Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
File: elmlzGH-vbkW1GJLvowQiXNTsME.mft (raw, json)
Hash identifier: GeONKQTl8I6x7Po9vQX9F6oBh9axH3c58NhcCrhdU3Q=
Subject key identifier: 81:03:1A:D9:F2:A7:DA:95:04:D9:2F:16:DD:F7:86:C4:25:92:4B:EA
Authority key identifier: 7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
Certificate issuer: /CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Certificate serial: 019D99CFF83FC883547CAE8C1734AFB77DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 05:00:36 +0000
Manifest this update: Fri 17 Apr 2026 05:00:36 +0000
Manifest next update: Sat 18 Apr 2026 05:00:36 +0000
Files and hashes: 1: Uc8J9mXAeOJT6T8Cc2pg7ur7EVE.roa (hash: GBBdZarUNSiLkjjpGT6+8iJpn2p2RM8BoqoVzDBwtCw=)
2: elmlzGH-vbkW1GJLvowQiXNTsME.crl (hash: Ee0C12fa1xbSx5lB7+qwrJmptCPsQ9U/y/VpDpRkiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:f8:3f:c8:83:54:7c:ae:8c:17:34:af:b7:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a59a5cc61febdb916d4624bbe8c10897353b0c1
Validity
Not Before: Apr 17 05:00:36 2026 GMT
Not After : Apr 18 05:00:36 2026 GMT
Subject: CN=81031ad9f2a7da9504d92f16ddf786c425924bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:de:14:a4:83:37:76:20:23:7a:47:f8:56:
20:8a:9a:c6:45:0c:27:21:31:4e:5a:11:07:65:c4:
7e:00:60:c9:b2:87:3a:37:b6:98:e7:3c:3e:c4:8a:
d8:4d:8a:2b:84:af:dc:1c:d8:e8:90:67:0a:53:49:
6b:21:08:a3:fa:dc:77:56:aa:09:9a:76:c0:2e:84:
96:37:f3:e8:bd:40:0f:b8:9d:15:2c:21:c3:d4:c1:
02:8a:55:00:b7:dc:7a:5c:35:4a:a4:8e:fa:28:ae:
ef:07:18:15:a3:70:85:f2:44:35:7f:57:74:a0:91:
82:11:d9:8c:85:c9:ff:bc:88:ec:32:74:4d:ef:6b:
14:8f:7b:a9:b8:1c:6f:6a:f1:6d:8a:ac:25:c8:72:
0b:5f:12:26:2b:56:34:a1:98:a2:38:4c:0d:ea:86:
d5:d9:87:eb:af:0d:17:1b:fd:49:2e:40:97:79:6e:
e4:f9:c8:6b:7a:e6:cb:0d:55:b2:f5:f9:44:9d:00:
9a:0e:ea:21:a7:bd:12:17:88:20:ba:56:7d:60:2d:
29:13:fb:ad:df:58:4f:8b:48:fb:e5:14:3b:8c:58:
e1:b1:25:d5:4c:1f:66:b0:12:92:f2:76:87:c7:d1:
9d:b5:0b:91:df:e2:92:c1:4d:bc:b1:a3:36:12:ce:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:1A:D9:F2:A7:DA:95:04:D9:2F:16:DD:F7:86:C4:25:92:4B:EA
X509v3 Authority Key Identifier:
keyid:7A:59:A5:CC:61:FE:BD:B9:16:D4:62:4B:BE:8C:10:89:73:53:B0:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elmlzGH-vbkW1GJLvowQiXNTsME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b1ab1b-0e95-4c3c-8768-903d083496e5/1/elmlzGH-vbkW1GJLvowQiXNTsME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:51:b5:87:ca:50:df:4c:37:fc:40:47:8f:26:91:50:69:1f:
61:6b:ec:f8:c8:74:22:14:7b:91:b6:dd:17:44:22:65:3b:54:
62:df:05:01:e0:a4:1e:db:9d:17:a1:dc:1b:e1:34:bd:41:72:
c7:f8:ec:65:ed:3c:a7:28:1a:57:27:f0:e7:77:a1:4f:ae:20:
7a:b6:a7:2f:fa:9b:87:d1:d2:a5:d6:e2:58:35:f8:b7:15:59:
60:6c:95:d0:04:d0:57:e5:79:fc:c0:0d:b0:df:88:d4:19:b0:
2a:6a:88:09:10:88:f5:76:fd:7a:c0:df:d1:ee:f0:c9:6f:c8:
9b:1f:3b:0c:a2:01:bd:30:8a:7b:0f:4f:99:7d:ad:e5:dd:50:
87:e8:73:cc:04:11:1f:95:81:f6:f6:2b:73:72:76:84:81:b1:
6f:e8:24:cc:4f:b6:1d:fe:e9:f4:af:88:ac:28:40:bd:db:d0:
aa:c3:b6:30:fb:00:49:05:fe:58:f4:5c:74:78:b1:dd:af:36:
cb:ef:0d:e5:e8:09:1b:47:16:5e:92:f2:d0:d4:8c:e0:98:73:
c1:4e:94:9f:94:06:61:5a:2d:e2:dd:fa:49:52:00:36:f9:fd:
b8:63:20:43:07:a2:40:dc:05:af:4e:0f:ed:b5:2a:77:71:10:
19:5b:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:07 2026 by rpki-client