Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: 87FF/rJMRwHO3sw/f2QT76/FpLqlJSW0iYfv5V7XsWw=
Subject key identifier: 28:2A:20:00:09:04:B6:8E:A3:83:38:87:EB:D0:5E:FD:B8:A3:F0:8C
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 019D984F9E967C201C800E14B9DEF02DA87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 22:00:47 +0000
Manifest this update: Thu 16 Apr 2026 22:00:47 +0000
Manifest next update: Fri 17 Apr 2026 22:00:47 +0000
Files and hashes: 1: 7qm-LSRsoG2o1A3h3_xWxcHiIrc.roa (hash: NschteRDlBB+SzTLpxjpeCbdQUNPGM+TwCR+GlDPxOQ=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: vDY+BaJNrluZPNiADYxbD60z8AWkxWTE5US7tkyg8P4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:9e:96:7c:20:1c:80:0e:14:b9:de:f0:2d:a8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Apr 16 22:00:47 2026 GMT
Not After : Apr 17 22:00:47 2026 GMT
Subject: CN=282a20000904b68ea3833887ebd05efdb8a3f08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5a:91:6d:fa:72:ae:f9:7c:e6:e6:6b:22:d1:
18:05:9c:01:e5:48:bb:1b:1f:25:ea:f5:7f:ab:d4:
0f:66:c7:58:fe:d7:ce:a0:cf:0c:76:26:68:2e:f2:
8a:fe:e4:f4:18:cb:3c:a8:aa:7f:31:ff:be:d6:a6:
45:86:fa:12:24:76:2c:9d:fa:de:cc:79:6b:e5:c0:
e1:ae:84:8a:ad:9e:9a:47:52:c7:50:2c:1a:f4:0d:
9f:95:c9:a2:31:f3:13:68:82:18:b4:89:e9:25:fb:
af:94:4d:9a:78:39:86:ea:6b:24:4f:d4:e2:38:46:
2c:21:b8:63:de:23:e3:03:34:3d:0e:ab:e5:03:fb:
22:1f:48:7b:dc:03:eb:92:fc:78:b9:02:44:1f:89:
ae:b1:bc:1a:3e:48:e7:30:e8:63:62:46:d6:af:3f:
16:ed:4b:8e:61:17:73:9a:14:3b:a1:b2:7b:9b:df:
5e:2b:28:9e:53:a2:7e:74:50:b0:cf:5d:d5:59:b7:
5a:c7:b5:82:9b:c5:07:46:45:2d:a6:49:b5:77:e9:
c5:e6:e4:22:89:9d:5e:8c:cf:c1:e2:17:c6:3d:bc:
3f:3e:f6:6c:09:e0:27:c5:d1:d3:98:e7:46:17:9e:
ac:e8:9f:76:8b:86:c6:cb:e5:89:cf:0d:89:8b:88:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2A:20:00:09:04:B6:8E:A3:83:38:87:EB:D0:5E:FD:B8:A3:F0:8C
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d3:04:96:7e:e0:85:01:97:5e:f3:6e:86:74:49:58:d2:fd:
18:d9:48:12:52:32:54:94:2f:f5:0f:13:21:62:85:38:3e:a0:
bb:3c:b7:bc:20:36:e7:ac:d0:46:3b:e0:79:98:f0:ed:5f:dd:
da:76:07:1d:57:e9:6b:fc:10:d7:85:99:86:4a:f2:2f:b5:8d:
15:5d:17:9b:66:7f:6c:1a:23:3a:0e:3e:ae:60:36:97:96:f8:
5b:c7:ca:a1:65:88:61:5c:91:34:da:bb:63:b3:61:f7:49:e4:
12:4d:ca:26:bb:d3:fc:0f:41:37:0f:61:71:2c:f8:b3:47:f2:
5a:c6:d0:16:31:b5:cb:0a:0b:98:58:37:e9:c5:ff:51:5d:70:
fc:e4:5b:bc:13:c2:a3:62:94:48:fa:96:78:5e:f4:2e:4d:aa:
52:65:90:63:50:c2:e4:c4:45:38:de:4c:47:eb:b8:bc:82:e5:
eb:f5:f1:7a:35:c8:b2:20:11:1b:28:9d:ce:61:9e:4d:0d:0d:
40:18:e5:74:fd:79:1c:f3:02:7c:95:d2:a8:04:fd:92:81:cd:
10:e3:25:53:8e:3c:b9:33:0e:f4:d4:1a:14:3c:91:c7:7e:bd:
dd:19:b5:27:6d:2f:5b:b5:0d:f2:56:83:19:9c:19:3d:9b:37:
4d:e5:5b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:23:31 2026 by rpki-client