Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
File: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft (raw, json)
Hash identifier: Y6n6DoBhY3B4ghDWSb0IOwqECTwDEm1PAmKYLQxrZGI=
Subject key identifier: A9:ED:C7:A7:1A:2D:C8:65:35:69:14:DF:19:64:3D:CC:23:CF:DC:AE
Authority key identifier: FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
Certificate issuer: /CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Certificate serial: 019D99D0020ABFB070762A0E1072B84D5210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:00:39 +0000
Manifest this update: Fri 17 Apr 2026 05:00:39 +0000
Manifest next update: Sat 18 Apr 2026 05:00:39 +0000
Files and hashes: 1: 1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl (hash: OvjSLhUJWkZvZTGmaMnB2+GfS9dM3yBBkSrQZcfkfLY=)
2: _mlWLWGEeY126ouf9N2RBXWxQWs.roa (hash: hRcT7FQAvX81ZtVwVTQnfnVplPzsGoXPbu1Og6gLElU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:02:0a:bf:b0:70:76:2a:0e:10:72:b8:4d:52:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb480c73354305cc40f8faba9e5402ef37de2eaa
Validity
Not Before: Apr 17 05:00:39 2026 GMT
Not After : Apr 18 05:00:39 2026 GMT
Subject: CN=a9edc7a71a2dc865356914df19643dcc23cfdcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f9:f3:44:04:b8:3b:b1:e6:98:58:ba:34:80:
7c:be:bf:ad:36:b2:b7:d6:4b:fe:a1:73:8d:12:7b:
6d:00:78:a9:23:8c:e9:f2:78:49:d3:91:97:2b:8b:
ec:b0:64:67:78:8e:4c:40:1a:02:0f:48:3b:ac:55:
a8:69:bd:6a:b0:0a:4f:b1:d5:d3:9b:db:94:f9:76:
78:85:ea:27:a5:93:d4:03:23:88:19:50:28:93:db:
f3:93:1c:c2:af:a0:48:1a:56:25:ff:21:a6:c2:40:
29:9e:c3:78:60:ce:08:20:57:91:e4:33:cc:bc:8c:
c8:85:b2:ad:ee:29:26:ed:40:b7:5d:07:3f:37:fc:
67:69:fc:d4:68:08:ec:09:b7:23:4e:35:09:55:27:
ff:d7:6e:40:b3:7b:48:6f:79:df:b6:23:d2:28:24:
ab:2c:c3:46:a6:0a:4a:cc:cd:88:5f:a3:8e:77:9d:
42:cc:cd:d3:79:db:b8:cd:00:c6:61:87:53:7d:0a:
96:52:9d:ff:ae:79:e4:41:0b:ea:06:c2:15:7d:ce:
c7:07:12:e3:b1:b9:52:94:f7:20:13:69:32:5a:07:
7b:80:da:e0:cf:44:0c:b1:14:42:08:ac:01:a4:a2:
7e:d6:62:33:ce:63:fd:23:ea:17:0e:74:a9:95:54:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:C7:A7:1A:2D:C8:65:35:69:14:DF:19:64:3D:CC:23:CF:DC:AE
X509v3 Authority Key Identifier:
keyid:FB:48:0C:73:35:43:05:CC:40:F8:FA:BA:9E:54:02:EF:37:DE:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0dc489-e028-4f37-a972-509f44e92022/1/1-0gMczVDBcxA-Pq6nlQC7zfeLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:bc:bf:40:13:8f:0d:88:38:cc:82:e9:d9:25:ba:a6:aa:3d:
92:db:f5:fe:db:28:b5:65:c6:a6:6a:b3:05:27:db:2e:ae:4f:
f3:96:9f:78:b6:f7:88:0d:38:6c:fc:b1:63:2c:09:e1:e6:26:
de:e6:0d:e4:b3:2f:4f:ca:f3:84:6c:ab:e8:af:b0:07:bd:c8:
56:df:bc:d8:f9:90:aa:b4:5a:24:be:67:51:6d:8b:cd:54:cd:
83:a5:a4:4b:46:d2:5f:96:60:ab:fc:4f:b5:9a:71:95:60:52:
59:f9:0b:d5:88:6c:6d:99:2d:7b:1e:be:70:7f:00:12:07:f1:
f0:bf:dc:5c:dd:b8:43:95:6d:b5:93:6b:97:13:4e:6e:20:14:
c6:39:f6:d4:a5:66:d7:26:89:4a:e6:ff:a6:1d:1c:ae:62:a8:
35:7b:0e:fb:00:13:31:f8:62:85:6e:fb:82:10:2f:90:0e:d6:
0c:2f:54:45:c8:8b:a0:40:e3:b1:dc:68:c2:64:d4:a1:4e:46:
f6:b5:8e:33:47:c9:e8:17:66:57:fa:ee:c3:3d:27:9b:33:e0:
63:d1:ea:bf:89:b5:28:21:8a:27:9d:76:4f:4f:ad:1a:c0:21:
24:ce:f6:34:8a:08:43:cc:bd:14:6d:63:93:c3:3f:a5:9e:6c:
0a:42:a4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:35 2026 by rpki-client