Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier: tVPlgPDiZSfepH5X9D1WglFGgrEDmwE2QlGY7frzjFQ=
Subject key identifier: 23:C8:AF:D1:93:66:16:97:78:1F:23:68:41:17:0A:95:E8:AB:ED:17
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial: 019DA3E66CA9E1EF649B783FCF447EF04380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number: 0DCC
Signing time: Sun 19 Apr 2026 04:01:20 +0000
Manifest this update: Sun 19 Apr 2026 04:01:20 +0000
Manifest next update: Mon 20 Apr 2026 04:01:20 +0000
Files and hashes: 1: 49PmNqo2ozi6foyeWngY9-dP7_8.roa (hash: FTUCcOfecgfUHEaYOHAMv32E85Y9HshWNlhJWT3H1nQ=)
2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: W0juxhX6YDp9T9102/BJh5FNIsDyImz9+WwLhajFk24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:6c:a9:e1:ef:64:9b:78:3f:cf:44:7e:f0:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Validity
Not Before: Apr 19 04:01:20 2026 GMT
Not After : Apr 20 04:01:20 2026 GMT
Subject: CN=23c8afd193661697781f236841170a95e8abed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:f5:0e:3c:96:d9:9e:25:b0:73:94:85:58:
ad:84:7a:a6:64:5e:45:87:bc:84:b4:da:05:62:a1:
df:ea:aa:d5:d6:45:bd:e4:a6:5f:c9:9c:9c:7e:4c:
c9:64:9f:6f:4f:14:b9:42:89:93:d8:9e:73:15:6b:
0b:72:04:c2:7a:00:93:b0:a5:a8:53:57:72:b4:fe:
d7:24:b2:fd:06:cc:82:6d:7b:32:f1:f9:97:d8:3b:
ff:5c:a2:55:64:fa:3f:dd:37:5c:4e:42:6e:14:0f:
5d:b5:8b:0c:68:d1:3a:e7:f9:5f:35:ee:cf:70:20:
84:a4:67:bd:49:74:c6:57:be:49:28:36:d5:a0:e0:
3b:aa:af:1e:84:a8:93:42:ef:d1:c3:90:85:25:fc:
a8:75:45:d2:57:69:aa:03:a2:62:8a:43:07:77:2c:
52:ef:59:e1:52:e4:d8:b1:ab:18:a3:9b:c4:c5:a1:
31:ea:a7:70:b8:7d:08:ce:d6:36:76:d8:1f:3c:d0:
a2:7f:76:c1:e3:33:df:42:39:94:9c:bc:3d:b4:c4:
2a:3d:be:75:d5:5b:6a:c4:a7:02:5b:28:34:97:2c:
7f:3d:83:fc:7e:f0:58:46:c5:25:13:bc:07:14:15:
16:cc:7b:d8:5e:d3:6f:63:0f:87:44:a0:fa:39:b8:
ee:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C8:AF:D1:93:66:16:97:78:1F:23:68:41:17:0A:95:E8:AB:ED:17
X509v3 Authority Key Identifier:
keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:84:f9:fb:f0:bc:69:81:de:b6:27:f5:5b:5c:a2:7e:e7:e1:
ef:0e:f1:14:86:3a:8a:e9:ec:7e:45:c8:38:36:04:af:28:a6:
a6:79:2c:af:e2:65:cf:9c:4e:df:b7:91:12:37:af:08:7f:e3:
b8:6d:7d:04:35:c9:3d:d6:b6:65:b0:61:26:cd:7b:bb:2f:48:
b1:f2:a7:11:c9:d1:d3:d3:5f:7d:b8:4b:89:68:dd:01:96:9e:
dc:ba:3b:32:25:c8:8d:f2:e9:00:1b:5d:a2:7f:cc:06:16:37:
bc:ef:e1:2a:f8:40:3b:5b:9b:18:72:82:f8:c3:51:d9:29:b6:
74:87:4f:48:82:e5:6d:78:49:7a:28:30:5b:e8:65:19:2d:4f:
ec:2a:5d:bf:e8:d2:d3:e4:39:a5:c4:4a:20:fb:b5:1e:93:f2:
d7:ae:67:da:ae:a9:76:9c:ac:76:2d:21:53:49:01:e4:ae:46:
39:76:f4:d2:ab:9c:48:ab:b5:00:41:8e:ea:73:b6:08:e7:65:
29:a3:55:40:49:98:22:c4:6f:3a:69:d1:09:0b:0e:67:91:03:
d9:dc:58:e1:87:9e:03:2d:1c:2d:66:45:02:9e:c9:4b:04:67:
2c:ff:eb:e0:0a:b8:df:7f:9c:05:eb:b3:63:1f:00:79:cd:27:
88:56:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:46:02 2026 by rpki-client