Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json)
Hash identifier: 2iVBB6PfI+REihsFCmtSbb20VdjAXolKobd9VZ8xxPQ=
Subject key identifier: 45:C9:20:61:70:12:BE:D5:4D:EA:DD:66:EB:84:2E:72:A9:CC:FC:29
Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Certificate serial: 019D9818FA1CE79F77AF118EB97A4F5DDC81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 21:01:06 +0000
Manifest this update: Thu 16 Apr 2026 21:01:06 +0000
Manifest next update: Fri 17 Apr 2026 21:01:06 +0000
Files and hashes: 1: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: D26Gizre2wE064zcOqvNKFaIS6XnHFsQeJ5cDQqV+sY=)
2: uTfCO2CQvjnwzxgvmE8a-0Q3PkE.roa (hash: uXLhOjnuwZec+7he1bSLRYP9Be1CjyK6Z98Hp44cEVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:fa:1c:e7:9f:77:af:11:8e:b9:7a:4f:5d:dc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80
Validity
Not Before: Apr 16 21:01:06 2026 GMT
Not After : Apr 17 21:01:06 2026 GMT
Subject: CN=45c920617012bed54deadd66eb842e72a9ccfc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:f1:58:0b:3e:f7:c3:35:c5:c6:2b:0c:9e:
49:d5:be:ef:9b:f1:3f:d3:28:ed:bc:f5:d0:d1:b1:
e1:ce:cc:60:d7:42:e2:38:d2:6f:38:65:15:68:e0:
77:e3:6d:49:a4:15:57:5e:56:b4:40:ca:a9:4f:2e:
e6:b2:d9:f8:06:d6:58:74:d7:f5:a5:c0:6d:10:dc:
5e:df:86:18:d2:93:2a:23:f8:cb:cd:34:33:dd:9a:
9a:ce:1b:2b:69:6c:57:ec:bc:3d:3d:3d:7e:a7:61:
b6:d6:59:68:40:66:41:8e:8a:d4:b7:d9:eb:73:d8:
94:a8:fd:6b:66:41:5b:d6:da:1b:50:d1:4d:1d:0d:
c2:5c:dd:fb:0b:b2:0d:b5:20:2c:52:3c:b6:a7:2c:
85:ce:c2:be:a4:8f:ba:71:ae:57:1f:db:e7:5a:54:
a6:6f:e6:8e:71:16:df:da:8d:ae:8e:36:15:14:b3:
ab:4d:d8:8e:34:5f:8a:cd:ba:df:d4:f8:d8:39:2b:
c5:17:6b:43:b7:13:80:5b:af:33:52:25:dc:ca:bd:
a4:4d:b3:e6:0c:63:5b:d5:4f:fe:20:84:63:b3:6e:
0b:2a:c1:c7:95:5d:58:48:11:e6:1c:04:08:3a:e2:
f1:39:ec:b0:89:10:fb:91:c2:7d:ad:c5:3e:3c:23:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C9:20:61:70:12:BE:D5:4D:EA:DD:66:EB:84:2E:72:A9:CC:FC:29
X509v3 Authority Key Identifier:
keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:55:91:84:b3:54:31:8b:63:75:68:ff:30:0f:93:b4:4e:06:
15:c2:d5:11:f4:d2:0f:d5:32:1e:9f:1d:42:3f:27:d9:ab:31:
67:25:c6:13:c7:dc:c7:87:6b:7e:8c:d5:eb:3a:02:e3:f0:3b:
eb:5e:44:7d:dd:c4:a7:ef:be:4c:98:ee:c8:24:12:08:0e:27:
87:37:75:eb:57:a1:ad:55:ae:09:a2:e5:da:38:a6:24:a5:1f:
5c:1b:d0:ac:a2:5c:e7:c4:f5:b8:03:06:7e:c6:c2:2a:b2:1a:
79:0b:d3:d5:07:89:e3:89:a6:c7:2b:a5:33:31:93:3e:dd:df:
64:0e:5d:a6:d6:3c:79:c6:2c:f5:6d:07:44:2d:62:40:aa:dc:
e4:2c:83:2e:7d:bc:c0:8a:6a:66:de:32:f3:ef:88:86:ab:96:
b9:82:94:7a:fb:0b:c4:7c:86:f5:5f:9b:2b:3c:2a:aa:a5:6f:
86:13:b9:24:90:e3:21:15:c0:61:2d:90:8b:a0:c7:2e:bd:81:
3d:6b:18:9b:7c:e1:c0:c2:44:5e:58:db:89:94:b5:b8:99:e5:
02:fc:84:45:bf:d3:bc:12:d2:c5:23:cf:e3:9d:15:d4:9d:d1:
3a:07:f1:bb:b1:4b:18:b5:1a:ab:03:b2:ac:38:1d:dc:26:8e:
a2:4e:c2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:24 2026 by rpki-client