Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: Kf/S6SUXXRU248+m98YCsnxX0LRv2L2Fqp5mBi6KZEA=
Subject key identifier: C4:BE:80:84:ED:7E:AA:6D:9B:24:7E:0D:83:23:91:44:7F:5D:31:1F
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 019DA34107D502EC533709F07A3FE53237EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 18C5
Signing time: Sun 19 Apr 2026 01:00:41 +0000
Manifest this update: Sun 19 Apr 2026 01:00:41 +0000
Manifest next update: Mon 20 Apr 2026 01:00:41 +0000
Files and hashes: 1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: 9enOUBDZMsc+EFy6EzWGQ5z7ThSOfwnh7iNumYEKzgM=)
2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:07:d5:02:ec:53:37:09:f0:7a:3f:e5:32:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Apr 19 01:00:41 2026 GMT
Not After : Apr 20 01:00:41 2026 GMT
Subject: CN=c4be8084ed7eaa6d9b247e0d832391447f5d311f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:b1:fa:94:eb:02:60:61:7e:78:76:2f:38:
60:1c:88:4f:c5:c5:b5:4b:15:d1:fa:b9:df:3b:7b:
6e:a5:44:fb:5e:3f:e6:51:d1:9a:32:16:9d:ee:47:
f0:80:d9:03:a3:ce:3d:14:bc:17:a5:94:51:90:3d:
5f:e1:dd:bc:53:b0:56:54:52:c4:e8:6e:f8:4c:bd:
43:8d:d1:7d:b8:92:1b:13:74:72:d0:4d:9f:ff:a3:
c7:83:84:a2:ac:5c:e2:85:09:22:50:00:32:57:a3:
c2:d5:43:e2:c1:eb:af:66:d6:ca:da:a7:b3:62:1b:
b1:24:27:7f:60:1f:18:77:d7:88:48:76:81:72:8e:
02:51:54:b4:8b:a1:4d:45:3d:89:23:19:92:96:c7:
eb:76:f1:ee:71:5d:be:76:3b:d2:a7:ce:e0:69:43:
d3:07:5b:98:e5:47:48:6b:4f:17:43:eb:25:c3:2a:
7a:17:f3:1d:4f:d9:81:73:04:5b:a9:b7:d0:5c:e9:
25:84:9a:b8:84:8b:c6:e9:af:46:99:41:a4:c9:8c:
90:b4:a8:2f:90:81:58:d7:56:72:16:3e:20:ac:54:
4f:a8:bd:6d:82:07:05:0a:f4:e3:f7:6b:97:6b:17:
fe:2f:69:eb:2f:e8:53:6c:08:c6:db:43:8d:4b:84:
5c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:80:84:ED:7E:AA:6D:9B:24:7E:0D:83:23:91:44:7F:5D:31:1F
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:59:c5:31:dc:3d:57:c1:d5:1b:2a:52:15:e3:e8:2e:1d:
72:f4:df:7b:56:16:9a:48:f2:9b:53:21:98:80:4d:ce:4f:ca:
8e:88:82:86:b9:fe:08:0f:21:b6:21:1a:70:11:5d:69:cd:3d:
16:c4:2b:82:f0:db:8f:41:b2:c4:ca:5e:2c:76:b7:96:21:38:
d8:67:70:e3:0e:20:33:20:bb:8f:48:89:e9:b5:43:43:0c:32:
d5:10:1d:3f:09:da:89:98:61:ae:c8:6b:67:2c:4d:31:a5:17:
ab:85:72:30:a8:9d:9d:e5:e3:04:c3:ac:1e:75:b4:0e:95:0b:
3d:19:ee:8f:a9:e0:88:e8:dd:00:a0:45:15:80:1a:44:82:99:
62:93:53:23:69:7e:bb:a7:fd:85:a7:c5:8c:1b:37:00:fe:e2:
09:ba:5a:9e:dc:c9:87:d8:2a:7f:52:fa:4d:43:3c:ea:b2:a9:
03:35:9a:1b:c0:ad:5f:d7:93:3d:d2:4a:13:8f:7b:73:e0:33:
0f:e6:fb:94:83:96:4b:93:7a:41:06:92:dc:6b:ef:ab:7b:df:
d2:92:f6:cf:65:0f:24:08:72:30:22:80:ec:3d:ec:7c:c8:a3:
2b:7e:cf:12:78:fc:9c:c9:9d:92:eb:a2:c2:9a:39:8a:cc:26:
e6:3d:04:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:46 2026 by rpki-client