Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: fF9wYX621p0h08SW/en+uxNudkZ8a/GSPk5mgLA4AnM=
Subject key identifier: 39:D6:28:48:73:8E:F3:A3:BD:EA:91:B1:F5:75:54:38:68:DF:77:D6
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 019DA3E6C92F46A17C957C3C7E3CEAD5C614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 04:01:43 +0000
Manifest this update: Sun 19 Apr 2026 04:01:43 +0000
Manifest next update: Mon 20 Apr 2026 04:01:43 +0000
Files and hashes: 1: FZgm-m-tM7etG2QpRA9NtYKJMp0.roa (hash: UQwsai2QfSWLMJ1/MEG9VD0VHu/w7xSrHdqEgRycwjY=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: Cbfj/Uvd3GAjOlJGV3khtdk3Nxqgqv91MJ2gV44JdvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:c9:2f:46:a1:7c:95:7c:3c:7e:3c:ea:d5:c6:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Apr 19 04:01:43 2026 GMT
Not After : Apr 20 04:01:43 2026 GMT
Subject: CN=39d62848738ef3a3bdea91b1f575543868df77d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:47:28:8d:f4:7c:dd:59:78:c3:66:de:aa:
0c:3a:93:f1:28:ad:ad:56:22:59:37:17:47:ef:bc:
b7:18:66:06:11:70:91:cb:f6:e6:5d:c1:ef:55:f0:
3d:4e:8e:9c:2a:48:2a:87:2e:c9:cc:0d:bb:d5:e0:
09:c6:7d:3a:df:93:7d:1f:10:72:8b:c1:b6:72:11:
b7:fd:77:17:34:c6:aa:6d:41:3e:17:55:e0:0f:2f:
a8:c1:0e:a6:21:cd:ea:e2:5d:1c:b8:99:eb:08:a0:
26:0b:58:8e:7c:d3:6a:e0:cf:a7:f7:b6:04:7b:7f:
cb:5b:60:cc:b7:7a:90:96:0a:0b:38:a9:89:d2:82:
06:04:e7:f3:67:7d:3d:2e:05:3e:55:ea:27:c5:6c:
74:29:37:3a:72:9d:be:77:81:28:c4:b3:51:79:88:
05:d3:ee:60:bc:25:d4:eb:f6:db:0f:cc:8b:03:ff:
d1:f0:02:a9:fb:ac:a4:05:b4:eb:fb:d3:d8:6d:4b:
64:7f:7a:f7:d0:22:46:66:48:60:7e:1d:2e:c3:c5:
8d:ea:79:b1:b2:1f:4f:3b:db:1d:e9:ff:4c:fe:67:
3b:3c:58:68:4f:9d:6a:97:04:e1:9a:ff:8e:fb:1e:
5f:37:10:56:a8:b9:0d:25:68:3c:e2:45:11:16:72:
00:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D6:28:48:73:8E:F3:A3:BD:EA:91:B1:F5:75:54:38:68:DF:77:D6
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:34:86:92:98:56:f5:e5:5f:56:17:2b:ef:81:e3:d0:9f:e4:
d5:65:b2:43:85:64:af:0a:9d:ae:6d:d3:9c:ce:73:7a:cd:00:
cc:c2:59:db:00:4e:74:d3:34:64:d3:74:b4:73:82:33:c6:2f:
4e:63:e8:be:b0:8f:90:7f:a3:d5:d7:c5:e7:a3:57:e6:62:d9:
b5:a4:7b:f4:fb:e0:c9:01:4c:83:0f:5b:6f:ba:41:03:a8:ea:
c6:15:19:44:c7:97:1d:7e:ea:69:e9:b5:f4:02:64:1f:75:af:
67:df:79:a8:c4:52:0d:51:59:e3:c1:fc:bc:20:db:f1:20:59:
dd:0f:d6:2d:bc:9a:a3:17:dd:22:6c:54:bb:29:d5:b4:36:a2:
6e:33:f7:2a:25:e6:56:e3:84:ad:b8:b3:8e:79:09:0c:4b:60:
1b:9e:64:39:7a:69:19:01:9d:3b:a1:6a:fc:a6:88:7e:a8:2c:
49:4d:4f:a7:6a:8f:e0:c3:ad:05:21:3e:b2:2b:3d:b5:12:cd:
0d:58:84:51:7d:9b:76:f4:fe:21:ae:12:24:e1:35:b9:d8:ff:
72:54:9b:65:cc:67:1c:d6:75:6f:d0:af:90:df:c9:df:7d:60:
13:0c:4c:d0:d4:df:3f:26:7c:0f:cf:9b:d5:ed:da:29:da:c1:
25:ff:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:35 2026 by rpki-client