Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
File: cJ1plX0zNDKsysgQIx4ok4jjAuI.mft (raw, json)
Hash identifier: 9MwQyhGgZinQBAk9k4gJRbWjghzNb9moHxTKLXlphsw=
Subject key identifier: 4F:6E:CF:AE:6C:B4:1E:46:75:AE:DF:A0:A0:E6:F5:F0:45:EE:F6:D7
Authority key identifier: 70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
Certificate issuer: /CN=709d69957d333432accac810231e289388e302e2
Certificate serial: 019D9B87D00C4208009A7361EDA3F8218DC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 13:01:02 +0000
Manifest this update: Fri 17 Apr 2026 13:01:02 +0000
Manifest next update: Sat 18 Apr 2026 13:01:02 +0000
Files and hashes: 1: 1-n1vM7Ljft18bock9zc_fcUgFqk.roa (hash: bU5dt5JIz7PjOVY108Gj3vTWvnqbHRDZ1HwvN9fFc1M=)
2: G6OyRmGGSlEkPDR314TXAEQi9rc.roa (hash: js9ydtB3OE/PEaAkA7z3NDnhzc/fPT98lQkdRYKZuV8=)
3: cJ1plX0zNDKsysgQIx4ok4jjAuI.crl (hash: nsEbXYD8Hp9Vo02SY61TXMSUEh6InqDxSBzZDixwq5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:d0:0c:42:08:00:9a:73:61:ed:a3:f8:21:8d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709d69957d333432accac810231e289388e302e2
Validity
Not Before: Apr 17 13:01:02 2026 GMT
Not After : Apr 18 13:01:02 2026 GMT
Subject: CN=4f6ecfae6cb41e4675aedfa0a0e6f5f045eef6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:61:45:5c:55:70:20:1d:24:d0:d9:84:6b:60:
c9:5a:61:f3:4c:ee:ae:34:52:c2:d2:4e:7c:6a:db:
05:c3:14:49:ca:e6:dd:8f:a2:a1:d2:8a:26:03:1a:
44:18:4d:45:8b:1b:e0:ee:67:d0:34:b5:86:06:ba:
40:48:30:d3:e9:d0:83:63:d1:a6:a6:bf:5e:ad:34:
3b:b6:e9:cd:95:3e:68:fa:5e:02:d3:2e:00:f8:3c:
23:a8:8f:ad:ee:f0:33:92:65:5d:f4:58:ed:b6:22:
3d:f7:74:51:59:67:d2:be:17:fe:9c:79:27:23:f6:
48:ad:7f:6a:27:96:52:7a:4b:42:d2:ce:88:30:7c:
20:2a:65:6c:1b:d8:1d:25:96:5a:50:42:9a:e4:0c:
ea:fc:59:1a:14:3f:41:cc:7b:3d:c9:d6:df:db:82:
a7:fe:da:8b:19:e1:64:59:ca:f3:b3:de:ee:5a:b9:
42:e7:a7:38:fa:19:63:96:2a:2b:68:fd:c4:5d:cd:
ff:27:69:b9:a3:55:e4:62:d6:2c:7b:88:21:fa:6a:
bf:f9:c3:14:91:14:ea:b3:8e:9e:aa:a5:31:a7:28:
17:3b:b0:8d:3f:85:8b:0d:f6:e6:80:ef:f6:c3:7d:
0f:db:b2:65:24:1d:d6:af:dc:9f:61:89:c2:1b:7f:
68:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6E:CF:AE:6C:B4:1E:46:75:AE:DF:A0:A0:E6:F5:F0:45:EE:F6:D7
X509v3 Authority Key Identifier:
keyid:70:9D:69:95:7D:33:34:32:AC:CA:C8:10:23:1E:28:93:88:E3:02:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ1plX0zNDKsysgQIx4ok4jjAuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/53d56a-096e-458a-9a94-08a68632a63a/1/cJ1plX0zNDKsysgQIx4ok4jjAuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:14:46:9b:32:eb:2b:1b:48:11:bc:57:30:92:d9:6a:81:
1c:85:e0:4c:78:30:b1:9a:27:b8:84:79:07:6c:b8:66:c2:d7:
a4:13:d8:1a:f1:8f:28:a5:61:f5:29:d2:7d:81:ee:33:f2:e2:
07:07:44:46:61:fb:5f:77:d2:a1:84:fc:07:08:f1:7b:c1:b1:
93:72:19:5a:a0:f8:67:35:c8:cc:6b:40:6b:b3:ce:22:fb:d9:
bd:e6:95:1d:04:f5:6e:24:a7:ba:a9:44:36:76:16:8d:53:18:
87:b2:62:9e:95:21:23:69:6e:52:8d:d1:12:42:ec:34:5a:35:
2d:86:f2:22:fc:64:ce:a3:c6:b3:b4:81:b0:90:3a:41:99:d6:
c7:ff:15:4b:38:d3:c5:08:30:96:dc:3e:65:fa:23:38:ce:18:
16:03:8b:19:94:fc:84:a6:36:27:1f:cb:a7:95:85:2e:2c:92:
ca:3d:74:eb:35:d0:48:cf:b6:69:69:61:4f:5b:70:0b:96:f6:
8f:ae:1c:66:12:0a:e2:c1:5f:3f:9d:ce:47:a0:59:f7:a5:a8:
71:97:5c:9b:09:cf:c8:d3:ba:6c:7f:2a:6f:44:16:54:40:ac:
09:58:5d:a2:d3:44:54:df:9f:b8:de:b6:3c:d6:31:14:aa:a7:
e3:4c:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:31:09 2026 by rpki-client