Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json)
Hash identifier: 5b6gKcjMH8MaAcx0unVuOTSvOwDIoKyxXrur0mJxCtE=
Subject key identifier: F3:70:24:37:45:1E:7E:A3:5C:3C:E1:E8:C3:62:84:9F:99:69:FC:CE
Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Certificate serial: 019DA378A095BCC87BC2EF0E607A4F570ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
Manifest number: 18C4
Signing time: Sun 19 Apr 2026 02:01:24 +0000
Manifest this update: Sun 19 Apr 2026 02:01:24 +0000
Manifest next update: Mon 20 Apr 2026 02:01:24 +0000
Files and hashes: 1: 2P1GYD166nihkwScz5T2PnxUNBc.roa (hash: kpyKepByfDU6eMI6BwB2mHLR2Ws+hOGxFPcFrKdltdw=)
2: 3C-MFf4CxJMdsuA2xUMbeT95cFQ.roa (hash: l72WNVI7l9ZF7eo8/aRUo3EuE6KrjKZ6m4xqm9jc1jg=)
3: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: GFWpY6k8oJ3C9ob6YXgeIcMoZY5JncxE5qScIS3pHPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:a0:95:bc:c8:7b:c2:ef:0e:60:7a:4f:57:0a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb
Validity
Not Before: Apr 19 02:01:24 2026 GMT
Not After : Apr 20 02:01:24 2026 GMT
Subject: CN=f3702437451e7ea35c3ce1e8c362849f9969fcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:92:1e:ab:21:3f:4b:4b:f2:15:f6:da:8d:
64:2d:15:f0:01:cf:c0:ee:ea:72:3c:df:7d:01:3a:
47:f6:81:64:c2:d9:38:50:ca:47:ac:36:01:6e:a1:
bf:40:7c:d3:88:44:da:9b:87:cf:a1:db:e8:27:83:
94:67:a3:cc:98:61:38:13:aa:71:bd:6c:fc:77:cc:
18:9c:89:77:60:45:a6:a2:25:ee:1a:d0:0c:b2:0e:
2e:a2:66:67:d2:e1:b6:5b:4e:e2:7d:57:77:af:0d:
ef:35:30:2e:75:b5:66:79:6f:1d:00:60:84:88:b1:
31:5f:d9:80:75:2f:10:13:8a:ca:7e:c5:5f:40:cd:
89:06:5e:85:ed:df:03:32:a6:ad:23:50:5e:8c:79:
01:4e:d8:f3:cd:2e:32:f8:0f:71:03:5c:e8:36:4e:
c0:b0:8e:6a:ae:f9:77:f9:ce:46:09:20:ad:ab:56:
d1:67:4e:54:d8:a2:48:5f:19:61:8b:72:69:59:b0:
37:ab:ab:a6:3b:21:86:78:62:96:32:a2:79:a6:2c:
fc:dd:db:2f:c7:a6:5d:72:9f:40:5c:ea:28:9d:83:
1d:20:90:3c:a0:10:6e:ad:6e:b1:f5:d2:f1:44:fd:
f9:78:ca:03:04:67:de:c4:ad:9d:1e:4c:20:16:cf:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:70:24:37:45:1E:7E:A3:5C:3C:E1:E8:C3:62:84:9F:99:69:FC:CE
X509v3 Authority Key Identifier:
keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:28:bb:18:81:45:99:dc:74:e5:98:68:66:38:48:d9:a1:fd:
34:52:5e:07:16:d0:5d:52:7f:34:ba:90:69:bf:81:22:79:72:
7e:85:4f:6f:c6:b0:b6:a9:f8:a1:27:61:cb:e8:5d:bb:a8:ed:
ec:bd:31:4a:71:fe:60:df:2a:72:1b:97:fc:b9:56:63:29:ab:
ff:fe:21:7f:aa:48:86:e6:62:00:71:ba:42:46:a3:e2:db:e7:
1b:fb:c2:d2:20:8d:06:db:e1:a0:40:fd:23:1d:6b:29:85:2d:
a7:71:ee:4a:c4:0a:2d:0e:42:3f:b8:57:3a:ce:97:c6:67:d1:
ad:0c:03:81:4b:24:b4:7c:ce:c4:01:51:8c:ab:1a:25:6c:15:
cc:f3:36:cd:b2:a9:8f:5b:ec:25:bf:49:a3:21:8c:66:e8:2a:
71:8e:b9:a0:b4:15:eb:d5:f6:78:19:08:5b:13:8c:02:96:32:
fc:02:14:ae:d4:83:3b:63:05:08:ea:45:94:ea:8e:2a:32:61:
7e:ec:7a:47:c9:d8:06:e1:26:8e:72:c8:5a:45:6e:41:d0:26:
b6:65:65:ce:7c:ee:ff:79:bf:6f:b9:7b:04:df:7b:dc:4e:56:
1b:7b:f9:53:0c:63:1f:e6:7a:2a:4c:32:0d:e5:52:ff:68:92:
63:67:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:25:52 2026 by rpki-client