Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
File: rS044g8k0OMLhszYJhrAAX8XpaQ.mft (raw, json)
Hash identifier: RiQc7xp/xJiWUmNQ2QaDuvS+NdKGVcX1B0kdUtQeu3k=
Subject key identifier: 19:1C:94:48:26:7C:90:41:A6:FD:F1:54:08:72:90:23:74:1A:D7:2C
Authority key identifier: AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
Certificate issuer: /CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Certificate serial: 019D9B19632ED474CD1C0E224C98C0D0BAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
Manifest number: 0B90
Signing time: Fri 17 Apr 2026 11:00:25 +0000
Manifest this update: Fri 17 Apr 2026 11:00:25 +0000
Manifest next update: Sat 18 Apr 2026 11:00:25 +0000
Files and hashes: 1: 9tGzK-FCrgGlyf8btSGObHH6Jkw.roa (hash: NlammvVp7/v8P1KUtxpc69bkMW7FgZFFOJxxoLecI3k=)
2: NJAtBEz3Ixv_CCYeRvRJJECYvnk.roa (hash: 8VY+OH2qENoVZQA8QBMe/XGjN1hAsUDKuWI2emaWxMU=)
3: rS044g8k0OMLhszYJhrAAX8XpaQ.crl (hash: VZFlLMDBXjb+z+bBgjk1LRZWj+M9kdtvyWekGpfa6sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:63:2e:d4:74:cd:1c:0e:22:4c:98:c0:d0:ba:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2d38e20f24d0e30b86ccd8261ac0017f17a5a4
Validity
Not Before: Apr 17 11:00:25 2026 GMT
Not After : Apr 18 11:00:25 2026 GMT
Subject: CN=191c9448267c9041a6fdf15408729023741ad72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:0c:e0:25:69:16:f3:01:85:d0:6f:a2:f8:
d6:d1:26:af:80:5f:0d:e3:24:df:ce:55:6b:60:e5:
ef:b9:a6:0d:67:63:0f:c6:36:28:6f:d9:36:40:1d:
e2:0c:0a:60:88:77:45:c9:03:5b:59:de:17:f3:87:
ac:41:60:30:19:1e:bd:fb:a8:14:28:3d:97:da:b2:
fe:57:9e:1f:d8:12:b5:e9:6f:15:34:53:66:c7:3a:
cb:dc:d3:58:5d:d0:d0:21:2e:b0:ff:b1:da:27:f8:
a4:78:8d:a8:09:bb:4f:59:d1:33:84:d7:48:46:9c:
31:67:7e:3c:f8:95:df:bf:e6:20:b9:27:c7:68:e6:
ac:4d:af:bc:9c:88:77:91:6c:19:87:76:5c:dc:1f:
9b:48:b7:a3:0f:01:8e:7c:16:d5:cc:f2:90:1b:5c:
b0:11:91:a2:7d:24:89:c8:b6:a9:43:a2:31:4b:64:
f3:6c:6e:a6:87:46:b3:23:15:b6:b9:eb:3a:eb:d8:
38:bc:77:f6:60:e3:40:ca:fd:03:e0:f0:6c:b5:3b:
d2:19:43:83:35:71:c2:5f:a2:74:ae:c0:3a:58:02:
ca:80:fd:f5:d2:90:4b:e3:5c:1e:f6:22:50:d1:ad:
29:c9:9e:bd:40:b5:2f:57:fb:d4:38:b9:73:f8:89:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1C:94:48:26:7C:90:41:A6:FD:F1:54:08:72:90:23:74:1A:D7:2C
X509v3 Authority Key Identifier:
keyid:AD:2D:38:E2:0F:24:D0:E3:0B:86:CC:D8:26:1A:C0:01:7F:17:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rS044g8k0OMLhszYJhrAAX8XpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2d8761-229f-4a37-87b1-42995323c03d/1/rS044g8k0OMLhszYJhrAAX8XpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:da:ba:d3:64:ca:d9:35:1b:a9:3c:1f:97:bb:ad:c4:69:b6:
d8:86:1e:42:39:07:ce:d2:17:c4:92:26:1e:2e:9f:8d:4d:61:
bf:30:4a:29:96:dc:63:90:bc:3f:18:d0:6e:4d:0f:8b:aa:b5:
c2:97:13:3b:b5:79:c7:a9:00:a1:d4:fc:18:7f:1c:c6:48:0a:
a5:ce:9b:a0:67:97:47:a9:de:a9:67:3e:ff:0e:7a:79:e3:59:
0f:72:a2:4f:e9:cd:83:14:d7:56:96:74:a7:df:2d:ba:a1:c3:
31:58:a6:29:8b:ef:c9:51:6e:01:0c:f1:d7:0e:2b:57:1a:ba:
2a:28:17:4a:85:b0:23:c8:bf:6a:15:eb:92:58:87:e1:f2:d8:
ca:30:e2:f3:d0:f6:49:76:be:15:0d:44:fa:8d:56:fb:06:7d:
3d:bd:ec:c7:03:eb:95:28:ac:f8:70:c9:1a:df:5a:5c:c9:63:
55:67:2e:37:73:50:45:55:31:70:2e:fe:11:fd:99:8b:31:59:
4e:90:c2:fc:e9:e4:1c:71:b5:00:4c:bb:51:eb:4f:d1:69:60:
5e:15:b9:d9:49:38:ad:84:fd:49:41:8f:47:a4:d2:54:69:09:
df:80:bd:9a:ef:1e:ed:12:cb:a1:3d:a4:d4:91:0e:e5:7e:5a:
fb:59:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:39 2026 by rpki-client