Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
File: cM9eaXxglK22vJcVazXgBf1M8uI.mft (raw, json)
Hash identifier: jH0WiYA/3tU6g1jXjRPk5pGcQhp/W/qlGVZgUZHrJVs=
Subject key identifier: 31:D4:9B:03:94:CE:0B:67:76:7C:45:F4:CC:59:19:32:C6:70:6C:4F
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial: 019D9A07507D4FCC267EC215551694C1ED22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:01:03 +0000
Manifest this update: Fri 17 Apr 2026 06:01:03 +0000
Manifest next update: Sat 18 Apr 2026 06:01:03 +0000
Files and hashes: 1: NBCpqIpZAF1KaD7VX5EAO0lgw58.roa (hash: FNwe4WLfDmM1bNzJd35FzEdIcc1xxE0RPwhccQQkLXQ=)
2: cM9eaXxglK22vJcVazXgBf1M8uI.crl (hash: OMdUSg7MrxpKOs7JrPC4M6Hg01ExG/ZwYb7lIFYdh2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:50:7d:4f:cc:26:7e:c2:15:55:16:94:c1:ed:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Validity
Not Before: Apr 17 06:01:03 2026 GMT
Not After : Apr 18 06:01:03 2026 GMT
Subject: CN=31d49b0394ce0b67767c45f4cc591932c6706c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a4:37:60:8e:a3:f4:64:0c:e6:80:12:46:e1:
4d:99:cf:f1:e0:8a:46:bf:f7:19:27:03:ef:19:9b:
22:e0:85:80:04:60:0c:d5:55:ad:db:37:8e:32:67:
c9:e5:47:91:3c:81:ca:ae:0e:c6:b5:ec:38:87:77:
b4:d1:5c:19:68:bd:9b:0e:85:81:ac:33:a6:5f:50:
77:71:36:43:90:8d:04:26:a9:f4:fe:91:4b:ef:26:
42:2f:5d:cd:66:d1:00:88:0e:52:5c:6e:2f:eb:09:
98:91:66:94:9c:34:e7:49:4a:58:ee:ca:21:c6:8e:
18:e2:6c:c8:01:10:5b:b3:7a:24:07:f9:b0:99:a2:
51:f5:46:17:d9:39:16:82:6b:c7:33:ff:6c:b7:9b:
68:38:5c:fa:c3:53:10:51:db:19:8f:a4:b0:f7:45:
9f:6e:b9:c8:51:4f:b3:95:a4:b9:59:bf:96:59:da:
7c:d9:c3:a2:cb:60:b1:a4:03:4b:4b:a8:fd:ec:de:
13:db:5b:75:2e:d3:23:d4:c6:48:9e:e7:04:a2:83:
3d:56:86:0b:e6:5c:15:f8:50:71:f1:55:bd:cc:be:
0d:0b:80:29:02:7d:32:fa:e2:36:55:06:d0:83:6c:
c1:c9:58:fe:d8:b7:8d:f3:60:c8:09:b8:e3:6f:9d:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:9B:03:94:CE:0B:67:76:7C:45:F4:CC:59:19:32:C6:70:6C:4F
X509v3 Authority Key Identifier:
keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6d:37:56:99:fa:a0:54:10:eb:b6:0e:81:ac:e2:6b:41:c0:
a8:fd:7d:b3:1d:46:a4:b9:ad:6c:ce:e6:8d:07:69:b2:54:5a:
84:f8:76:a0:65:49:16:0d:f7:fe:85:70:0a:da:c0:75:7b:6f:
f5:f6:fd:ca:45:20:70:7c:f1:1a:53:0a:45:59:b7:d0:e2:1b:
50:90:99:6e:17:a0:27:c4:e9:68:5d:7d:19:65:ad:9e:f9:c8:
18:cb:18:e2:69:0f:b4:b6:f0:0f:e4:e5:8d:0b:55:33:95:20:
d1:71:24:31:c8:86:9e:dd:ab:5f:94:d4:d5:d3:15:e8:55:c0:
b1:96:ba:e9:ea:ca:59:06:51:2e:f9:4d:06:d5:b2:23:35:8b:
74:ae:d4:61:1d:9a:57:c4:ff:bd:8e:cd:1f:18:c8:6e:8f:4d:
1f:20:52:5b:8e:75:f3:58:d4:46:51:93:97:e2:50:47:e1:b7:
d3:d4:3c:1e:00:22:fb:c4:48:48:43:54:4f:6f:1a:39:4f:e9:
7b:3f:bf:0f:65:9b:22:4e:cb:cf:31:c8:fb:39:89:ee:a4:01:
e7:cb:24:df:e9:ac:47:00:c7:c2:04:f1:52:8d:88:a5:01:83:
05:7d:a0:ce:cc:15:c4:a9:43:60:1f:3c:47:75:ad:ab:72:01:
b3:29:b0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:46 2026 by rpki-client