Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json)
Hash identifier: jDGGytQEi4bX5MSBj+CJhSR/lUInRl9fIaSuLxuZtb0=
Subject key identifier: CC:B1:40:55:2E:B4:94:0B:FE:8C:4E:20:D6:53:D6:CA:7B:8D:BE:41
Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Certificate serial: 019D9B87FBB39DAD37802A01993839A800B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 13:01:13 +0000
Manifest this update: Fri 17 Apr 2026 13:01:13 +0000
Manifest next update: Sat 18 Apr 2026 13:01:13 +0000
Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: zJquHONPGpMGEZreH5SUbAEXGykG+C+DnE568e/RBCM=)
2: CbDZWAH-omIyip_WwmqNFzGEN6Q.roa (hash: JAGjJAojKoIa2rnuQE4G2jO7W0AL58snegAhZ+6Gung=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:fb:b3:9d:ad:37:80:2a:01:99:38:39:a8:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b
Validity
Not Before: Apr 17 13:01:13 2026 GMT
Not After : Apr 18 13:01:13 2026 GMT
Subject: CN=ccb140552eb4940bfe8c4e20d653d6ca7b8dbe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:53:10:74:24:b7:a6:3d:eb:2b:0d:b2:42:
30:58:3d:dd:0d:6a:17:9b:24:66:b3:99:b8:a6:f1:
72:e7:de:c2:55:5e:a5:27:d1:a3:78:be:85:a3:32:
f1:5f:8c:3c:a5:68:92:2a:78:a0:ed:a5:29:37:5e:
c2:79:6a:e4:de:ca:a9:ad:72:84:e1:61:eb:18:f8:
69:1d:41:5b:4a:c6:63:01:9a:0e:56:60:45:97:51:
c8:88:0e:9f:74:3c:22:0f:57:97:41:88:77:96:55:
85:6f:81:95:0c:20:4a:84:3b:36:b8:8f:72:35:0c:
03:82:a6:16:cd:54:50:7d:34:d5:d6:4a:8c:65:ca:
fe:90:24:f6:01:9e:88:3c:b5:44:6b:53:c1:10:34:
a5:0d:01:26:95:a1:c0:f6:f3:89:ad:4b:1a:c2:df:
91:75:2a:75:dd:ae:ac:24:86:96:68:aa:0f:ec:b3:
38:e4:f0:7d:8f:a1:b9:1e:58:d7:26:36:3c:f7:d6:
37:0e:eb:65:46:89:b4:7f:37:14:b2:bb:f7:8f:fd:
f3:52:af:dd:10:29:66:b1:2f:08:1c:1c:de:de:55:
5e:d9:97:6d:15:d4:75:38:4f:44:89:f1:9e:81:a5:
a2:b6:1c:ea:a5:b9:09:ea:7b:bf:b7:a3:73:4b:dc:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B1:40:55:2E:B4:94:0B:FE:8C:4E:20:D6:53:D6:CA:7B:8D:BE:41
X509v3 Authority Key Identifier:
keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:47:ff:87:fe:3f:33:48:4c:da:af:7d:e3:ea:53:aa:23:f9:
76:41:88:c5:41:3d:ab:98:d9:62:68:84:96:ae:bb:d6:2e:54:
48:e9:c9:34:ce:1a:89:ab:d4:b0:c2:d8:f2:35:33:de:93:28:
26:1f:c5:30:c0:68:3c:7d:20:4e:05:18:ed:6e:24:6a:65:1b:
58:9b:db:8e:93:03:b9:71:54:f0:19:8c:0b:02:75:a7:98:d1:
60:a1:ab:04:f5:56:1e:0b:97:32:e3:32:28:45:b5:98:a2:7d:
cd:cd:28:07:2a:fa:31:3d:fb:01:cd:bb:f2:af:0e:d8:ed:b5:
83:4f:f6:b9:29:3b:ae:88:21:60:12:b1:b9:18:e3:aa:99:ce:
b1:53:2e:f9:8b:96:25:e0:be:8d:d1:3f:72:0e:d7:78:e6:12:
8d:a2:96:65:d1:33:2b:d4:5d:95:fc:bb:7f:4b:86:41:dd:c8:
e3:b7:b1:2b:19:00:40:cf:2f:26:98:a0:c4:37:ed:98:07:3f:
a9:d7:59:22:88:ed:2d:53:e1:8e:7e:89:8c:46:ce:d6:86:c6:
8d:11:1b:6b:84:27:15:a3:8d:b5:6a:4a:31:a7:97:4e:39:df:
7b:e6:75:c1:21:17:a1:e7:9d:96:dd:40:9f:95:6b:e4:90:ac:
27:62:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:18 2026 by rpki-client