Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: u6kXIJ5dAH28v94T1D7NicwjdSsZcQ91bJPw5Y8+seQ=
Subject key identifier: C5:6B:D1:A9:35:F9:76:76:FF:ED:50:F2:BB:3D:AF:0B:CC:2D:89:C4
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 019D9886C5DA57BD3BEB47E18CC3B4F5CA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 12AC
Signing time: Thu 16 Apr 2026 23:01:02 +0000
Manifest this update: Thu 16 Apr 2026 23:01:02 +0000
Manifest next update: Fri 17 Apr 2026 23:01:02 +0000
Files and hashes: 1: bAqvaOAbS_zyWG89lZX643VSXiY.roa (hash: aCU8YvRzFkWCl+qdiCxPi41xQwSF9YId56RdRoh8KaQ=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: C7AWLqD93uLX/s8bGe9OI88+DUmVU/uh7+Hiyj4DZjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:c5:da:57:bd:3b:eb:47:e1:8c:c3:b4:f5:ca:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Apr 16 23:01:02 2026 GMT
Not After : Apr 17 23:01:02 2026 GMT
Subject: CN=c56bd1a935f97676ffed50f2bb3daf0bcc2d89c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cb:e5:f1:ba:34:e1:8f:4d:6c:28:15:12:d1:
5b:4d:d8:45:fa:b1:1c:68:ad:46:a7:56:81:b9:e0:
ae:7b:20:02:c1:67:3d:da:6a:93:36:df:a6:86:21:
a0:52:95:33:bc:17:96:d8:9f:24:78:50:67:8e:e1:
0e:24:cf:05:c7:ec:67:3d:05:e3:96:e6:5a:f3:19:
bb:54:27:63:14:a3:30:e1:fb:e3:d3:6c:84:14:f4:
2d:75:07:9e:e8:45:1e:72:88:9b:b9:50:aa:2c:58:
69:f6:7d:09:da:46:1b:92:14:8b:79:32:a4:5c:7c:
12:69:80:7a:6c:52:56:8d:e6:66:31:5e:74:7e:a5:
c0:28:09:82:f9:d8:32:33:34:31:a3:2b:57:e0:89:
a4:ac:c9:40:10:dc:d5:be:f1:22:6b:a1:c8:c9:ca:
eb:a9:ba:8c:48:56:1f:ea:d9:75:3b:0b:33:76:5e:
fa:b7:7b:ca:e0:b1:5c:85:35:c8:2d:2e:90:bf:97:
48:b6:4f:d3:ac:c0:fc:76:ec:2a:aa:1c:35:9a:70:
8e:c7:2b:7b:9e:06:46:50:50:19:90:d4:8a:86:8b:
15:4f:24:7e:10:7a:df:de:41:db:e3:c5:88:06:f5:
e3:b7:9d:16:4e:97:f3:30:6b:7f:f4:77:21:3d:20:
6e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:D1:A9:35:F9:76:76:FF:ED:50:F2:BB:3D:AF:0B:CC:2D:89:C4
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e3:49:96:8a:7d:10:97:b1:ce:e3:81:b2:f1:9d:c5:45:dc:
dc:51:86:d7:67:22:11:50:4e:a8:78:e6:1c:b6:0d:6d:0b:bc:
f5:6f:b5:f9:bb:c0:30:23:ae:7e:80:bf:6a:42:69:06:27:7e:
c9:29:93:51:86:80:e6:fc:57:97:53:d1:47:55:44:3e:c0:8e:
eb:94:a1:83:46:7f:63:9a:68:56:4c:b5:70:dc:ac:56:7d:1d:
6e:07:49:84:f3:b9:10:94:7a:05:bc:56:2a:3d:81:d7:bb:bf:
74:bb:8a:c0:2b:b0:94:e2:c5:48:e3:b6:0d:dc:1b:72:2e:cc:
53:9b:00:35:da:31:98:43:4a:94:32:b0:19:f5:d2:ed:b5:da:
bf:f9:b7:c8:72:24:3c:74:57:a1:0c:f5:12:6e:4a:f6:16:d4:
79:b7:31:49:37:4c:dc:0b:16:7b:17:bb:aa:3f:c6:0a:99:80:
6d:9b:13:46:d4:df:da:2f:b0:a4:37:fe:d8:80:f0:ed:a2:fa:
59:65:91:cd:9d:99:d1:1b:af:04:0a:90:39:23:90:95:25:45:
ab:70:99:8b:03:9b:6a:af:34:ef:a4:71:73:37:10:60:05:43:
e9:5d:3f:c4:0f:4c:af:b3:b6:c3:4f:7f:5e:c3:86:47:13:b8:
8e:83:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:27 2026 by rpki-client