Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
File: e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft (raw, json)
Hash identifier: pKnuZWP6CqABgrIpnPOsMFVClKbgPFMXj2Ew7oqKjXA=
Subject key identifier: 75:AF:7B:4B:F0:DD:42:B9:B2:EC:9D:D4:78:B8:45:B5:1C:5D:DA:70
Authority key identifier: 7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
Certificate issuer: /CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Certificate serial: 019D9B87E419F87B024743DA5DD253BDBD09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 13:01:07 +0000
Manifest this update: Fri 17 Apr 2026 13:01:07 +0000
Manifest next update: Sat 18 Apr 2026 13:01:07 +0000
Files and hashes: 1: GJv2c95zewqGYYNIQJziJZtnsNM.roa (hash: Mp+zg2LDO9MydwbN7xl835TAh4mfHcni/EzAt55706E=)
2: e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl (hash: KTsVKgwHaYz5QAZYcbTcwaJzGHoLtGmfetIvoJ52r/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:e4:19:f8:7b:02:47:43:da:5d:d2:53:bd:bd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b75d372039b1ab2d416ad83bf6914058411c2a2
Validity
Not Before: Apr 17 13:01:07 2026 GMT
Not After : Apr 18 13:01:07 2026 GMT
Subject: CN=75af7b4bf0dd42b9b2ec9dd478b845b51c5dda70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:85:de:ce:cc:c4:38:3f:50:bd:e7:e1:25:75:
ec:c1:57:33:bd:c0:2d:a3:e0:a0:e1:cb:94:be:10:
8f:2e:61:9a:01:6b:1d:1a:3b:c1:f0:a0:21:f6:38:
40:2d:d3:f6:57:5e:39:4c:f5:55:9d:2c:d9:b4:80:
c3:ed:97:da:a4:79:2b:8a:92:73:f0:d9:c3:16:73:
44:ee:2c:ab:97:56:ee:1b:47:55:3a:dd:72:cf:5e:
5d:a0:b0:bd:f3:20:56:81:3d:bb:90:79:77:78:5a:
2b:91:c0:6b:14:2e:d8:59:9d:49:8f:fe:41:fd:f6:
b7:26:31:cc:cc:1e:6f:cd:ab:cd:f4:16:2f:7c:f5:
e1:91:2a:51:d5:6e:96:97:db:92:e2:ac:94:3e:fe:
ae:24:f1:c6:40:93:87:61:58:bd:33:85:6d:1b:d7:
23:bd:e1:31:67:12:2e:b7:1d:27:47:db:4f:5f:99:
3b:66:69:4c:a3:24:52:cf:f9:71:87:81:71:f9:7d:
09:b7:c1:bf:7c:f2:e7:01:a3:54:81:f0:f4:a9:d4:
a4:20:f9:7f:6c:a8:3d:04:9c:12:e8:1d:25:3c:df:
bf:09:61:36:c8:2f:73:49:d7:be:68:08:89:cc:2d:
b9:a0:24:2d:cf:6a:cc:3b:d8:8a:48:00:d2:2f:a9:
03:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AF:7B:4B:F0:DD:42:B9:B2:EC:9D:D4:78:B8:45:B5:1C:5D:DA:70
X509v3 Authority Key Identifier:
keyid:7B:75:D3:72:03:9B:1A:B2:D4:16:AD:83:BF:69:14:05:84:11:C2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3XTcgObGrLUFq2Dv2kUBYQRwqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/956e7d-6b93-42fb-993f-6b0038875a14/1/e3XTcgObGrLUFq2Dv2kUBYQRwqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ba:50:3c:01:89:16:91:7b:86:0b:ed:a5:1d:50:1a:54:9e:
7c:7f:43:92:ad:31:e8:2c:e8:9a:49:10:77:5d:21:2d:77:0e:
5e:9a:9c:ac:c4:6b:c7:81:4e:f7:29:ae:63:42:9b:91:d1:f5:
2a:34:e6:c2:11:dd:53:c3:62:a7:4e:fc:0b:98:d0:93:c7:ff:
77:6f:ad:48:d3:67:76:e1:d7:45:63:bd:26:5e:79:c7:4d:29:
42:38:37:4d:bb:b2:61:d1:05:dc:be:1d:e1:5f:84:6d:e4:06:
49:6c:1c:6b:b2:8d:cb:5a:a1:7b:2c:15:fb:b1:56:be:a4:e4:
83:dc:96:2b:8c:f5:b0:fb:d7:50:90:29:82:37:dd:e9:0d:b4:
09:de:43:86:cd:a4:8c:ce:fd:8e:b9:20:0f:59:ed:26:f7:62:
f2:a6:d5:6d:ec:e1:58:fc:22:45:0a:e6:42:94:0c:38:13:b1:
d7:ac:aa:4c:d1:69:3c:86:c0:8b:39:78:e4:7f:d6:b2:20:e1:
cd:4c:50:3a:05:e3:d1:11:6a:72:0b:6e:c3:f8:c0:13:a2:ee:
28:5e:91:47:1a:d7:e8:17:37:b3:f2:80:04:0e:80:c5:9d:bb:
1f:4b:63:66:03:12:fa:85:c3:41:3f:57:2b:61:a7:f6:94:02:
2a:12:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:39 2026 by rpki-client