Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
File: mNZvua2ttqkFe_YKqj_1LGZUBBg.mft (raw, json)
Hash identifier: cNlggiCpXTA/KbzlMW1yW7i/twHaAORrYUQ7vxJvxd8=
Subject key identifier: 22:93:09:83:E6:4F:6D:FC:FF:C4:2A:B4:13:3B:EE:E6:41:BB:AE:EF
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial: 019D9AE27F1E47BA750434883353C6560F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
Manifest number: 0E1B
Signing time: Fri 17 Apr 2026 10:00:28 +0000
Manifest this update: Fri 17 Apr 2026 10:00:28 +0000
Manifest next update: Sat 18 Apr 2026 10:00:28 +0000
Files and hashes: 1: mNZvua2ttqkFe_YKqj_1LGZUBBg.crl (hash: sR4hzlA00KMjMMAqV09DW19zfgq4P7/QdY3HuuiL988=)
2: yl0eDZjur4I6T_pOkjcamXDbAOU.roa (hash: 03g8niCNoaSntJSjiSHpf+bPzeoFe8eHF/PalLWvuyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:7f:1e:47:ba:75:04:34:88:33:53:c6:56:0f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Validity
Not Before: Apr 17 10:00:28 2026 GMT
Not After : Apr 18 10:00:28 2026 GMT
Subject: CN=22930983e64f6dfcffc42ab4133beee641bbaeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:41:e7:38:cd:16:22:f6:5b:b7:33:ad:d5:
dd:65:b8:7d:a5:92:70:d3:e8:f9:90:43:21:2b:aa:
70:83:dd:0b:af:7e:b9:04:96:df:e2:a7:55:98:73:
7e:38:e8:a8:97:4c:a8:92:22:63:a1:59:ad:2b:9e:
cf:1a:05:91:80:2b:91:10:3e:92:c9:56:07:d4:d5:
79:af:50:a8:8f:94:36:0f:4b:69:9d:38:40:d1:7c:
03:0c:72:57:a7:68:04:97:01:27:fa:69:44:5c:4c:
da:d2:0b:2e:1b:1c:48:2e:29:71:27:69:5d:2a:96:
0f:07:09:be:bc:09:5f:c8:3e:9a:eb:7f:55:82:36:
9c:da:76:6f:cc:3c:37:41:db:83:70:52:0e:41:26:
94:07:e6:88:e1:f8:63:6d:8e:ed:f9:96:31:7b:67:
b4:3a:67:c1:5f:13:12:f9:3a:90:45:5c:e7:20:fe:
fc:fe:31:ab:ae:87:23:1e:b9:3d:69:82:56:c8:08:
d8:44:e7:00:00:e5:4f:b7:d5:e5:ab:2f:92:27:d3:
e1:56:d8:71:b1:7d:eb:45:18:e6:3e:41:38:3a:d5:
3e:75:ca:b8:d8:ba:67:2d:7e:8e:36:25:c7:01:e7:
86:da:f2:58:7c:f7:34:cb:3f:ce:f1:18:da:04:f6:
2c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:93:09:83:E6:4F:6D:FC:FF:C4:2A:B4:13:3B:EE:E6:41:BB:AE:EF
X509v3 Authority Key Identifier:
keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:66:69:8d:0c:bb:e2:20:f1:df:31:5c:c0:48:19:a1:80:a3:
b2:5d:52:c6:d6:b3:8d:9b:ce:5c:ab:0f:87:95:d7:ab:83:27:
2c:7c:5c:dd:6d:c1:0c:d5:5a:4f:9f:12:8b:e2:7e:13:a9:d3:
58:3a:3b:c8:95:b4:d6:5e:3d:06:94:fd:35:28:d9:78:78:82:
a1:ed:f7:4c:9d:35:10:27:3e:c8:4f:8d:0d:0c:6a:e8:4b:b6:
f8:d4:d9:0d:f3:3e:e7:5f:73:34:8f:cd:e5:d2:1e:ff:77:d3:
60:e7:cf:1d:5c:fe:be:41:4a:69:dd:45:9a:e1:da:dc:45:df:
c3:78:b8:e4:23:cd:42:35:9e:c8:7f:39:eb:6d:44:8f:23:0c:
f3:ac:8e:ea:b4:ea:b4:16:d7:1e:e3:e5:23:42:fd:9c:41:e8:
69:04:56:72:e1:bf:85:9a:56:18:4a:05:89:16:c2:72:54:49:
e3:bb:ac:4d:b5:f1:1f:f5:13:79:bc:91:26:7b:12:49:b4:aa:
50:ac:37:d7:53:cf:f8:d0:0f:3f:e2:40:a9:9b:9f:a4:cb:0f:
ef:c7:86:15:d9:a7:28:da:1c:ab:20:72:63:79:ae:fd:1c:4e:
c4:46:31:50:69:56:dd:83:8d:be:b2:ad:6d:cd:68:b4:15:c0:
69:a2:f3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:20:34 2026 by rpki-client