Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: Tx9xgO8Undyh/QbV7Vr07TLjDxOoXu8pfzlC2SasyMM=
Subject key identifier: 6A:3E:0B:70:16:60:2C:DC:EE:B6:90:03:53:5C:39:54:4D:65:42:A9
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 019D9B19DD5EFC97DED7A38A822F68AF35A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:00:56 +0000
Manifest this update: Fri 17 Apr 2026 11:00:56 +0000
Manifest next update: Sat 18 Apr 2026 11:00:56 +0000
Files and hashes: 1: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (hash: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ=)
2: sudPoVqFg1PQZP7-xy4v565d_SM.roa (hash: tABC2SMeyK75v3oh2kumS0Pn8iv5DPrW8wlj3JIpyAM=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: ynOXEymOS9Fln8D9jH0bRSeDPXYydUZgEh5KzOKpGCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:dd:5e:fc:97:de:d7:a3:8a:82:2f:68:af:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Apr 17 11:00:56 2026 GMT
Not After : Apr 18 11:00:56 2026 GMT
Subject: CN=6a3e0b7016602cdceeb69003535c39544d6542a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:42:fb:1c:c2:da:22:b0:95:de:da:1e:32:
7e:2e:f9:26:20:b9:7a:ae:ab:4e:cc:d9:2d:e0:86:
7c:28:63:ff:5a:3f:94:8a:14:ea:ed:86:c9:cd:f8:
af:c5:e7:24:90:b4:0c:59:00:98:7e:32:a1:92:e5:
59:5e:ef:0e:91:6c:1d:89:87:6d:68:3c:2a:60:04:
8e:93:2a:47:34:74:fb:ea:01:ac:91:82:02:9c:e0:
4c:be:89:f3:9a:da:fa:b1:86:f9:8a:e5:1f:80:bf:
9f:57:af:9d:15:ec:ab:24:d5:77:51:c8:40:48:6f:
eb:9b:61:be:c7:b3:17:73:7d:10:b5:07:2e:d7:1c:
55:28:8a:36:42:af:6d:be:4f:09:f8:63:4f:9a:dd:
1d:e6:07:83:8c:ce:24:a2:59:f9:d5:56:c9:ce:a8:
79:64:10:bf:63:88:ff:14:e1:34:43:95:3a:b4:8b:
df:65:fe:8c:8b:d1:3b:56:e8:d2:4a:19:5c:5e:77:
fa:fc:7c:c1:2f:14:15:3d:d7:54:69:5d:84:41:8c:
cb:d0:3a:86:bc:e9:dc:92:dd:90:cf:e1:8e:04:96:
25:07:cf:d6:ba:15:7b:51:44:44:46:d0:b1:b3:ef:
be:7e:0f:b8:86:74:bd:ef:9d:13:ce:70:04:fd:82:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3E:0B:70:16:60:2C:DC:EE:B6:90:03:53:5C:39:54:4D:65:42:A9
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:43:db:f9:08:1c:a4:fe:7f:5c:49:ef:a0:c9:9a:87:fd:0d:
cc:57:ee:60:50:2c:4b:42:cd:43:eb:16:21:a2:ab:77:d4:53:
38:7b:0c:2d:93:b7:96:dd:97:fe:01:4d:c3:85:fa:44:78:f5:
30:70:3f:b0:3f:e6:14:1b:cc:04:fa:f6:aa:06:f2:e4:62:fc:
7a:ab:6b:f2:3e:22:ee:c2:e2:a8:17:4f:76:93:e3:b8:39:c1:
f1:30:97:df:40:df:05:1e:32:2b:f3:33:56:fb:e5:36:c6:96:
f5:f0:bb:54:7f:af:17:d5:4a:ff:ee:42:23:a0:59:9f:17:97:
1b:b8:0b:0c:9d:a6:b0:4c:16:f4:44:bf:38:5d:af:e1:41:c2:
db:b9:ab:5f:8a:16:bd:dd:b0:06:0b:df:e4:a7:f1:15:b4:f4:
ff:97:b2:a2:65:3c:43:33:db:e9:51:a4:ed:3a:31:b0:c1:11:
d4:53:dc:fe:a9:3d:ef:33:ab:91:aa:61:d0:ec:e8:8c:78:d0:
ce:75:62:2d:2a:d4:80:d6:69:b1:90:09:44:a7:df:67:c9:37:
36:c4:f4:4c:35:a5:ed:7f:9a:9c:12:b9:9a:0d:9e:5f:0c:4e:
f4:e7:b3:65:cd:20:8b:46:76:65:5e:1d:a0:89:79:92:b3:ef:
9c:b2:d4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:23 2026 by rpki-client