Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: CT0yL56i3ie3W75nGOz7TlNiZnSrMcyeK6ltc61PKk8=
Subject key identifier: 1C:6D:46:D8:43:C6:F8:00:9C:44:CA:50:DE:D0:85:D4:B2:C5:70:BB
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019D99631782EA39E9B7F28FFD7F28B555CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 03:01:41 +0000
Manifest this update: Fri 17 Apr 2026 03:01:41 +0000
Manifest next update: Sat 18 Apr 2026 03:01:41 +0000
Files and hashes: 1: AREZ7-I4dY-lVbG1KNvmj3abde0.roa (hash: 5iBy3FivOVWf36BTRuKIxy1pHWbIkHkYDe7qIgLbr7U=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: pQcLiu4l2Dj8kHOYNf6Ll2KMjqF9udJsuOGM6tEBoIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:17:82:ea:39:e9:b7:f2:8f:fd:7f:28:b5:55:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Apr 17 03:01:41 2026 GMT
Not After : Apr 18 03:01:41 2026 GMT
Subject: CN=1c6d46d843c6f8009c44ca50ded085d4b2c570bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:45:39:9f:1b:16:e1:a8:d2:e9:3d:6f:5b:f9:
e2:14:9f:d0:68:e2:a1:72:dd:91:70:07:27:99:98:
ce:09:9d:47:28:c5:b4:57:ab:ec:1a:e4:ff:8f:06:
a2:7a:f1:18:82:0c:09:a5:03:80:53:a3:ff:3b:a4:
5f:c1:8a:13:be:f4:98:05:97:22:22:05:a7:f3:3d:
f0:32:d2:af:e4:67:14:6b:f7:90:b2:b9:be:03:59:
c0:1c:b3:f4:0f:3c:c5:d2:95:f3:23:f6:e4:eb:11:
ac:e7:1d:27:d4:25:3d:dc:61:1b:85:5b:aa:49:da:
57:37:aa:d4:69:19:f6:09:eb:28:50:50:e4:2f:de:
a2:08:51:13:ec:88:41:ce:af:be:09:e1:8e:1b:c4:
67:9d:a4:32:68:e0:d0:9a:67:bb:e3:67:c1:ae:95:
1e:54:10:85:94:4d:58:6d:b0:3b:59:3a:bc:17:49:
92:fa:a9:92:7f:6a:44:7a:ba:75:9b:82:8b:44:4f:
9f:30:df:02:2c:c3:bc:5d:28:ac:e2:51:6d:15:d1:
79:67:c0:b2:87:98:fc:ba:a4:ad:21:9c:e5:ed:69:
33:4d:c7:4b:47:53:d3:f6:b7:9a:9e:4c:39:98:13:
89:a8:6a:c7:3c:a0:56:8b:a9:0d:e9:92:ee:fd:ee:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6D:46:D8:43:C6:F8:00:9C:44:CA:50:DE:D0:85:D4:B2:C5:70:BB
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c5:a0:5a:30:0c:fe:fb:b0:bf:0d:4a:e0:dc:ed:42:d1:28:
87:1a:6d:45:e0:96:8d:85:04:11:8a:b4:77:69:b4:61:a6:c9:
d4:ab:17:70:0f:3a:b9:4e:8b:ed:fb:1b:a2:e6:8a:82:47:cf:
c2:af:bc:28:1b:d1:77:1f:7f:b9:f2:7e:91:b3:97:1f:bc:3d:
2b:b0:5d:ef:60:54:cd:6d:5a:3f:c2:80:55:1e:ba:b1:e4:e2:
43:b3:6f:80:75:2f:b0:41:ea:5c:ed:44:5a:cf:aa:64:73:9b:
5b:db:28:36:95:2b:54:99:aa:c0:68:b3:19:05:22:59:2a:5a:
88:36:19:ae:22:b9:b7:f5:be:ab:8b:8c:4c:b9:8f:30:9e:2f:
be:71:16:07:8c:0e:14:b2:34:47:39:1c:fe:d4:da:bd:49:13:
ce:41:76:73:81:1a:e4:3f:6a:57:84:7f:a1:84:72:a4:4e:45:
12:1e:d5:05:63:ff:29:42:3a:85:9b:cf:0f:e8:d5:6c:13:17:
92:b3:60:a2:46:bd:34:36:35:21:fa:be:1c:88:0e:dc:0b:e6:
8a:79:33:c7:64:88:cb:ce:6f:49:66:c6:5a:72:01:2b:b0:b3:
9a:3b:f9:c5:39:b3:3a:c8:de:72:41:5e:e5:2c:af:d0:68:bb:
2f:52:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:20 2026 by rpki-client