Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier: 5QJtoLreWOcE/eMR603IR76gZUR7Cu1jIYM7u2i4x70=
Subject key identifier: DE:16:56:60:12:8F:8B:1F:FD:CD:D7:87:8A:EE:69:5C:64:0B:D8:BD
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial: 019DA453F6E8E0F344464C3C7A1943BE42C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number: 0626
Signing time: Sun 19 Apr 2026 06:00:59 +0000
Manifest this update: Sun 19 Apr 2026 06:00:59 +0000
Manifest next update: Mon 20 Apr 2026 06:00:59 +0000
Files and hashes: 1: QogyvWPisdntpmICPJEytHpddn0.roa (hash: HNTYMpcwAwpgRtJkBvumc5GBtbLf8MOK6w7oCd2sY4A=)
2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: CWTXX5ACO5jkcCvDBZ8AlmBvp56SxxXTQDDC9GJVmaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:f6:e8:e0:f3:44:46:4c:3c:7a:19:43:be:42:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
Validity
Not Before: Apr 19 06:00:59 2026 GMT
Not After : Apr 20 06:00:59 2026 GMT
Subject: CN=de165660128f8b1ffdcdd7878aee695c640bd8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:7a:4d:d5:40:95:c4:f7:5a:bd:1f:b7:28:
65:e7:54:73:3d:01:26:85:6e:17:50:c5:9f:98:d1:
8f:9b:cf:09:e0:aa:26:ca:0d:6e:a1:e7:bf:d3:1e:
ff:61:59:6e:9f:bc:1f:a1:5c:ee:03:b8:43:9b:1b:
51:37:48:9b:78:68:6c:5c:07:0f:3a:04:dc:44:42:
eb:56:f4:f6:77:a7:75:68:a1:d6:12:8c:70:02:96:
f5:74:d6:4b:7b:95:7c:4c:4a:0d:2c:65:41:f3:6f:
71:c4:dc:bc:c6:b4:02:8f:96:8a:e9:a2:35:c2:7c:
95:1d:cb:df:50:df:52:36:be:ed:23:fa:94:ab:96:
56:bc:9b:6a:c6:fe:a3:0f:6d:a3:aa:68:aa:64:d1:
14:64:76:6b:59:da:c0:12:31:4b:ed:37:f4:d8:da:
53:1a:97:99:68:3f:48:b1:ca:63:d4:10:04:79:85:
c7:6b:ad:ba:e3:17:8b:00:5a:86:59:63:24:9f:d3:
12:98:af:94:6e:d1:be:6c:71:a4:ac:7e:43:aa:fa:
68:18:5b:a4:d1:5f:6d:cd:c5:c0:92:8b:62:5a:5b:
5e:d8:b1:bc:f1:13:b6:6e:ea:9d:23:a6:29:f8:0d:
d4:c2:9c:ff:57:73:49:57:b5:59:44:dd:df:51:e0:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:16:56:60:12:8F:8B:1F:FD:CD:D7:87:8A:EE:69:5C:64:0B:D8:BD
X509v3 Authority Key Identifier:
keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:41:ef:f2:5d:a4:6c:53:9a:a5:98:8a:a3:33:0f:7b:1a:7e:
31:e9:4c:ed:61:8a:e7:87:13:da:57:6e:ea:15:b5:1b:e1:66:
bf:82:f3:c2:66:f1:cd:4c:de:db:e5:de:7b:b8:dd:d1:ce:3c:
3d:90:f3:18:ae:a0:42:6e:17:05:fa:cf:4a:d9:07:16:a3:30:
6e:93:29:b2:05:53:3d:80:be:8a:f2:2a:b3:f3:2c:20:77:02:
3a:d6:96:fc:46:5f:72:b5:3c:90:dc:60:8a:a6:6b:09:0b:ee:
5e:2a:0a:4c:37:a6:a5:63:85:eb:e9:fe:d9:fe:8b:79:70:be:
2f:08:77:7c:5d:9f:56:f0:33:9c:32:89:30:1c:d7:07:32:f3:
da:0d:a3:3e:e7:b7:ff:08:0e:ca:1b:de:32:8c:57:96:09:9b:
bc:3a:cf:f5:3d:94:15:c2:c2:6f:1b:c8:e3:80:63:47:4d:4f:
55:70:f2:77:34:ac:e8:79:de:b3:16:64:24:07:3e:e9:cd:3f:
a7:4b:d4:9a:30:f3:1d:12:e5:f0:3c:9e:dc:e8:be:bb:2f:96:
03:9f:e6:b9:97:e9:61:11:fb:9d:1f:a6:18:eb:16:66:12:a8:
2f:47:74:49:e6:35:31:c1:fd:07:ca:d2:3e:d2:d3:9d:12:97:
21:3b:aa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:16 2026 by rpki-client