Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: 8xCNn1faonF2jjk61Qaw67J1Txef1c8T7FhzPuRNwyY=
Subject key identifier: 9D:C3:68:A9:94:04:A5:32:A0:8C:82:57:DB:4B:67:0D:33:0D:65:77
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 019D99D094810DBF8EBF4F9CBDC365EFEF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 1791
Signing time: Fri 17 Apr 2026 05:01:16 +0000
Manifest this update: Fri 17 Apr 2026 05:01:16 +0000
Manifest next update: Sat 18 Apr 2026 05:01:16 +0000
Files and hashes: 1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=)
2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=)
3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=)
4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: Dcs2WqDWnCICJdo26kPAG3PAwUBgTHXU5Q1He0LWvy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:94:81:0d:bf:8e:bf:4f:9c:bd:c3:65:ef:ef:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Apr 17 05:01:16 2026 GMT
Not After : Apr 18 05:01:16 2026 GMT
Subject: CN=9dc368a99404a532a08c8257db4b670d330d6577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:f2:8d:a6:3b:4b:c8:fc:17:09:11:26:e3:
6e:56:0e:84:88:99:2e:cc:4d:8e:66:8d:76:c3:01:
ff:2c:dd:64:db:90:56:57:c9:48:5d:34:1c:ac:a3:
66:3b:55:cf:07:af:3d:57:2a:35:ac:4a:5d:47:cc:
c2:e4:4c:c3:e9:c8:6a:9f:52:63:7c:87:c9:60:0a:
8c:19:05:14:da:a1:06:1e:02:d9:c0:81:55:f2:6c:
35:0e:fa:82:c0:c5:04:3a:b9:18:4d:f5:ff:18:75:
67:a1:c9:ae:d5:d7:15:f8:09:52:67:b4:0d:98:65:
8a:94:e5:01:00:63:52:b6:2a:15:4b:38:1a:ff:cf:
70:27:e9:03:31:72:73:56:bb:c5:03:c4:1a:4f:ed:
df:57:7e:f8:55:34:6e:8f:ac:cb:56:4a:84:0c:09:
c8:0c:ae:9d:87:ed:b4:89:89:77:de:77:c5:31:a2:
a3:39:c7:4a:09:d1:55:3b:2c:d0:06:3e:0d:db:f7:
20:24:22:4b:f2:65:2a:73:65:23:4f:ab:d3:8f:7a:
b5:b8:a9:aa:ee:c9:86:56:56:42:f8:39:ab:09:1d:
89:62:e4:17:c5:40:e1:98:85:d0:38:fd:a8:7b:98:
e4:77:b0:4a:52:d2:e8:23:22:1a:d6:e9:b5:e9:9c:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C3:68:A9:94:04:A5:32:A0:8C:82:57:DB:4B:67:0D:33:0D:65:77
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:38:10:2d:d0:99:11:61:c6:23:20:b6:cb:33:72:bf:16:8a:
d9:47:8e:c4:e6:d6:99:2c:ee:e9:be:d3:e2:3f:64:46:f9:17:
01:95:eb:8b:92:aa:4b:74:22:22:0a:a1:df:3b:c6:45:a1:4b:
cc:a3:bb:da:4a:33:8e:e2:64:d8:d4:cc:c6:a9:0e:10:87:c2:
cf:8f:0f:43:5d:36:82:0d:75:ce:63:37:26:b3:04:28:d1:12:
cc:82:2c:68:03:b1:07:f0:61:83:51:d7:b9:82:a7:76:cb:f0:
74:26:34:b6:1a:b0:a8:c1:68:c4:92:bf:2c:d0:a6:08:0d:75:
13:ac:05:a5:68:fb:d1:eb:3a:ab:ec:af:94:6c:4c:e0:11:52:
40:5f:4d:4a:7a:ec:02:8b:21:b0:ca:be:82:31:5d:4f:d8:36:
30:cc:37:ad:3a:7d:3d:58:6f:4a:17:23:88:f1:a7:fd:ac:f7:
30:1d:d8:96:98:30:cd:b5:ae:25:a1:cd:1f:c9:86:50:8f:b5:
6f:3b:b5:0b:ec:5a:54:48:f0:60:e0:d0:90:ae:a0:5a:6f:04:
e4:8e:c4:6f:a3:dc:15:b9:68:52:11:07:8e:91:a1:07:11:af:
f4:21:89:43:06:22:2b:62:04:96:bb:c2:e9:b2:f3:cd:39:cb:
4a:9c:36:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:10 2026 by rpki-client