Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
File: sZQPAAmW6_0tq3HEacxR7ogbP14.mft (raw, json)
Hash identifier: cHdY4b5GUJ51sBmyzpIT/ZRbOBD/IcmQ+TzhD1k/n10=
Subject key identifier: CD:1A:C8:17:70:3E:49:A9:6A:ED:0F:37:8F:5F:D6:65:F4:3B:88:50
Authority key identifier: B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
Certificate issuer: /CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Certificate serial: 019D992B797B7AA22EB58CD054FAAA25BD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 02:00:56 +0000
Manifest this update: Fri 17 Apr 2026 02:00:56 +0000
Manifest next update: Sat 18 Apr 2026 02:00:56 +0000
Files and hashes: 1: _innNg-W71__tEWxWqoYCVwYPLc.roa (hash: UBsc5lS9QgRC7N6kPNc37ofHV3RHdTM0d9hSw9Z1W3o=)
2: aprsdgtKeFBW6dMDyLpO37V7sYU.roa (hash: 04ZHgWeGk6onOBVuETq5g7lFyguxKvrGp3YmU7j5C7o=)
3: sZQPAAmW6_0tq3HEacxR7ogbP14.crl (hash: 2hb4O5H2qdmfw6QhFdsmRqC9C8+qVHJyaldY30TVfuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:79:7b:7a:a2:2e:b5:8c:d0:54:fa:aa:25:bd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1940f000996ebfd2dab71c469cc51ee881b3f5e
Validity
Not Before: Apr 17 02:00:56 2026 GMT
Not After : Apr 18 02:00:56 2026 GMT
Subject: CN=cd1ac817703e49a96aed0f378f5fd665f43b8850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:f2:ba:a7:2e:f5:9d:17:a4:74:c7:b2:15:
3e:81:1a:c6:68:5f:bb:6f:15:54:58:0a:d3:8a:90:
2b:19:cb:e8:65:4c:0c:41:3a:6c:48:96:c7:24:c9:
af:21:63:36:9f:c6:63:44:d7:e4:e2:7f:04:1e:e6:
9c:32:4b:4d:d5:93:ab:93:5b:cb:a6:62:10:5c:23:
9a:6a:b2:4e:bc:49:36:aa:b1:79:d3:7e:74:61:dc:
a5:d1:16:61:a4:ca:9c:70:f8:be:90:84:51:81:3b:
88:00:60:d6:2b:d4:8b:51:a2:97:67:d2:80:5b:f3:
87:45:95:c2:7b:32:ca:ae:7e:3e:d5:72:21:3f:88:
60:41:54:13:d2:20:21:8e:4d:dc:ae:cd:14:52:5f:
a2:29:da:91:a7:1b:e9:8c:33:02:4b:47:ec:57:33:
b6:29:b4:79:8e:8e:1f:62:6e:b8:dc:90:d6:8e:db:
ab:77:cc:80:e0:1e:2f:fc:0c:7e:84:68:eb:91:0e:
6f:a3:f3:02:e4:ed:89:6b:20:c1:57:9b:83:5d:e8:
5e:7f:03:f4:66:bf:a8:89:66:39:aa:a0:da:fb:9d:
38:cd:ac:e9:7c:a6:80:e5:a8:12:81:99:e2:d0:c7:
72:08:8d:24:2f:27:4e:b0:c5:90:9a:6c:22:e3:a3:
56:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1A:C8:17:70:3E:49:A9:6A:ED:0F:37:8F:5F:D6:65:F4:3B:88:50
X509v3 Authority Key Identifier:
keyid:B1:94:0F:00:09:96:EB:FD:2D:AB:71:C4:69:CC:51:EE:88:1B:3F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZQPAAmW6_0tq3HEacxR7ogbP14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c13d9-81d5-4cdb-a2e1-a5abb20d2462/1/sZQPAAmW6_0tq3HEacxR7ogbP14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8f:a4:0b:a3:11:0c:e1:49:1a:d8:fa:9b:9e:e3:6c:62:fe:
b3:35:5c:f5:b5:d1:94:78:75:32:b5:21:77:4a:6a:e7:2b:48:
9d:f4:7d:09:d4:78:71:67:47:db:cb:85:9e:91:ac:2e:b6:27:
65:d5:14:c8:c6:14:92:48:c1:86:2c:9c:af:67:4e:4d:22:d9:
b4:aa:22:70:ee:13:c7:f8:31:bc:a4:26:3f:8f:2c:f8:ae:63:
39:f8:59:7c:e9:33:ab:0d:c9:8c:80:20:8a:d9:89:7e:c3:dc:
2b:41:a6:cd:72:86:be:02:80:b7:6c:ed:74:45:56:6b:04:ac:
76:49:fa:b5:ba:fd:7f:c3:0a:6f:f9:c8:68:71:d3:c5:e5:96:
2e:50:43:65:26:90:aa:8f:35:53:19:fb:20:9b:16:74:d0:1e:
9d:1f:24:23:73:43:b0:6a:f6:44:bb:9d:df:1a:52:3b:a6:ad:
ae:dd:5f:7d:46:84:22:38:3c:74:9b:fa:99:01:1d:3a:5e:12:
ec:a8:11:38:89:0b:53:9c:b7:6a:74:b1:7d:84:1b:33:81:dc:
30:b3:8b:82:1b:a3:7e:0f:de:2d:09:84:b2:4e:86:6c:3f:35:
18:8b:a8:60:d4:95:53:17:ba:c5:5a:fd:27:fd:a1:af:0c:85:
01:c2:87:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:06 2026 by rpki-client