Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
File: 2sedKFW4l0GCCNR7puUUYAFbXXs.mft (raw, json)
Hash identifier: z23W/xi7+CcW0L2LKLUO2tNgeppx4bc9BQhaj0A2hsg=
Subject key identifier: 65:05:0C:82:06:C3:5C:40:71:AB:63:AE:77:FB:37:C5:55:AF:BF:D6
Authority key identifier: DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
Certificate issuer: /CN=dac79d2855b897418208d47ba6e51460015b5d7b
Certificate serial: 019D9A06DC3896B1ABC4F958974937ED6D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: 2sedKFW4l0GCCNR7puUUYAFbXXs.crl (hash: DOD4nfzb5OWNNpITzYT13R4u5jyVUgp2T730mL7YWCQ=)
2: W0kRvlqE-31Sr-Gr1-WP6xucUMc.roa (hash: gwMXWawf0NyUE9CiPlgwtD8ZYkvJzBBryShpQ/lSl0c=)
3: vU_maC-JH0IvkViWYKyQOXCGBcE.roa (hash: NRSTpXd/DsQ6yidtnBy9uKfhJ+R2u9Rlp24X6kqd1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:dc:38:96:b1:ab:c4:f9:58:97:49:37:ed:6d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac79d2855b897418208d47ba6e51460015b5d7b
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=65050c8206c35c4071ab63ae77fb37c555afbfd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:d8:80:7d:f6:54:1d:80:5b:02:74:73:51:
53:13:0b:c8:74:fa:33:14:e5:56:67:a5:a8:58:6f:
b3:80:26:73:21:9f:f0:04:7f:ee:2b:d9:33:e5:7b:
5e:59:04:7b:f9:59:5b:b3:4a:1a:b8:d9:f7:69:ff:
9f:89:f6:79:6f:54:3b:b0:cb:52:55:48:c1:9d:89:
7b:8b:58:1e:03:d6:e1:c6:25:7d:4a:4a:e0:10:8d:
fb:8b:7c:de:32:0f:c0:75:af:41:10:92:12:8a:d2:
83:03:ea:4a:2c:59:a2:ef:8a:e7:8d:ef:c4:fe:f5:
3c:46:9b:90:3f:92:8e:e9:7b:0b:d7:50:0d:f7:a8:
e0:1e:f6:83:56:80:25:5c:d1:c5:25:33:e6:16:ba:
2c:df:70:8f:c2:fb:b2:2d:15:b5:16:71:f9:e2:da:
4c:97:51:0d:69:df:10:a9:be:45:01:94:78:17:08:
f1:7f:ca:72:78:f0:13:24:1d:e0:4c:b4:6d:16:89:
ed:e0:84:a2:4a:64:a7:54:a9:0b:9a:80:f1:49:5a:
d8:7e:12:8d:ee:bd:db:16:bf:dd:a2:11:ac:96:9e:
b0:28:f1:3d:80:e1:92:5c:82:73:c5:db:93:2d:da:
fe:e0:06:3c:b9:f5:77:c7:28:f2:2d:44:16:60:fe:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:05:0C:82:06:C3:5C:40:71:AB:63:AE:77:FB:37:C5:55:AF:BF:D6
X509v3 Authority Key Identifier:
keyid:DA:C7:9D:28:55:B8:97:41:82:08:D4:7B:A6:E5:14:60:01:5B:5D:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sedKFW4l0GCCNR7puUUYAFbXXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/5b1149-647d-4067-9807-445d4588c312/1/2sedKFW4l0GCCNR7puUUYAFbXXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ca:cb:60:95:22:70:27:3d:14:8d:45:b4:dc:5d:22:f4:6a:
14:e5:10:df:58:ff:91:e6:d6:4d:da:0f:b2:f8:41:92:10:87:
24:97:3e:f6:69:06:df:84:a3:22:02:8c:a3:95:d7:b1:c5:bf:
8c:f1:a4:eb:7d:4c:df:80:7e:bd:49:81:ae:b2:7d:59:94:9f:
76:b8:39:20:a8:cb:03:bf:4c:09:dc:c1:1d:60:8a:85:6b:cc:
75:7f:17:ad:07:f9:52:8f:37:76:7b:7e:e9:1d:e1:e5:d6:a5:
65:0b:ad:ce:a0:1f:b2:39:e1:ff:e8:b7:1e:88:8c:99:82:47:
53:83:f3:82:a2:24:8c:40:e5:b1:29:e2:ba:b3:a2:da:28:2d:
51:74:dc:21:eb:15:7b:63:30:dc:56:b9:09:28:8c:33:ea:3d:
b0:90:ba:e2:dd:4a:4a:5a:42:9e:cb:df:50:d8:ea:0e:50:f4:
4d:30:99:26:df:2d:36:a5:8e:d5:13:3c:b2:fa:74:6b:54:27:
8c:16:83:3d:69:f3:d2:a9:e3:f7:08:13:cc:b5:88:e0:56:43:
b2:89:de:74:87:eb:4d:35:63:f0:54:89:a6:c1:58:64:9c:ad:
72:bd:0f:6d:0d:72:94:9e:8b:45:45:4a:f7:9a:f3:40:83:3a:
48:7d:de:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:59 2026 by rpki-client