Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: lBZr8Quyn1TXX6iPIdfucDDb7tj4WuYZ2RgalEpCrXE=
Subject key identifier: 27:8E:C0:8B:B6:01:60:33:12:5E:40:BC:39:9B:CE:BB:B8:E9:AC:E2
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 019D99990343DE20E3222BDBBB9AD1DDBE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: 1-kk5YtawRkJQwdDT4MsBuFBc3Yo.roa (hash: Aamvd7Z6s9hiJAa6DbrukXmWAwrVI2PPj/AOKYI7G4U=)
2: PoqWbVHh-FUr2dkHNr-gmxi2c-8.roa (hash: YLgUsuGSocGrObs4G25+Ghw9LtEJ63hht/5KGdZnHW0=)
3: pjM3LX3IWBwhVZCLWvigLJvSQJQ.roa (hash: 3UYX3NqDLCGEU8dgjIHi5102NNO+66HkfR/cZxzpA3A=)
4: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: D4ja9QLbZ5SxYprnG1AL9dPWs/F3j8AOpYnfwR3WoCU=)
5: t5ZpdQdakz93WmXWJ_al0M0qYog.roa (hash: ZYC1omK7NgO2nQPCpRlt52kAchXz0Fe3jlMw43xrEYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:03:43:de:20:e3:22:2b:db:bb:9a:d1:dd:be:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=278ec08bb6016033125e40bc399bcebbb8e9ace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:b4:a9:96:90:f5:bc:22:89:bb:85:3a:42:
30:63:e5:4d:e8:4e:c6:be:c8:b9:8f:f7:8a:94:70:
7f:17:0d:62:c4:a5:f6:fe:30:7c:0b:c8:58:0a:be:
40:ee:8f:ca:96:72:64:10:b1:5d:28:56:3e:e8:2e:
73:1f:09:0f:2e:1b:3c:db:c7:18:a1:5b:27:d4:30:
4e:ae:99:55:ef:ca:85:3d:a1:f4:b9:01:a3:f0:87:
8e:d9:82:bf:0a:31:1d:70:39:37:bd:fa:0c:62:22:
0c:ad:0e:26:45:0a:80:b3:63:4a:f0:9d:1d:e6:64:
5a:ea:27:73:6e:d9:6a:40:54:9f:e6:cc:a2:2a:c8:
1b:ca:7b:77:ad:dd:1f:cc:9b:37:71:78:37:9e:bd:
63:93:ce:b8:a5:1d:34:79:8d:b2:fc:c2:95:0b:35:
3f:e2:a5:fa:b3:41:61:53:0c:2f:ed:2b:28:70:f0:
5d:69:96:20:7d:76:58:ae:ec:fd:e4:1c:f3:51:a3:
af:91:58:3b:73:eb:be:74:d9:86:02:a8:fd:8d:92:
53:64:40:3b:12:45:d4:6b:b3:62:e6:73:36:7e:38:
98:ed:41:92:32:4f:3a:c4:ad:24:dd:50:bf:3e:16:
3a:9e:0c:2d:71:49:40:aa:f5:1c:ae:18:49:bc:08:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8E:C0:8B:B6:01:60:33:12:5E:40:BC:39:9B:CE:BB:B8:E9:AC:E2
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:13:cb:f4:25:09:44:bf:21:68:31:12:5b:45:6b:c7:88:1a:
80:46:80:91:12:28:c2:2b:84:71:78:ba:4a:7c:41:c1:a5:f6:
b8:00:d6:ba:c8:f8:1d:ed:d5:c8:a4:35:28:f0:3c:64:b5:8f:
4a:3e:72:f5:00:f6:ec:d8:e8:61:da:03:c2:41:fe:b9:68:e9:
2f:4a:ca:97:8d:c4:ba:d5:be:43:bd:ae:c4:87:cf:48:ed:5f:
46:a5:3b:d8:1d:92:a3:1b:aa:04:cf:bc:4b:44:70:86:c2:db:
1a:13:26:e9:7c:72:99:c6:08:bc:79:66:cd:10:05:f3:8c:05:
ad:4b:4e:e1:33:91:28:ca:d8:17:25:05:82:4c:f0:ec:69:94:
96:40:b2:49:c8:f2:96:21:e4:27:8c:48:07:7e:02:87:dd:aa:
e7:5c:5a:03:db:d5:31:09:76:fb:31:6a:cb:fd:30:c5:41:d3:
e0:c9:20:d8:3a:a7:a8:81:4d:2a:61:f6:b1:a8:c6:ed:41:33:
5c:b3:4c:d1:94:1c:40:d0:bd:b7:5d:32:9c:81:5b:eb:bb:4a:
44:a9:1d:0d:df:00:a6:70:ed:65:c6:6b:08:12:e5:a0:88:bb:
3c:3d:ad:78:39:2a:d0:db:fa:c8:fa:c6:18:c4:fb:05:8c:45:
92:cd:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:38 2026 by rpki-client