Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File: cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier: HWXbfTCfaOhXv6XwIW48DWduE8sU6UUxDGie/2/AmOg=
Subject key identifier: E6:44:2E:7D:01:E1:73:D2:D3:05:B0:14:89:19:3C:0C:23:EF:42:D2
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer: /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial: 019DA4538C52332F9804B95B3561B10EADDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number: 0C74
Signing time: Sun 19 Apr 2026 06:00:31 +0000
Manifest this update: Sun 19 Apr 2026 06:00:31 +0000
Manifest next update: Mon 20 Apr 2026 06:00:31 +0000
Files and hashes: 1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: dVz8CPFk6XCtJv/FNoOZoTZX9DRjd4R5oqez3ug55nQ=)
6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:8c:52:33:2f:98:04:b9:5b:35:61:b1:0e:ad:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Validity
Not Before: Apr 19 06:00:31 2026 GMT
Not After : Apr 20 06:00:31 2026 GMT
Subject: CN=e6442e7d01e173d2d305b01489193c0c23ef42d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:33:36:eb:26:e9:a9:50:2f:92:54:98:2e:
45:0a:e3:8d:82:5c:53:26:a0:6a:ec:c7:37:06:62:
d7:65:48:f4:cd:00:01:42:07:16:94:16:07:40:1f:
1f:c5:72:64:74:cb:2e:af:dd:68:81:fb:2c:0e:a7:
35:4d:29:9a:69:cb:f0:f8:bd:6a:04:f6:9e:6a:ea:
e4:4e:b7:35:84:9e:be:77:f9:99:a9:0f:27:47:a6:
0f:55:77:41:a4:a8:38:c1:57:3d:22:f0:23:9c:c9:
99:bb:d5:4d:9f:f0:03:0a:1b:04:5a:7f:b4:3e:05:
d0:e6:3d:44:da:3c:de:ab:f9:1b:59:62:27:b8:6a:
6a:bc:fe:a9:3d:f3:2c:96:df:2b:69:5c:6d:e4:60:
cd:f6:da:82:75:45:02:0b:d4:b5:08:a6:65:e0:66:
83:fe:d2:2d:e7:64:c3:57:01:36:24:8e:5a:ff:34:
c9:13:86:da:4a:86:1a:a6:76:15:2c:1c:95:9d:29:
0c:0a:fb:89:bc:6b:2f:fb:30:a5:e3:52:fe:8c:78:
b4:5d:67:f6:b3:6a:2e:df:39:41:6b:8d:e3:9a:58:
19:1f:1f:41:60:d3:31:48:72:1a:38:c0:ab:d5:d7:
b9:64:71:a3:96:28:cf:31:27:ce:9f:5c:73:a8:5e:
2e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:44:2E:7D:01:E1:73:D2:D3:05:B0:14:89:19:3C:0C:23:EF:42:D2
X509v3 Authority Key Identifier:
keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f3:5c:c7:b6:ff:a4:09:20:89:c1:fe:4b:c5:ea:77:17:bf:
35:4d:01:7c:15:e7:5e:f1:df:79:ec:5b:fb:6f:27:a4:04:68:
74:50:37:43:b8:87:b1:c1:e0:11:7c:a2:e7:30:51:8b:bd:c9:
57:11:15:02:a4:4d:cf:d4:f6:0e:d8:47:b9:7f:5d:a8:70:5d:
7a:0c:05:5d:06:27:1b:a8:d1:bb:73:fe:65:ab:c8:b1:0f:94:
16:90:45:21:68:bd:c8:0a:ab:c8:6d:8d:88:e5:19:ff:1b:36:
0b:d9:85:3b:8f:e2:f9:9c:d7:5f:2c:cb:65:00:5f:4d:b6:91:
11:c9:5a:79:b8:f7:1f:9a:78:33:fb:69:59:16:10:be:83:0e:
ed:ed:9f:c9:45:b8:93:ce:64:53:8c:07:66:80:59:50:6d:c8:
ee:48:ab:16:cb:db:a7:5c:6d:3b:2a:6b:c3:7e:3c:88:96:12:
b9:b2:d5:26:d2:f1:49:01:10:08:70:9a:ff:5d:34:ba:48:70:
f5:46:89:d9:0b:9e:e8:c3:88:6e:4c:2b:e2:d4:25:57:ad:21:
37:0d:9d:d6:e1:7e:71:b6:f6:38:58:d1:bc:80:53:12:28:17:
d6:db:a6:17:a5:fd:cb:c3:6f:1a:98:47:62:07:04:7e:ec:d1:
f3:3f:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:40:44 2026 by rpki-client