Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: cyYPNysaNU55unCYmIPEivFblrCPGMwZpo37kRdrwVs=
Subject key identifier: C2:D3:3E:DC:59:22:C3:06:40:01:20:3B:35:7C:EB:75:B5:8A:06:C8
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019D9962AB5618D60716D86E0B76DD0A9AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 0640
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: WOYamDbJix8+Ltk/7wGutggYeb6WIr87aOoJUzAHxGA=)
2: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (hash: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ab:56:18:d6:07:16:d8:6e:0b:76:dd:0a:9a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=c2d33edc5922c3064001203b357ceb75b58a06c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b4:bd:90:15:ba:b6:a1:b7:1f:52:ff:0a:9a:
15:f9:f4:e0:5c:bf:c9:61:3b:fe:58:2b:1f:e6:5e:
dc:06:b2:4f:f7:bd:91:25:85:fa:6b:a4:47:a2:56:
f3:96:72:b0:31:99:62:44:88:a7:17:e9:4c:a6:96:
02:a4:dd:15:2c:a1:87:a3:6d:79:65:9f:72:94:78:
93:05:52:34:2a:75:49:d4:0e:8a:72:4c:c1:5a:78:
e1:8a:49:a5:76:bf:86:a4:b1:d4:ff:48:a8:9f:a5:
00:7f:3a:d3:a0:75:c3:9b:ef:16:3f:4f:87:42:d4:
a6:6f:04:5c:30:0b:c4:00:69:cb:86:c3:f6:b0:9e:
d4:4c:4f:fd:58:19:8b:0b:4c:a8:ad:4d:62:7a:1b:
a3:eb:f4:ac:ec:47:0d:01:5e:ff:32:76:93:a0:e1:
a2:34:e6:8a:a1:6c:43:ed:f6:35:37:ec:26:34:6c:
52:0e:82:6c:8f:d7:09:11:16:11:da:c1:0e:ed:83:
06:4c:04:c2:3a:5c:62:98:ac:b0:93:05:a1:68:a8:
f5:80:97:bf:28:c3:69:71:c0:7f:3e:80:c6:04:81:
81:7b:c6:7f:2c:0e:25:5f:9b:c1:bf:5e:d9:4e:eb:
81:7c:70:e0:78:52:02:b9:58:18:e8:67:3d:33:f1:
2c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:3E:DC:59:22:C3:06:40:01:20:3B:35:7C:EB:75:B5:8A:06:C8
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:0f:5f:68:89:cc:8c:65:b3:c6:9f:b9:f4:62:f4:9f:4f:
b1:34:9b:28:64:89:ef:d5:76:ed:59:3c:c8:96:38:df:ed:65:
ab:b9:bd:07:69:9c:58:5f:ab:3e:aa:91:55:e6:af:ed:1d:71:
2e:0e:f9:c2:34:5c:34:ff:55:6f:8d:93:b1:3b:47:c5:6c:bb:
5a:76:50:e1:7a:e6:43:2d:d1:66:05:c8:f0:cd:26:11:f6:20:
cb:1d:b7:a4:ce:76:c9:d9:c2:f9:75:1f:f5:9a:92:02:bd:e3:
e5:50:af:12:f9:c2:60:50:8a:0a:f2:58:a4:35:18:d7:bb:99:
1f:e7:c4:51:84:0d:51:f6:9f:50:f6:04:dc:c4:32:1b:6a:20:
2e:58:48:f1:c1:83:67:ce:f3:62:34:a8:1a:0a:b7:1e:64:60:
d3:ff:30:03:ea:b7:06:f7:1e:a7:fe:a9:34:51:54:25:90:7d:
ab:a9:f6:a2:ff:d6:c3:3d:f3:09:9e:39:88:76:73:4d:eb:87:
18:0a:02:9a:3a:be:a8:43:bc:1a:3f:7e:73:a1:17:16:a6:4f:
f6:3e:66:df:c1:f2:bf:67:c2:db:f4:45:1a:61:7b:71:9e:6f:
72:e2:e6:83:22:27:f1:0e:46:da:57:b3:27:9c:9f:83:c1:96:
57:dd:4e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:44 2026 by rpki-client