Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: nSI6TmNtnkS8dulmkMpz0HYX1azI4S9GOOO9mL3vqtI=
Subject key identifier: A2:8C:D4:2E:51:25:AA:89:FF:0A:C2:85:68:2A:16:98:9A:DF:C1:D9
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 019D97E1FA9094FE5B2B4D54CA130540A094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 20:01:02 +0000
Manifest this update: Thu 16 Apr 2026 20:01:02 +0000
Manifest next update: Fri 17 Apr 2026 20:01:02 +0000
Files and hashes: 1: 83YQUlILQ7GDfrTJPK3LZaXUsK8.roa (hash: vNXxGjQTXNQA/zSyVijjMQoJOd0f9h52cpzw4JKC8XQ=)
2: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: llIZ4q1xjqKj4pMJbHEoDBfE2A+Jia1bj2reqFKVABg=)
3: tZjW0PJX2KzKZhqd-IvCr2S66XA.roa (hash: 7bMA6kUNG6YTWVlD3a7zH0NzQxfAjb1JxS2t14+Bg1s=)
4: yX7-VtqrrdDv7vs2gdtp2PBHHms.roa (hash: 7Eaxb4xLBZMek5rOGdgNQUBxlSvYpqN5jH75GBFXgPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:fa:90:94:fe:5b:2b:4d:54:ca:13:05:40:a0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Apr 16 20:01:02 2026 GMT
Not After : Apr 17 20:01:02 2026 GMT
Subject: CN=a28cd42e5125aa89ff0ac285682a16989adfc1d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:4b:eb:38:3e:9e:6c:86:a3:f6:0a:6c:20:
3c:20:b8:4d:5b:a8:89:07:f8:1d:6f:c8:50:81:bf:
2e:d6:06:d3:b7:35:ff:55:a6:13:5a:ab:2c:79:4c:
0f:08:1f:29:be:61:02:ef:0a:22:63:f4:c8:5e:3d:
19:49:e2:f6:30:af:99:4f:4c:63:e7:5d:bb:82:f7:
a2:47:2f:42:f0:16:9e:bf:aa:b2:8e:68:27:9d:c2:
90:47:49:7f:de:88:78:41:fe:40:47:44:24:29:bf:
fc:3c:c6:d1:12:e6:53:83:37:fa:e6:a5:e5:e2:e8:
53:8e:be:b2:b6:43:b1:14:f7:1b:3b:49:d2:e5:97:
95:3d:d0:ba:d7:00:37:93:ea:32:4e:e7:ae:56:80:
ee:07:03:b5:93:40:e9:f2:53:1e:5f:b6:08:0a:a2:
45:cd:72:c4:77:e7:8f:d7:2d:62:86:a2:40:60:88:
da:21:5e:f0:b0:63:60:17:fd:fe:b6:48:83:49:a7:
4c:12:07:cc:a1:04:33:89:e2:23:5e:8f:d4:b3:c7:
48:1f:f0:74:07:90:e0:c3:6a:86:45:98:de:ea:a0:
32:5c:d5:4a:6c:46:dd:16:5a:36:c1:c5:36:7c:ab:
78:2c:6e:57:77:8a:19:90:ad:3f:f2:43:cc:a0:94:
b5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:D4:2E:51:25:AA:89:FF:0A:C2:85:68:2A:16:98:9A:DF:C1:D9
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c2:87:79:e5:cc:2a:cd:21:28:79:0b:ce:ae:9e:9d:d1:c2:
52:a9:05:6c:c3:2a:23:15:c5:23:3a:cd:e5:d1:ca:64:c0:5d:
a4:95:5d:3f:97:0c:18:eb:ab:b4:80:18:8b:05:06:b9:28:f7:
24:28:91:78:0d:3f:01:b9:29:55:4a:22:4d:0d:5b:ec:d0:08:
39:bb:69:0c:2e:62:d5:5b:0a:e8:92:d9:a3:b1:8e:64:ef:bb:
09:be:06:df:b7:6f:8e:d4:2d:ed:c4:39:f4:b0:94:63:87:79:
df:a4:f7:c4:3d:82:50:38:a8:39:d6:42:c9:63:f4:de:2b:c5:
13:d5:ef:30:3f:f0:73:78:cc:80:11:75:c8:14:ca:fd:38:ec:
2f:65:a7:03:d9:66:b7:ad:65:65:16:33:e9:cd:85:38:9d:99:
4d:ce:39:84:8e:a7:2b:63:05:96:0d:fc:9d:b9:b3:2b:e1:c0:
2f:a9:9e:b2:33:20:fa:68:00:1d:4f:1e:60:f3:ff:d5:85:4a:
2f:c6:54:dc:62:09:b5:9a:c7:25:31:3a:fd:51:33:18:0d:fe:
fc:e9:f1:75:81:f5:6c:6c:5d:e6:25:37:c4:40:28:d8:e4:12:
83:b4:4a:0c:e3:b9:c3:0b:ef:ab:49:ca:98:4f:b2:c9:b7:04:
9a:ca:88:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:54:41 2026 by rpki-client