Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: l/3tu4X4qDAgY6AuwAVw6mZpsKbfWpLWDYXnlA0U/AI=
Subject key identifier: CB:A0:25:44:E1:42:A8:37:43:AE:8D:47:B1:9B:4A:BD:38:CE:FF:DE
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 019D98188A452BDFD38C99A01CB502CEF62A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 21:00:38 +0000
Manifest this update: Thu 16 Apr 2026 21:00:38 +0000
Manifest next update: Fri 17 Apr 2026 21:00:38 +0000
Files and hashes: 1: 69ezvJY8aZV8eEgrj-WQsC1gmeE.roa (hash: 2O4ZGW2UdJh7j7rNGC7PYb1zr3cjwg8+gzgKPe0rI+g=)
2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: 5ulvvKllUnboyK27sXgGp/0LmV5EwE5I9dJxtHGT8y0=)
3: hoPMx8cKt2l3U6Uh7qXffDc38GI.roa (hash: cSBxnQp/0+IglLraeUk1nEXqdG208OR0aDWNNNv7dX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:8a:45:2b:df:d3:8c:99:a0:1c:b5:02:ce:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Apr 16 21:00:38 2026 GMT
Not After : Apr 17 21:00:38 2026 GMT
Subject: CN=cba02544e142a83743ae8d47b19b4abd38ceffde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:ba:18:11:6f:5b:1c:b5:26:b3:8b:2d:b6:
20:61:20:85:c7:25:83:86:59:d5:16:5a:c9:59:1e:
1f:98:73:76:3e:09:43:6c:7a:92:67:94:a7:65:d9:
71:c0:3c:55:79:2e:4b:7a:76:a9:d9:52:a8:41:f6:
c5:23:a9:17:87:14:1b:4d:7b:33:40:21:92:61:88:
9d:f2:63:ec:db:29:02:c4:ff:44:bc:71:19:59:ec:
8a:7b:12:d6:fa:35:1a:d5:1d:e6:80:ec:0e:d8:98:
4e:1a:c8:fd:e8:0c:0e:87:82:f4:83:38:cb:59:13:
40:f8:e8:c2:d2:7a:e7:60:7f:1b:32:35:13:a5:9c:
c5:b1:a0:d1:72:21:34:b1:e4:84:9e:1e:14:f6:1b:
33:b4:ab:c8:ac:16:00:6c:7b:c5:f3:ab:50:2c:ba:
1c:95:5f:3d:09:83:66:c3:45:a5:fc:2f:15:32:a1:
25:71:11:50:cb:25:7b:a1:18:4c:57:0b:5b:49:da:
3c:b2:8c:9a:5b:bc:7d:52:4e:e7:db:f4:00:8f:63:
63:9e:de:a5:5a:a0:6a:57:5f:53:87:05:cf:cd:3e:
36:36:60:5f:89:b8:3d:82:e4:20:7d:b8:4e:d6:88:
f6:8e:9a:4c:cc:91:d9:c7:20:0e:8e:bc:67:66:9f:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:25:44:E1:42:A8:37:43:AE:8D:47:B1:9B:4A:BD:38:CE:FF:DE
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:62:4d:94:29:1f:3c:62:e9:88:de:a9:9c:1a:1f:66:08:41:
ea:89:2f:54:63:8a:c8:6a:01:29:a7:ac:b6:e8:fa:9a:ec:ff:
68:46:24:74:1e:44:8f:20:d1:ae:1c:01:53:4a:18:b6:96:80:
ca:f0:d2:ed:a5:62:53:a0:7b:4e:97:14:80:0b:d5:63:a8:28:
81:19:0d:b8:36:61:3a:f7:a2:63:0b:8b:69:dd:01:ee:af:88:
ea:e6:27:0a:eb:35:43:b7:ea:15:6b:3d:68:81:1f:62:96:15:
ec:ae:5c:92:a7:7e:f7:23:b7:fc:56:09:69:ed:93:ff:7e:b6:
d6:b3:d0:ab:fc:c9:63:c2:a4:27:ba:e0:c2:46:4e:0f:3b:bb:
63:f1:29:60:9a:a9:09:b4:45:e2:83:ff:36:bb:e1:d9:1d:88:
57:e5:c2:ce:8b:3d:95:b1:52:78:5d:38:3c:cb:a0:eb:12:3e:
99:a8:fe:6a:25:fd:59:cb:d2:18:67:ab:9d:ee:d1:22:e4:37:
38:47:b9:9b:63:30:96:6c:3e:5f:80:ff:f5:db:f9:1a:17:b8:
4e:c5:52:73:6f:69:ea:84:c0:fa:e5:75:0f:b2:2a:c2:d6:c4:
d8:7b:16:b2:c9:97:a1:bf:1c:4e:d1:e1:57:3b:7b:3e:81:c3:
4c:ae:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:29 2026 by rpki-client