Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
File: rM-ri4kwEKG14lBy4dRWkEST9S0.mft (raw, json)
Hash identifier: FSQPB66tg/5C5UUprEn/YWGVaYLASdfWk2rFuP7afAM=
Subject key identifier: FF:94:38:CC:50:8E:C9:07:C0:7C:01:34:11:F8:85:CA:C0:47:A2:C8
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 019D9C2D09414BEB706F94EF472193982ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
Manifest number: 1187
Signing time: Fri 17 Apr 2026 16:01:30 +0000
Manifest this update: Fri 17 Apr 2026 16:01:30 +0000
Manifest next update: Sat 18 Apr 2026 16:01:30 +0000
Files and hashes: 1: Z-M8lVgS2gwgAHLuyet33qHzwgM.roa (hash: fWLoTiwsPxZRXJ5Vm/x03hJnQBlEMfiyIhGQEUF0Fxs=)
2: rM-ri4kwEKG14lBy4dRWkEST9S0.crl (hash: hexuugXUHeXSG7W73LRnDP+JB5fLtabg+htVbU9WSR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:09:41:4b:eb:70:6f:94:ef:47:21:93:98:2a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Apr 17 16:01:30 2026 GMT
Not After : Apr 18 16:01:30 2026 GMT
Subject: CN=ff9438cc508ec907c07c013411f885cac047a2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:4a:0a:f1:30:9c:4d:5d:a4:bb:25:21:61:
5c:c3:59:01:d4:7f:72:18:4e:38:08:64:2f:65:c8:
5e:aa:1f:71:43:59:ca:1a:94:ff:34:52:82:90:9c:
67:79:dd:33:d4:32:d6:12:92:c7:45:ec:0a:91:e0:
85:13:62:7c:4d:34:51:ae:08:f4:ba:8a:fb:9e:d9:
b0:fe:e2:9c:2e:19:f8:02:58:08:0f:f3:09:7d:e9:
98:c5:40:5f:10:7b:8d:ea:ef:e5:37:7c:22:82:2f:
18:46:8c:1a:8b:0e:44:dd:12:79:ed:44:d4:4c:15:
da:20:cf:8e:98:8d:c7:fa:47:f0:29:bc:a2:07:30:
9d:66:10:7d:2e:44:98:85:62:df:4a:cd:80:5c:e3:
de:2f:f8:ad:a0:00:37:78:dc:50:d5:5d:58:d3:48:
92:27:1f:e1:b1:65:05:30:a0:db:82:f7:a9:30:b6:
d0:f5:fc:d6:b4:94:d4:01:f3:de:b7:0b:df:ca:e6:
44:93:0b:15:90:7e:53:32:ef:c1:fd:56:7d:60:71:
36:ab:34:29:55:b1:e8:31:b7:47:13:5d:01:53:65:
42:c5:4a:1b:e7:7d:ba:8d:67:ff:12:a5:a7:ba:5b:
12:c5:0f:9f:0c:27:26:66:41:6d:75:5a:03:ba:d7:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:94:38:CC:50:8E:C9:07:C0:7C:01:34:11:F8:85:CA:C0:47:A2:C8
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:61:35:b6:c4:f7:ed:42:ec:5c:13:1c:82:78:c0:89:0f:ca:
86:30:25:19:97:23:9b:90:a6:9e:26:29:9a:91:12:2d:67:2c:
0c:91:da:e7:2d:70:ed:dc:76:ac:43:d1:5a:da:ea:9b:e2:88:
f6:a7:7f:bb:6b:ad:8f:de:17:76:1d:c6:dd:a4:cd:50:8a:f8:
aa:dc:83:1d:5f:80:04:99:2d:7d:75:69:8c:b3:94:6b:91:d8:
77:e1:8e:ce:5a:ee:ac:dd:61:7a:7e:2d:5c:ee:01:5c:52:84:
03:4d:1b:85:4a:0b:81:15:09:6e:34:8b:6c:db:c7:96:cc:26:
ae:99:a2:29:e7:15:d3:9b:24:83:10:a9:49:65:1f:bf:63:b2:
52:3d:9b:f7:8e:2e:3a:22:bc:90:70:b7:51:62:41:bc:97:0d:
32:28:07:60:f9:36:30:92:30:e8:fe:6a:d1:64:b3:ac:8c:a3:
6d:c7:a7:36:84:f3:35:d6:d2:b6:c6:6e:d8:db:dc:7c:21:79:
d0:6e:51:39:c4:05:c9:40:4a:41:aa:4e:51:fb:e1:34:3d:65:
41:55:f9:0b:c1:24:eb:89:43:06:49:ad:81:0e:a5:5a:df:44:
04:a7:4c:78:57:bd:b8:c1:3a:10:ec:68:7c:75:89:d8:29:b5:
4f:c3:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:58 2026 by rpki-client