Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: 5PCE2c59XLzHfEMKypcKthFgpMTTa4zQwW3gJs+aHp4=
Subject key identifier: F5:58:1A:31:EA:0C:48:83:43:2C:0C:D4:A1:14:77:9A:C5:1C:59:07
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019D9C62FE0D8D082E3803896692D682B342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 17:00:26 +0000
Manifest this update: Fri 17 Apr 2026 17:00:26 +0000
Manifest next update: Sat 18 Apr 2026 17:00:26 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: 0JhLyMLWfH3OrZHKXU08igSpC0ZjHgA3eSIXOGbfWeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:62:fe:0d:8d:08:2e:38:03:89:66:92:d6:82:b3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Apr 17 17:00:26 2026 GMT
Not After : Apr 18 17:00:26 2026 GMT
Subject: CN=f5581a31ea0c4883432c0cd4a114779ac51c5907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:bc:b6:9d:7a:8f:76:3b:10:96:d2:65:03:
b6:41:95:13:aa:82:aa:f0:77:4f:02:47:5f:f3:da:
30:c3:b7:58:57:85:fc:46:f6:55:34:92:73:c2:6b:
17:af:a0:c4:ae:a8:14:e8:47:c3:15:2b:a3:f6:11:
61:fd:5f:47:46:9d:e4:1e:ba:66:7c:7d:85:49:3f:
9d:4d:d2:9a:36:0e:ae:0b:e5:36:e4:70:c8:d1:12:
5b:48:fa:25:03:ae:26:9b:29:65:22:dd:2a:46:63:
61:01:63:4e:22:79:7e:26:01:5a:53:cb:35:f3:e7:
05:c9:06:45:d6:07:9d:3d:f3:d4:12:10:86:e6:1d:
ed:e8:67:ea:8c:50:ac:83:3c:c8:c8:fa:0a:5b:ff:
ef:56:fe:be:ad:61:eb:b1:bf:b1:35:be:d0:19:ed:
9f:5b:ae:47:8b:99:8b:6e:a6:54:ac:a2:7b:9a:b8:
12:60:ce:c1:59:d9:cf:83:bb:b2:61:2a:2a:31:e5:
9b:a7:ef:55:d7:9c:ff:5a:ee:34:8e:43:9c:b0:ae:
d8:50:3a:bf:c8:0a:14:06:a0:e7:7d:2b:bf:3f:08:
b6:21:5f:33:d3:22:26:7c:3a:4e:5f:5f:12:e2:e0:
00:16:28:9b:69:17:31:f8:34:a3:09:82:21:6b:03:
3b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:58:1A:31:EA:0C:48:83:43:2C:0C:D4:A1:14:77:9A:C5:1C:59:07
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:bf:42:4b:dd:4f:b6:df:b0:a9:c1:ef:a1:42:15:08:42:c3:
47:f6:b8:3c:5a:d8:c3:91:9c:aa:9a:39:d8:a7:f4:36:f6:91:
a1:47:0e:56:91:ad:90:46:bf:a4:4b:35:2c:65:27:55:15:07:
2d:1e:38:0e:e3:33:8f:9f:c9:d9:30:2a:51:77:f6:a4:e8:cd:
2f:02:6a:2e:9c:5c:4d:11:b9:cd:47:54:29:c2:5b:f3:88:49:
ac:82:f6:c6:c5:87:8e:a8:86:e5:85:69:90:b7:a3:6d:ab:af:
ef:94:0a:95:a1:82:16:0a:4d:c6:f7:3a:fb:d2:b0:3f:32:7a:
07:35:b2:1e:fe:5e:bd:cf:58:b9:0f:5c:1c:be:34:98:d8:d1:
24:9a:31:30:ee:2f:0e:c7:d7:c3:c8:3d:93:a3:0c:ec:2f:77:
87:87:18:f5:c6:aa:36:6f:12:4b:82:71:01:61:ad:fc:89:f0:
dc:40:f6:61:07:fc:62:05:c2:c9:1f:6b:b2:0f:98:a2:98:77:
e7:e1:41:63:5d:c1:b9:e8:8e:ee:c2:a1:33:fc:37:5f:8c:7d:
1e:57:25:d4:f0:81:ff:db:97:fa:4a:fa:15:01:bd:45:82:d2:
6d:8a:9c:ea:22:6f:10:df:46:17:21:05:c6:b1:7c:c1:8b:c0:
3f:aa:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:26:45 2026 by rpki-client