Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: ucZrMnljRHxp9UWRBNIPNMCTm6G0LNmXA0Nj/szmSvc=
Subject key identifier: 5C:EF:4F:A1:4F:42:97:1C:ED:C7:B3:80:A9:05:DB:B3:04:37:D9:28
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 019D988630926A0B45622A5D5A88FDD61A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 23:00:24 +0000
Manifest this update: Thu 16 Apr 2026 23:00:24 +0000
Manifest next update: Fri 17 Apr 2026 23:00:24 +0000
Files and hashes: 1: 3vWXTbTpDM0ymRMTdG3MOaM9Vbk.roa (hash: vKhrAJbWhh00/xBbyVciFsXn8wyB3UjGH2N5E0ovZYw=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: 6Z/53LUeN7Yf/ZLWS7wuAjGggIRelC7j9FyJE6EOU3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:30:92:6a:0b:45:62:2a:5d:5a:88:fd:d6:1a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Apr 16 23:00:24 2026 GMT
Not After : Apr 17 23:00:24 2026 GMT
Subject: CN=5cef4fa14f42971cedc7b380a905dbb30437d928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:46:92:70:14:3e:03:49:bb:6b:f2:d1:89:
71:98:7e:75:7c:44:a3:d0:94:ce:16:69:0d:3c:f5:
67:2a:72:d0:84:1b:29:f5:f1:25:58:e4:4e:b7:f5:
e7:43:80:bb:18:bb:fe:09:b9:d9:37:79:50:d7:f1:
f9:b2:7b:f0:db:dc:e5:98:43:01:65:85:95:85:c4:
65:af:f5:16:a0:60:0b:50:e1:80:19:2d:3f:1d:78:
05:48:a1:cc:0f:d3:bc:b6:84:fc:06:7b:f5:ca:1b:
31:61:ef:ec:98:0f:15:5a:53:3c:8a:95:16:5b:93:
47:29:1c:b2:61:32:04:2f:a8:39:b3:cb:d9:f4:3d:
f7:e5:96:26:da:b2:28:a7:02:a7:82:f7:d2:46:c7:
d2:33:54:5a:a1:2f:ca:50:d5:a6:f4:56:35:92:cc:
d2:77:8a:47:27:87:17:70:d8:80:5a:8d:e7:ba:78:
9d:04:7a:be:db:ed:e5:29:73:15:75:87:ce:4b:8d:
8f:3f:fb:85:b0:d2:da:72:f2:a2:a8:84:b0:95:48:
a3:e5:b9:02:68:99:44:ba:ff:e7:18:c2:f4:67:17:
8d:d3:1a:21:dd:41:22:1f:a7:92:9d:ae:4b:e6:cc:
a1:09:74:a8:c6:57:11:27:3d:25:d4:a8:3d:62:48:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:EF:4F:A1:4F:42:97:1C:ED:C7:B3:80:A9:05:DB:B3:04:37:D9:28
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a0:55:7f:8f:45:2c:7e:41:9f:06:0b:6a:2a:5f:83:2c:28:
7c:77:68:11:e0:2d:10:13:fc:2f:67:9a:8b:39:2e:f4:92:3b:
62:00:6a:9f:0b:6f:dc:09:65:d6:00:22:a2:64:a5:dd:2d:1d:
0c:b9:94:d8:00:d5:6e:51:92:78:c9:24:b0:a3:27:45:02:d2:
16:5a:e3:70:c7:65:17:67:f3:89:c6:3b:24:3c:7b:0f:09:6b:
be:25:34:3f:74:63:57:b3:85:5b:e1:5e:61:bb:3a:77:f2:b7:
e3:ab:fa:df:1d:9b:9b:c6:03:75:8e:09:d8:25:75:56:d2:25:
34:75:78:33:e1:7c:2f:15:cd:b0:2f:dc:c7:2c:4e:5f:ec:b1:
bb:1b:cb:74:9a:12:6d:5e:df:a4:12:b0:26:62:93:eb:9f:f2:
da:52:67:2c:da:ed:73:99:8e:23:ff:35:84:02:e8:52:c0:f5:
d7:c1:00:cb:2d:93:c6:7a:9d:eb:03:07:23:3a:3f:1a:46:ac:
0b:60:95:75:e3:f8:5c:33:7f:29:43:b5:ff:22:e2:c0:13:f4:
5f:78:15:58:a8:c4:3f:f1:ad:19:1b:44:eb:9c:5b:3a:32:e8:
75:13:f7:f5:77:fc:b3:00:b2:f8:8d:a7:72:3e:10:0c:4c:9b:
71:47:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:38 2026 by rpki-client