Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier: yd9XNMvU49CcGJ+H0WoNpVwhmGeskxJXPK0YrUpiC4w=
Subject key identifier: 52:0F:C5:59:F3:41:84:3D:A6:37:53:2C:1B:64:F2:9B:96:8B:96:94
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial: 019DA45406A58189BE235BF2E6A457337064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number: 18C6
Signing time: Sun 19 Apr 2026 06:01:03 +0000
Manifest this update: Sun 19 Apr 2026 06:01:03 +0000
Manifest next update: Mon 20 Apr 2026 06:01:03 +0000
Files and hashes: 1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: v6RcXLMD8/87vHhdzsPjVuePTAo6vHO3S6wCUxpqBDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:06:a5:81:89:be:23:5b:f2:e6:a4:57:33:70:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Validity
Not Before: Apr 19 06:01:03 2026 GMT
Not After : Apr 20 06:01:03 2026 GMT
Subject: CN=520fc559f341843da637532c1b64f29b968b9694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:e7:3b:93:07:89:09:35:43:f1:78:04:8c:
e5:8c:bd:30:37:2c:42:46:3b:f3:06:eb:06:6e:27:
bd:17:2e:24:5b:b3:1c:f0:65:8d:8a:d7:04:68:e5:
12:be:ee:c4:29:61:b5:51:ab:da:70:1a:d9:2d:09:
a6:56:d7:a8:1b:de:04:82:a4:0b:0b:f2:d0:7e:6c:
06:5b:98:6b:a3:dd:d3:66:9f:1e:36:24:14:21:44:
98:92:d8:b8:75:10:d6:c6:27:7f:1b:e0:51:04:a6:
c8:8b:59:88:aa:ba:4b:56:7a:30:e9:6e:0b:62:89:
0c:04:61:f0:c2:de:a2:a0:09:29:b6:29:33:0c:5f:
92:cd:91:bd:f5:c0:42:3e:5b:7d:e9:6f:4b:48:d0:
82:00:49:18:a7:60:fa:a7:c5:04:37:a7:8d:64:a7:
2a:6d:39:61:a9:f0:72:e3:b6:03:18:0c:8b:59:dc:
8b:c8:e4:c9:78:5a:05:bc:df:1a:e8:c3:ef:5d:da:
6e:6b:a0:ad:31:ff:4b:fb:58:ee:96:75:31:85:a2:
84:bf:02:e4:0f:d0:87:dd:c0:14:6a:82:eb:78:67:
8d:2f:ee:5b:6d:55:bd:bf:98:73:54:ed:2b:b9:57:
fa:e8:b0:d5:db:95:28:e1:91:65:ef:b7:be:f9:2a:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:C5:59:F3:41:84:3D:A6:37:53:2C:1B:64:F2:9B:96:8B:96:94
X509v3 Authority Key Identifier:
keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ea:3c:3c:b3:20:81:b1:04:e6:1c:33:fc:52:26:28:f6:7b:
de:25:db:46:23:f0:b0:30:69:41:56:31:5e:fc:78:70:e5:41:
97:c4:08:ec:d8:3f:e2:5d:05:7d:a8:3a:5f:9a:9b:2a:0c:17:
77:7e:ae:36:e7:3b:51:f4:93:ad:7a:d5:91:62:b6:e1:de:a3:
4c:a0:63:08:0d:7f:e6:f1:58:d7:5f:c1:1c:63:ef:c0:df:ac:
18:f7:17:c1:44:c6:77:e0:9f:92:d9:bc:d0:72:27:63:ae:02:
9b:e9:e2:c9:73:31:f5:c3:a2:09:48:4b:5c:14:8a:d4:0b:90:
12:2b:e2:e1:99:f0:00:82:71:06:91:d9:97:93:1d:66:4d:0b:
fa:38:a7:da:34:1e:63:3f:2d:97:1a:6b:a7:a1:1f:7e:85:d3:
0f:28:31:3d:72:f6:05:95:ea:02:65:9a:7d:44:23:6c:41:a7:
8b:60:7a:a5:96:fc:10:c7:df:3a:9a:49:26:6c:6b:55:3c:a1:
c2:8e:cb:32:4c:c7:a5:92:a2:09:ea:7d:39:67:10:3e:e6:47:
ed:0b:80:92:0d:68:e7:59:22:83:74:29:32:1c:52:9c:d2:88:
13:0a:c6:fe:01:e4:c6:25:17:74:13:8e:a8:69:1c:7a:62:19:
88:cd:e5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:20:55 2026 by rpki-client