Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
File: POsgUJhzLLkIgjBF79XXQCUMayc.mft (raw, json)
Hash identifier: uOrSwXnaSBJmBkuKogWepxtR8XhisS8eg/r6D5ocL7U=
Subject key identifier: AE:BB:B7:DF:F0:F3:F9:F2:27:13:8C:34:AE:34:3A:11:07:21:3B:E3
Authority key identifier: 3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
Certificate issuer: /CN=3ceb205098732cb908823045efd5d740250c6b27
Certificate serial: 019D9A06D9F26D271DB8D8959D2C2DE470C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 06:00:33 +0000
Manifest this update: Fri 17 Apr 2026 06:00:33 +0000
Manifest next update: Sat 18 Apr 2026 06:00:33 +0000
Files and hashes: 1: POsgUJhzLLkIgjBF79XXQCUMayc.crl (hash: JEltcEtHk+GA6AFQlJ6MJi9Op1YlZIw5hCE8BgZgMLc=)
2: pp4dxt_v1A7idhETx472Fe15Gfk.roa (hash: we1iOucBiqHe+rmZf6gCAUUM5mZ0MLpY0KQ1hHxgDkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d9:f2:6d:27:1d:b8:d8:95:9d:2c:2d:e4:70:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ceb205098732cb908823045efd5d740250c6b27
Validity
Not Before: Apr 17 06:00:33 2026 GMT
Not After : Apr 18 06:00:33 2026 GMT
Subject: CN=aebbb7dff0f3f9f227138c34ae343a1107213be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:33:57:be:43:d6:b9:d1:8d:e1:78:84:6f:
08:f4:f3:27:88:5d:fd:9a:c1:68:c6:98:65:51:6f:
53:c4:f4:c8:c9:0b:72:dd:a4:a5:a9:d4:7c:7e:2e:
5c:44:b8:82:b9:cc:a7:21:8a:05:34:9c:5d:e1:81:
1b:2a:a6:ce:ec:b5:1a:b3:40:4d:57:0f:1e:fd:6c:
27:b7:53:07:94:bf:bb:d0:bc:36:ff:42:58:61:79:
fc:8e:c7:a7:61:55:4c:ed:ca:63:45:8a:6c:24:37:
1a:04:79:8e:82:b3:7b:9b:af:0b:14:42:47:93:b9:
14:20:ba:9d:b6:e7:d7:04:61:46:be:29:38:53:fb:
a1:e1:77:fb:c5:7f:ff:27:88:b6:62:d4:3e:91:a6:
8f:59:57:0e:29:4c:21:87:41:31:fe:42:bc:a9:77:
82:10:e8:e6:be:cd:2a:96:b3:97:e1:fc:0c:1e:07:
26:81:6d:99:67:e5:5f:2c:00:50:77:e5:8c:7b:9a:
cb:56:52:14:5e:bf:ad:6b:6b:e8:65:36:0e:4d:89:
81:5d:2c:64:fc:34:8c:d3:48:e4:d3:fc:3e:8b:26:
d8:63:2e:bd:7a:c9:3e:0d:81:3f:19:24:b4:8b:47:
2f:4f:08:b4:38:13:10:b4:94:43:ae:47:8b:97:e4:
ed:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BB:B7:DF:F0:F3:F9:F2:27:13:8C:34:AE:34:3A:11:07:21:3B:E3
X509v3 Authority Key Identifier:
keyid:3C:EB:20:50:98:73:2C:B9:08:82:30:45:EF:D5:D7:40:25:0C:6B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POsgUJhzLLkIgjBF79XXQCUMayc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9a4238-7d74-4edf-a4b1-25ed75046b01/1/POsgUJhzLLkIgjBF79XXQCUMayc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:14:dc:f2:a6:a3:c9:f8:35:ee:da:63:2a:2f:a3:8d:40:f9:
d5:b2:61:5e:91:0b:35:9c:37:ad:3a:de:fe:82:0c:d6:4e:62:
e4:f2:d6:1f:44:60:01:3e:bf:5c:af:9d:bb:4b:2b:0f:73:66:
49:4c:70:5e:ee:85:52:06:b3:01:6b:91:e5:03:e4:27:47:7e:
04:7c:c0:fb:10:83:55:cb:a1:ff:31:ca:bf:45:e3:03:91:01:
c7:a8:34:ec:7d:be:8e:19:6b:c7:e0:21:8e:54:66:03:75:88:
38:cf:91:e5:60:27:e7:1a:7f:76:25:ea:ae:e4:d3:30:5a:90:
e5:e0:13:fb:d8:3a:00:e2:3e:ad:68:74:06:0a:ea:48:46:48:
31:90:5e:45:b0:9f:f6:01:41:ee:50:be:ee:75:17:8d:18:37:
99:5f:4c:0a:ff:d4:27:0f:c5:fb:d7:0e:ac:a7:87:ef:d6:2f:
d2:08:bf:78:44:d2:8f:35:c7:7e:41:4a:f6:d8:f0:3f:38:e0:
19:9f:2a:77:ec:29:54:ea:9d:28:09:35:8f:48:05:84:9e:f5:
ca:fa:69:3f:99:90:62:31:0b:f7:79:95:ed:bf:14:b0:9d:0c:
50:c1:93:df:a2:29:84:27:88:cc:eb:3b:f8:94:f3:7e:b3:c6:
9b:49:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:52 2026 by rpki-client