Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: lKetozFJzxPVmLdScIx21Ak3CrxU+k12ZCFW4zuOtk4=
Subject key identifier: B8:FC:B9:9B:EF:A9:D2:4C:BA:17:26:28:47:03:C5:96:2E:A8:8D:EE
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 019D9B50C66340AABB99552E15B8B865B16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 12:00:55 +0000
Manifest this update: Fri 17 Apr 2026 12:00:55 +0000
Manifest next update: Sat 18 Apr 2026 12:00:55 +0000
Files and hashes: 1: V5P32cfEgu92S1VlI1kMBBPo3Ag.roa (hash: T7KoapqHODXnycaN9qCgI68x/qZdCltg//u0iSK2v+k=)
2: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: G8/9IOrdU+0nkjo9knE1fcHrQ3sDYDoy6zNIiGlKbLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c6:63:40:aa:bb:99:55:2e:15:b8:b8:65:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Apr 17 12:00:55 2026 GMT
Not After : Apr 18 12:00:55 2026 GMT
Subject: CN=b8fcb99befa9d24cba1726284703c5962ea88dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:31:c9:c5:bd:c4:78:8f:ca:87:53:07:e5:
8c:d8:6e:2f:f6:bc:1b:cc:81:70:c6:2d:29:87:08:
f8:9b:28:00:c9:15:79:4f:32:d9:12:08:78:b9:38:
80:df:35:c6:b2:c8:83:af:0e:30:4d:e4:de:2c:2a:
fb:93:4c:0c:78:27:97:e1:e7:28:68:d9:af:05:54:
cc:4a:0d:e0:6f:8b:dc:18:f5:a2:0e:ba:e1:bb:89:
fd:d5:b4:ce:06:aa:0a:fe:73:93:91:03:6e:29:c2:
84:f3:0b:70:ce:30:e7:e9:2d:a6:17:5f:d4:98:f6:
3e:29:62:5b:c9:51:e3:28:c9:95:47:35:b0:2b:95:
aa:6d:5b:ad:53:f8:07:73:3a:f5:39:4f:53:14:cd:
6a:04:bf:04:bc:cd:ae:6b:a9:9a:11:63:9d:94:7e:
e8:d4:55:59:28:e0:5b:b1:e6:e2:61:98:a8:ad:70:
4a:ca:f3:3c:9a:a1:d2:cd:5b:26:ae:41:2c:ab:77:
d7:11:d8:a9:f5:c7:c9:32:f4:5b:a4:78:8d:bd:ca:
9b:dc:91:ca:9c:6f:0e:64:c2:f5:d6:0e:03:88:1f:
02:2a:dc:16:c5:16:d3:cb:05:89:ef:9d:19:65:64:
1d:98:f0:01:95:8c:be:21:e7:65:b4:b2:d3:62:bd:
13:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FC:B9:9B:EF:A9:D2:4C:BA:17:26:28:47:03:C5:96:2E:A8:8D:EE
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f0:95:66:41:c5:f7:af:c0:00:f2:9e:57:59:e9:29:61:4a:
f5:57:74:b7:ba:38:ca:65:21:58:a1:6f:5f:5a:3b:64:25:61:
4e:39:cf:8a:60:07:84:05:2b:57:5a:26:fe:60:c3:c9:3b:14:
09:5d:0f:10:a2:e3:e4:2a:8e:56:71:00:9b:4b:30:82:f6:8a:
e7:d4:4f:a0:a6:4e:f3:7a:ec:5b:95:15:c2:2c:92:00:c3:8f:
71:74:dd:9e:1d:12:ec:71:e2:43:b1:64:39:0e:68:f8:6f:ba:
03:bb:74:a1:dd:2e:54:65:d3:0a:da:fd:1c:b5:74:8c:a8:7e:
05:a4:cb:54:ef:35:47:b9:98:3e:cc:79:69:b1:23:fe:2d:2a:
43:d6:4e:6f:37:3e:d7:16:89:b4:39:58:dc:53:ae:5a:75:59:
c0:cb:34:3a:24:81:11:77:25:82:d0:6a:43:19:fe:86:07:88:
5e:ed:2e:6a:95:68:c2:1a:49:f1:cd:ea:ed:76:dd:99:89:05:
d5:cd:ce:98:e7:65:be:4c:73:28:cc:41:0c:cf:37:c5:e3:1b:
11:30:e7:96:22:4c:9c:36:bb:62:27:cd:01:9e:da:06:21:04:
a3:ce:68:ac:7a:35:c4:37:23:42:c8:55:74:97:7e:63:d0:c6:
f6:ed:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:06 2026 by rpki-client