Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
File: cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft (raw, json)
Hash identifier: UWIKpLqkV3jF0WNuqqpiqnDs/b6Wfcckwh55+6r74rU=
Subject key identifier: 73:25:C6:4C:5A:9B:27:34:1C:10:08:77:89:52:D8:08:1C:AA:52:6D
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 019D98F45A8BDDB6B4DF53AAD88298E6CE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
Manifest number: 0CDC
Signing time: Fri 17 Apr 2026 01:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:00:43 +0000
Manifest next update: Sat 18 Apr 2026 01:00:43 +0000
Files and hashes: 1: 16srEBoxiiP_SLONARpHEy8GOoo.roa (hash: +6A67bqXKJfVetajXvC/jcqmg3rLZdsfP1x5JHp+/TM=)
2: cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl (hash: CajrjX3lK0L2vHYqt4rpPHwTlXSzW8pEIAc9JRkLve4=)
3: fERV_JWJtZ06djuribfR-EanimI.roa (hash: 1SfqauH/gyHrveo9ouFTP8dPyATzr66l3d0+S3nbdG8=)
4: fEvs1D6h_tnnMzXsm5m1S12m8tQ.roa (hash: Vr/ir+k302yq1Y+i5sBWnYUalv9cePo9w43+EMlEP7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:5a:8b:dd:b6:b4:df:53:aa:d8:82:98:e6:ce:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Apr 17 01:00:43 2026 GMT
Not After : Apr 18 01:00:43 2026 GMT
Subject: CN=7325c64c5a9b27341c1008778952d8081caa526d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:b3:2e:90:8e:39:f4:15:9c:35:ad:cc:fd:
89:9f:df:d1:37:fc:32:5c:8c:97:9a:55:20:f7:f3:
39:1e:1c:d2:37:25:04:c5:75:b1:f6:48:84:d9:c1:
a4:55:e4:21:f6:29:69:8d:84:63:ea:6e:61:fe:7c:
55:62:1b:ff:ac:fd:cf:d9:78:19:5c:f1:6b:36:29:
49:57:fa:73:f5:f7:75:5d:7c:50:10:4a:20:db:70:
12:8f:71:d4:84:93:67:1a:2b:0f:6c:c0:bb:20:cb:
ee:6b:2f:f7:50:58:77:bb:18:af:41:e2:f3:b7:5b:
e0:10:82:61:1c:e5:5e:64:86:3b:9c:6c:87:b7:76:
9e:cf:ad:8c:a5:46:a1:4f:01:bc:2c:e0:42:e4:fa:
bb:5c:9f:fe:84:ba:b6:8f:ee:c2:3e:c6:f7:96:ae:
04:ea:31:39:7e:4a:68:11:db:58:c0:c2:50:e4:68:
44:ea:cd:b2:1d:3e:1a:db:d2:6e:b5:6a:99:fb:c2:
18:38:60:39:a2:14:ac:a5:10:eb:b4:98:55:88:2d:
23:13:3a:a6:40:91:5e:15:99:a0:0e:32:1c:24:0c:
96:ea:e5:98:14:59:8a:3f:8f:5c:b1:e9:06:ef:17:
e1:33:5e:3a:d5:40:6b:aa:bc:a3:e7:e8:f0:df:73:
19:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:25:C6:4C:5A:9B:27:34:1C:10:08:77:89:52:D8:08:1C:AA:52:6D
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f3:15:b9:14:03:a8:90:49:52:60:48:fa:e5:f3:cc:ba:9d:
3f:2f:9d:7e:a5:e6:38:02:e1:d8:ed:63:25:80:91:db:b6:d0:
ac:1a:15:10:07:7d:37:7e:b7:a0:95:56:32:59:20:c2:8e:e4:
4f:5d:33:a1:13:7c:c0:a1:73:d6:93:03:7b:9b:f5:60:ea:14:
e4:ff:98:10:6f:17:9a:76:27:71:58:9e:e7:d5:34:2a:a4:58:
4e:06:41:83:85:9e:4c:51:c8:1e:8a:64:d5:8a:68:b9:c8:b7:
6e:79:7d:02:1a:1e:0b:d6:e8:5e:86:3d:24:99:bb:b0:67:a3:
d1:ea:5d:5e:f7:ee:79:f9:ac:dd:62:42:0b:52:f1:3f:a1:3b:
f9:94:a0:c4:d9:76:98:f2:59:b5:78:b3:24:79:b4:bd:06:fe:
7e:69:94:f2:b8:65:c3:29:2a:45:19:32:ef:70:71:83:ac:30:
d3:01:1c:5c:ae:1d:8b:02:2c:11:c7:66:8f:91:a0:71:4c:1b:
eb:54:d0:82:b0:92:a1:de:dc:4f:ab:23:bc:c6:52:f2:75:b6:
3f:c1:77:44:7c:9d:a2:1a:81:b9:e6:86:b2:e7:4d:9b:74:31:
ca:90:af:3a:eb:0c:60:81:15:32:5d:4f:58:17:de:43:6e:70:
50:79:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:40:36 2026 by rpki-client