Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
File: cROEjAz5BGjQfWmfcUx_10ihMmk.mft (raw, json)
Hash identifier: xAcaBbLea3EHWEI9fJkMGFEKrQAudjfpCFa3CNutMkA=
Subject key identifier: B7:E6:4A:EC:9F:FC:51:84:59:87:E3:10:D2:41:B5:8B:38:13:A6:5B
Authority key identifier: 71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
Certificate issuer: /CN=7113848c0cf90468d07d699f714c7fd748a13269
Certificate serial: 019D9C2C7095FAE2AFB16274B88C21F89838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
Manifest number: 32
Signing time: Fri 17 Apr 2026 16:00:51 +0000
Manifest this update: Fri 17 Apr 2026 16:00:51 +0000
Manifest next update: Sat 18 Apr 2026 16:00:51 +0000
Files and hashes: 1: D1ljQNpkE18grA9Cjl9zV5PU2GE.asa (hash: OS9sXwUaA+1JocSwcXhLS2ungGRd4+pZ36fpmwGLwW8=)
2: cROEjAz5BGjQfWmfcUx_10ihMmk.crl (hash: kTCIYEUFOUpac3FxefGunYmxaZbCbG/3vrNpjuNh7Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:70:95:fa:e2:af:b1:62:74:b8:8c:21:f8:98:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7113848c0cf90468d07d699f714c7fd748a13269
Validity
Not Before: Apr 17 16:00:51 2026 GMT
Not After : Apr 18 16:00:51 2026 GMT
Subject: CN=b7e64aec9ffc51845987e310d241b58b3813a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:17:9c:7b:c1:83:72:33:f6:dc:57:03:53:
ed:75:0f:4f:63:62:42:e4:16:ca:55:12:f4:04:fd:
fd:d1:af:fb:85:e4:70:d3:41:27:97:af:40:ea:f7:
f1:ee:7f:65:5e:14:e2:fe:c9:23:04:9b:95:23:ed:
fc:c8:dd:a5:f6:81:88:c0:74:cc:64:f9:e6:0b:b1:
20:99:89:ef:de:51:66:f5:3f:93:55:1c:a3:9b:e6:
ba:ca:ab:3c:be:dc:df:9c:11:4e:f0:e3:6a:8b:75:
5d:8e:f7:79:78:06:13:24:b8:3a:26:93:a7:63:e2:
45:52:3f:94:9b:83:ce:b7:f4:f5:4a:d6:69:ff:e9:
2c:b9:12:d8:d0:93:b0:58:e1:eb:a7:7f:c1:c0:de:
88:6c:4d:ca:3d:29:1b:b9:a8:30:d0:1a:37:4c:28:
d4:55:7b:7e:1f:e6:d6:12:40:62:fa:c0:14:c6:cb:
90:97:2d:f9:96:52:dc:7c:b0:4c:3d:d5:fd:ec:10:
60:d0:a7:fc:16:18:a6:cb:39:13:a0:ab:60:05:48:
ae:01:50:a3:4c:d9:d4:ef:dc:2d:90:31:bd:27:c1:
24:6b:65:87:a1:aa:9e:13:98:ed:56:63:27:e3:a9:
7f:af:10:2b:ad:4f:2c:77:36:95:b9:c3:3a:71:b9:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:4A:EC:9F:FC:51:84:59:87:E3:10:D2:41:B5:8B:38:13:A6:5B
X509v3 Authority Key Identifier:
keyid:71:13:84:8C:0C:F9:04:68:D0:7D:69:9F:71:4C:7F:D7:48:A1:32:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cROEjAz5BGjQfWmfcUx_10ihMmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0ab1d5-1b84-44f3-87dd-26accb7efd7f/1/cROEjAz5BGjQfWmfcUx_10ihMmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:99:80:7b:30:c5:ff:9b:d2:2f:3a:80:e2:3c:cd:18:22:03:
74:67:45:4b:f8:51:c8:3f:6e:95:d7:48:da:a5:58:db:1b:b6:
e4:2c:9d:8e:e8:82:8a:05:6c:45:76:da:6d:20:b4:63:60:00:
1f:e6:f6:01:3f:e1:1b:f4:be:50:79:47:6a:df:79:8b:e7:36:
0e:91:83:b4:c9:b1:f4:f2:46:58:e7:44:02:74:11:e8:fd:5a:
42:0f:68:c8:f7:ad:28:62:86:cf:db:7d:ea:bb:ab:3c:8c:ce:
75:51:71:df:f5:33:6b:b3:fb:ed:85:a4:7b:85:a8:b2:bb:81:
ba:fc:13:bf:00:6a:71:44:10:db:dd:ac:ab:08:ef:de:e6:e7:
ee:80:6e:f1:e0:83:f1:09:69:46:c5:4a:03:a5:ee:bc:2d:5b:
24:3a:78:bf:56:58:68:2b:81:24:48:08:8e:2c:0c:9e:7b:a8:
b7:99:51:d0:6b:f3:af:d6:46:9a:3f:3d:94:59:3d:9c:cf:cf:
61:44:21:f0:eb:14:5d:f6:95:5c:55:84:8f:01:6c:c2:03:9d:
f4:14:6d:9d:ab:87:13:4b:8e:52:ee:f0:85:c0:92:44:1e:59:
cc:0f:fa:45:67:35:38:87:c3:9a:ca:54:b9:d9:24:36:ba:16:
0f:b5:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:28 2026 by rpki-client