Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json)
Hash identifier: gC1UL0maBOfCWM+qajaa0o0fkI/Uac1lxfvPYE5tcA0=
Subject key identifier: 7C:23:7C:7D:C5:84:30:61:A7:08:D2:EE:13:87:38:62:FE:70:B4:34
Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Certificate serial: 019D985057C0EC2F847C0A6AF73E9DCF47A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 22:01:35 +0000
Manifest this update: Thu 16 Apr 2026 22:01:35 +0000
Manifest next update: Fri 17 Apr 2026 22:01:35 +0000
Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: HzArTIgpLXY//Dm29Evukt3c7pDGfFeMWAtYgx+Zn8s=)
2: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (hash: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:57:c0:ec:2f:84:7c:0a:6a:f7:3e:9d:cf:47:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Validity
Not Before: Apr 16 22:01:35 2026 GMT
Not After : Apr 17 22:01:35 2026 GMT
Subject: CN=7c237c7dc5843061a708d2ee13873862fe70b434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:2d:22:d3:0f:f4:6e:5f:9e:57:50:af:46:
ab:5e:95:d0:24:b6:40:f7:7f:db:ac:c4:19:1a:b3:
97:43:d9:e2:c6:ad:e2:ad:2e:19:8a:0a:68:fd:9c:
a3:53:4e:62:b3:58:3e:90:85:29:85:f8:4d:32:8e:
bc:b6:b6:3d:73:f4:03:74:fb:be:7d:1e:9f:26:7a:
6c:bc:04:7b:95:04:ae:f5:05:86:dd:e4:04:37:af:
77:32:6b:2d:30:09:a9:4c:e2:bb:cd:2f:f1:d1:4b:
64:7c:4f:23:2b:1b:ff:37:b2:22:e1:b0:2e:18:a9:
71:44:c8:b2:3b:66:56:12:a8:d2:c9:b0:27:1c:76:
56:4e:c9:50:d8:86:6d:d3:6a:a7:29:b6:5f:65:d9:
64:ce:db:68:c3:90:e8:84:66:e8:42:49:b1:d7:62:
93:91:52:d8:e2:f2:a8:a4:97:a0:30:70:45:0c:12:
56:41:8c:cb:1a:79:c2:10:b1:d7:da:f2:62:6e:ee:
a9:e9:e9:06:dd:b7:e0:de:2c:06:dc:89:2a:98:e0:
87:11:de:67:c6:78:06:b0:c0:8e:f9:da:f4:5f:98:
61:90:2f:05:2f:45:20:74:78:59:c2:7e:0a:06:d0:
b5:b4:c9:cb:4d:3d:bd:bf:a4:a8:6c:70:62:21:c7:
14:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:23:7C:7D:C5:84:30:61:A7:08:D2:EE:13:87:38:62:FE:70:B4:34
X509v3 Authority Key Identifier:
keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8a:86:19:ff:85:08:6c:b0:c4:57:e9:e0:39:7e:01:67:61:
48:5a:61:d3:f7:c9:6c:e0:46:c2:83:0e:24:9b:b1:d0:a4:f9:
d1:f5:6b:94:b6:1e:4c:78:79:de:9a:78:bd:b1:9e:27:eb:3e:
a0:e2:4b:71:c5:ba:79:74:98:4c:7e:fe:b7:4b:ba:1e:59:52:
52:92:36:bd:d1:bd:51:44:ea:0f:e7:ac:28:06:4e:45:28:c1:
53:ec:3d:7b:a4:b2:6a:4c:53:40:e0:1f:cc:64:14:b9:7d:bd:
86:67:f7:e3:df:b5:fa:80:a6:9f:77:db:60:bf:8f:cb:96:bd:
81:da:72:9d:31:9d:5d:67:36:20:6e:5a:1f:fc:a3:ee:3c:96:
66:46:dd:1d:0b:f0:d0:2a:87:f7:89:48:a1:92:de:72:ee:fd:
f4:00:da:c5:7a:72:73:94:18:22:3b:6d:6d:49:99:b8:f1:2d:
0b:6a:5d:d5:13:9e:b5:67:21:47:3f:4c:1e:0b:b5:cd:c5:a9:
16:1a:ce:50:ea:ea:6d:c2:e4:fc:e0:e3:ca:81:2e:09:1a:6e:
15:f2:4d:f3:a8:cc:7f:83:d3:0b:db:93:4d:7e:97:6d:e2:6b:
6d:a5:ba:d9:4d:ea:48:48:5d:74:6f:9a:24:62:0c:04:7b:8c:
62:3a:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:30 2026 by rpki-client