:19:a7:a5:
70:97:cd:0f:15:a5:3a:08:dd:8d:3b:e2:76:78:4b:23:d9:7d:
48:18:02:06:a6:66:ea:c2:67:92:e9:28:e8:8c:d8:b2:75:6e:
4e:fa:0c:03:e3:35:75:73:97:54:f9:43:96:86:dc:a5:d3:2a:
55:46:e5:07:5a:af:00:0e:c8:62:22:05:c8:85:2f:31:b3:71:
ad:7e:76:83:b1:ce:32:48:fa:8a:2f:52:90:2c:81:bc:26:96:
28:6a:e8:87:f3:e7:c1:b8:2e:99:d4:57:b6:8c:1f:22:0c:78:
42:68:28:57:fb:dc:be:06:f7:2c:e7:1f:34:30:39:82:ed:7f:
0f:67:8c:bf:8a:4a:bc:50:ad:02:8d:8f:5f:e5:96:53:b9:34:
f0:5e:80:1b:f3:53:c3:01:78:ed:0c:74:b2:f1:67:db:4e:2a:
02:f1:1c:74:ef:97:5a:a9:cf:85:6b:0f:1c:f7:f8:df:9b:22:
38:65:a8:ea:cf:fe:52:30:72:03:09:d6:8b:6f:f2:ad:6d:3b:
2e:aa:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:40 2026 by rpki-client