Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: OkV4ixxR4IMUDZnbcKEYcsi8XU/UHdZgvjpwJvZtvX4=
Subject key identifier: 96:9F:E4:5B:45:92:27:71:A2:09:B2:21:76:76:3A:02:EC:10:01:AA
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 019D99CFE36FF51A95314F5CD34FC5A2ABC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 18A9
Signing time: Fri 17 Apr 2026 05:00:31 +0000
Manifest this update: Fri 17 Apr 2026 05:00:31 +0000
Manifest next update: Sat 18 Apr 2026 05:00:31 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: kR/HQb3Xw/6N4lb9tl5Y0ZPTkiZMGYIR1VRUoxOZvNU=)
2: fH_gcKdAIP3uBlIddsjG_0qsj3E.roa (hash: L4lQAURP1ERgbM6Iiwl8JhlSrJdP31F20qdbJNDofes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e3:6f:f5:1a:95:31:4f:5c:d3:4f:c5:a2:ab:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Apr 17 05:00:31 2026 GMT
Not After : Apr 18 05:00:31 2026 GMT
Subject: CN=969fe45b45922771a209b22176763a02ec1001aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:4a:d4:fb:a3:2c:7b:31:fd:14:0c:15:e9:
c3:88:95:51:62:41:e1:4c:05:83:33:97:4f:d8:1c:
6b:cb:7b:fc:d0:b9:26:ef:91:f1:81:a5:74:18:50:
ac:c4:46:d7:a9:8e:f6:05:e2:44:14:cc:9f:e3:f0:
e8:e4:86:57:50:21:ae:df:79:df:7e:78:e8:2d:de:
d8:65:99:bb:47:f4:3f:73:b8:04:cc:88:36:3e:2e:
fb:9c:e8:17:ea:96:81:89:ee:99:d2:7f:20:0c:f3:
ca:ee:ff:f8:69:c7:0d:1f:81:c2:f5:13:dd:3f:6f:
fd:01:1d:c7:37:45:7d:2b:99:09:59:c5:6d:9d:99:
78:ae:ac:e8:9c:d7:21:ce:7d:92:04:20:9d:3d:ac:
b4:c1:b6:e3:d8:d4:00:05:c7:9f:47:e1:b2:b0:14:
6b:0d:6f:0e:9f:29:78:49:1c:0b:d1:75:6a:73:75:
68:5b:55:c3:f3:ca:0c:6f:58:82:82:1c:26:55:78:
ba:74:74:4d:f4:fe:d0:f7:81:e8:6f:c3:02:0d:81:
39:8d:ba:1c:23:ea:d9:30:df:00:13:59:8b:c0:b7:
32:a8:65:52:30:61:60:39:09:63:8e:ca:00:17:c7:
b1:38:a4:82:49:d9:d9:c9:c4:5f:01:7f:73:6d:2a:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:E4:5B:45:92:27:71:A2:09:B2:21:76:76:3A:02:EC:10:01:AA
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ca:f2:bd:67:eb:f6:64:c3:df:38:f7:0c:aa:99:0c:2d:f5:
55:6e:eb:6c:22:91:59:f6:42:3d:15:79:72:00:30:25:3d:16:
56:fc:59:d4:b1:76:8d:10:ac:1b:c6:f3:3b:b6:7b:81:8f:c8:
8e:b3:3b:43:06:bb:ba:91:ab:16:82:5c:12:6f:8b:d5:a6:cb:
cd:e3:be:3a:00:fb:a7:e3:44:2c:52:55:ee:59:03:4c:9f:29:
e0:62:2d:bb:f4:e5:f4:b8:7e:63:90:2c:3c:85:1c:d0:1b:ce:
cf:38:e0:72:bc:8d:cf:87:95:eb:c7:fd:39:78:96:cc:e6:d5:
d6:5e:0d:b1:df:64:a4:69:50:bb:cd:58:aa:09:d1:fe:3f:b5:
7e:09:93:60:07:96:3e:5c:4d:78:6a:a5:fb:ac:9a:c5:17:de:
2d:da:3e:83:06:4c:7b:1f:c1:c7:52:23:a5:44:9c:c6:8e:5b:
2d:e9:9c:45:ad:0e:e2:aa:d3:f0:2e:0e:f3:85:af:28:34:c4:
9c:85:b8:fb:b4:39:b6:b7:3d:bc:d9:b2:ad:ff:c7:68:99:06:
5e:a8:a0:40:2a:b3:20:b9:37:48:bb:d4:e3:c6:1b:b7:98:c8:
0b:2c:b6:11:e8:da:a1:de:dd:2c:ce:ef:03:d3:b3:9c:ca:b9:
57:4c:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:47 2026 by rpki-client