Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: 22tTNvTCCBGWnBCbtM2mX9t3Z9VXZR12/Q86dEMRTpA=
Subject key identifier: 0E:9B:AC:BF:C9:F4:3F:98:E1:BF:31:18:DE:8F:1D:98:BF:6B:08:63
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019D9999AF3BF9ADF0C5049BEFAC290F7242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 04:01:19 +0000
Manifest this update: Fri 17 Apr 2026 04:01:19 +0000
Manifest next update: Sat 18 Apr 2026 04:01:19 +0000
Files and hashes: 1: 8AC5hr87IvNKc2uj2TEkr-2Z034.asa (hash: qt1zTECZT/ge+oHl/7hzl6IVpmrHO5U65Ej5M0jkaj4=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: rdkzzhOByYGmu9FkaWA9+lWokGxlTfMLUd4aPKyoYAQ=)
3: xo56gz-sHNgNhs5F1QLj5VzEnGA.roa (hash: YHF2lJdgiYyyfdcc4I4hM7f5QuuqDFl1zASnR1Kz4/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:af:3b:f9:ad:f0:c5:04:9b:ef:ac:29:0f:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Apr 17 04:01:19 2026 GMT
Not After : Apr 18 04:01:19 2026 GMT
Subject: CN=0e9bacbfc9f43f98e1bf3118de8f1d98bf6b0863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:87:e9:74:7d:26:8a:97:ed:76:9b:ac:22:3c:
6b:63:db:2f:80:cc:27:8e:ee:b4:29:0d:94:2b:31:
75:7b:3e:12:b9:7f:a9:f6:b4:69:76:02:0d:60:f7:
92:7a:48:ed:eb:cc:f1:a9:2d:d2:c9:00:a8:a7:8a:
f4:8d:f7:dd:ca:2e:bd:7f:a6:d7:ad:11:fb:af:99:
3a:79:fa:be:36:66:8f:d7:a7:b5:2e:c2:e6:3d:81:
81:99:d9:01:f5:5b:c1:b1:3b:64:1b:55:2c:f8:43:
23:77:f7:ab:2c:02:46:89:0c:32:8e:c1:a6:06:15:
25:8c:59:46:ab:2b:66:3c:92:be:3b:77:a7:d9:d3:
ea:c3:74:c2:91:5f:be:67:44:06:2c:41:c3:84:25:
0e:eb:cf:69:3e:14:e6:b0:bb:2d:75:8b:62:a0:10:
ac:7b:49:3d:a0:3a:16:42:dd:79:f8:11:d6:00:71:
a5:b1:d5:22:a8:9e:19:0f:32:10:6f:9e:d9:d4:34:
01:b3:bf:2e:33:5d:a9:45:11:71:eb:78:40:87:69:
b0:87:c8:eb:73:74:cb:f6:5b:1c:81:d3:ec:9c:47:
31:5d:3c:e8:3e:6a:d4:4e:c2:71:f7:63:ff:63:c1:
a8:0e:dd:1b:04:bf:ba:b7:cb:03:35:9e:22:85:69:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9B:AC:BF:C9:F4:3F:98:E1:BF:31:18:DE:8F:1D:98:BF:6B:08:63
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f7:b6:a4:82:cf:7b:22:ac:f7:ef:66:b5:f8:87:c8:84:a1:
a2:55:8a:a2:65:72:1d:c9:6c:f0:56:d5:0b:0b:f5:b1:78:72:
db:ad:4d:29:59:6f:1d:d3:71:f4:ee:d6:e2:50:00:4a:8c:59:
f3:f9:f3:ee:fc:d7:ca:90:4d:f2:a8:e6:40:d4:01:a9:39:b9:
fb:26:dc:5f:45:9b:5b:46:d4:c9:69:22:86:f8:bc:6c:6d:62:
9e:aa:fa:71:53:f7:d5:41:11:95:9f:fc:cb:8c:00:1e:57:9f:
83:47:e2:9d:07:d7:b6:d0:40:e0:21:32:48:af:1b:f0:76:46:
12:30:e1:19:d7:3c:f5:a1:86:3f:16:5f:fd:4d:06:37:f0:cd:
92:00:66:20:52:27:c9:90:fc:7e:c6:16:7f:28:25:be:fb:62:
57:98:95:e9:7b:ba:fc:aa:56:1d:ec:57:04:9c:f7:64:90:da:
3a:f7:b2:3e:0b:cd:e9:b2:9f:56:ce:5e:ab:e2:95:9d:0c:fa:
5e:0a:97:44:40:45:33:a4:06:9f:6d:38:46:b5:04:5f:e7:1e:
12:8d:cb:be:88:6d:68:e5:d5:e5:9d:9a:21:69:18:5a:a9:f7:
ba:e1:8e:40:08:95:36:e8:a9:a4:c9:c0:ff:7b:97:55:50:d2:
04:98:ac:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:29 2026 by rpki-client