Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
File: _dlCLeliA-XYc-CZVZGjppDdPZI.mft (raw, json)
Hash identifier: iZ3eOsJEkShaM+yCOJWswjkCEGhPmeUThBOTc4DqNhY=
Subject key identifier: 26:76:5B:74:3C:82:52:47:6D:4A:BC:50:24:A7:AA:D5:49:A0:BF:6B
Authority key identifier: FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
Certificate issuer: /CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Certificate serial: 019D9818E05C817783FF0F836D5593B7E30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 21:01:00 +0000
Manifest this update: Thu 16 Apr 2026 21:01:00 +0000
Manifest next update: Fri 17 Apr 2026 21:01:00 +0000
Files and hashes: 1: 41PdyGaqWfuZrGCiI7A6Pe8er08.roa (hash: fqabz9d9YrXMSNvuc4clJBMP1zUaniqoWE3YHtZWSoc=)
2: OyiOQQ5RXT-6W_eR_NYBstfLFGQ.roa (hash: cg+zDM1Nsx6Yirfpu41rhF9dShj8Jqt4XkTVhq7Ju3g=)
3: _dlCLeliA-XYc-CZVZGjppDdPZI.crl (hash: bdg0QejErpzF4KPZ6USELuJntu5cbi5eXcwzDAtqQC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:e0:5c:81:77:83:ff:0f:83:6d:55:93:b7:e3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd9422de96203e5d873e0995591a3a690dd3d92
Validity
Not Before: Apr 16 21:01:00 2026 GMT
Not After : Apr 17 21:01:00 2026 GMT
Subject: CN=26765b743c8252476d4abc5024a7aad549a0bf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:ff:05:e7:81:7e:14:ea:d9:53:7a:8e:c8:
cb:38:58:9a:af:c3:74:78:4a:a8:9d:cd:b8:38:0a:
8b:04:f5:50:e2:65:b3:60:2f:4f:e9:10:86:cd:aa:
e1:48:81:36:2a:80:45:a2:b0:ac:3a:25:bf:9e:92:
bc:6c:b7:db:ec:bd:2f:d2:65:0a:a7:27:da:71:3b:
bf:df:55:35:b8:b1:25:2a:92:a4:11:ce:cf:b0:b0:
4b:5d:eb:ce:00:41:42:2b:1c:2e:c6:47:82:86:fa:
0a:e8:0c:18:a5:90:5a:44:8b:3a:1c:33:b9:5a:16:
9e:2d:4a:a4:ee:7d:05:b7:f6:81:a9:18:7f:75:e1:
c5:79:72:be:91:06:c9:d8:d6:15:87:6d:55:f3:25:
71:35:a3:4e:1f:05:23:27:40:a0:ae:fb:fb:3a:db:
20:8e:df:5e:e9:9d:40:0c:e7:c2:77:a6:e9:e0:d7:
93:3b:0b:7b:33:41:43:eb:7f:26:4b:bc:6c:20:53:
51:89:8d:57:aa:45:82:e2:dc:f7:e1:11:00:31:55:
ad:75:6d:94:55:51:07:2a:5e:74:a1:e6:ae:cf:93:
b9:fa:bb:9a:74:58:30:a9:1b:65:73:36:76:97:cd:
9e:4d:6d:3d:6e:7c:3f:a7:ce:cc:97:f2:2e:63:f7:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:76:5B:74:3C:82:52:47:6D:4A:BC:50:24:A7:AA:D5:49:A0:BF:6B
X509v3 Authority Key Identifier:
keyid:FD:D9:42:2D:E9:62:03:E5:D8:73:E0:99:55:91:A3:A6:90:DD:3D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dlCLeliA-XYc-CZVZGjppDdPZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/acf2e6-c8dd-48c4-8389-a18550a69f66/1/_dlCLeliA-XYc-CZVZGjppDdPZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d1:99:12:5f:e2:d7:43:03:8a:af:1b:41:55:c5:7e:eb:4e:
4d:5e:c3:7a:31:f2:a0:c4:a2:52:e2:fd:b9:68:b7:75:2e:fa:
17:72:38:83:30:08:84:3a:4f:dd:62:a1:c9:5c:e1:5c:2b:a8:
7f:d0:a4:f9:1b:87:6c:c4:56:b6:99:2c:d2:57:49:1e:2a:72:
bd:c5:e1:8e:63:63:74:e1:fe:1c:e1:af:cb:04:c6:36:c4:92:
41:8b:db:f2:a3:6f:0b:b8:15:4f:85:98:9b:92:fb:b3:13:cb:
34:b6:b8:d9:9d:50:9b:08:3e:ae:a7:b6:61:f1:0c:82:e8:6b:
a8:bc:73:fd:ac:ce:0f:bb:96:ca:63:1b:4b:4b:3a:da:5d:a2:
dd:87:d0:f6:db:cd:27:b7:b1:b5:f1:40:76:4d:7a:11:32:07:
99:36:fd:64:43:34:30:a3:62:c0:fc:e7:42:c1:65:2f:3b:df:
14:5d:07:cd:05:3d:fd:6c:92:40:fa:17:85:cc:96:b7:38:93:
a5:4e:13:4d:e8:46:ea:3a:18:28:3b:f3:d1:78:73:d3:b5:dc:
dd:ea:08:26:65:df:e3:e2:3b:3d:9d:50:81:4e:7f:16:43:10:
1d:ba:3d:f9:84:62:65:98:83:aa:cd:1b:72:2f:d5:d2:00:3f:
70:c0:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:59 2026 by rpki-client