Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: Hsmt0Xym4Y6i7+zsrqOHRjeVeSOcLFsAWKqYNda+gtc=
Subject key identifier: 28:66:A2:02:14:67:F7:F7:FD:7E:F8:BB:2A:2D:BC:1A:08:24:61:63
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 019D9D7652EC4022629E347917DD4E9CAFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 22:01:10 +0000
Manifest this update: Fri 17 Apr 2026 22:01:10 +0000
Manifest next update: Sat 18 Apr 2026 22:01:10 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: VtFlBx3nBODKlYrbkQtDvVECoYLpjxQCWMTBih/Dp84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:52:ec:40:22:62:9e:34:79:17:dd:4e:9c:af:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Apr 17 22:01:10 2026 GMT
Not After : Apr 18 22:01:10 2026 GMT
Subject: CN=2866a2021467f7f7fd7ef8bb2a2dbc1a08246163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b9:1c:28:32:ce:09:dc:87:56:82:20:2d:b5:
b3:5b:97:da:da:76:1c:0c:98:bb:48:87:59:a9:90:
80:f2:3f:9f:2e:8e:12:a3:fe:6f:fc:4a:2e:4e:05:
d0:56:07:57:82:fc:b6:8a:3f:01:56:6f:eb:b4:4e:
e4:61:02:e8:59:38:da:de:28:6b:73:14:d7:8f:c7:
cd:fc:c0:9b:70:34:6b:08:5e:10:a6:d6:3d:78:c6:
a3:16:84:de:23:5a:8d:97:6b:aa:bd:8d:25:64:49:
0b:54:bd:f7:81:92:fc:39:3d:8b:7f:73:2e:64:e5:
65:df:5c:b5:6e:55:94:e8:0a:78:55:45:2f:d6:cd:
55:24:3f:52:e6:92:20:67:f9:67:c4:be:62:21:9b:
7a:d7:b5:13:65:45:de:14:14:b5:e3:cc:ad:73:12:
4b:19:34:4f:f6:db:ec:c2:e1:e7:9a:2e:44:95:fa:
f5:a3:a5:98:59:52:29:80:45:33:2a:fd:e7:c5:44:
e5:07:b3:a0:48:25:ec:8c:36:b7:cc:06:5c:c2:9b:
72:29:c3:46:5b:7c:c6:ce:85:4d:55:28:f8:e8:1a:
c2:92:4f:e2:47:10:01:3c:19:b7:6c:5a:93:25:b2:
99:f1:d3:00:3c:7f:11:65:ce:28:24:31:a5:ea:aa:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:66:A2:02:14:67:F7:F7:FD:7E:F8:BB:2A:2D:BC:1A:08:24:61:63
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:33:9a:3e:47:76:dd:63:da:a8:23:60:e1:56:5f:da:dc:14:
14:d2:6d:56:ed:4a:38:0e:6d:fe:c5:e0:22:f6:93:a6:01:1f:
cf:58:1d:ba:0c:13:b4:2c:9a:ae:9b:c2:e6:79:6e:4b:7e:d3:
af:ac:f6:87:82:72:df:d4:f6:65:6d:49:36:8a:29:8b:17:9b:
2f:04:0b:06:0e:e4:0e:a1:30:e3:1c:8a:2b:11:0e:09:e8:40:
1c:1c:a8:24:41:5c:ad:d1:96:75:e7:e4:8e:e0:1c:2d:d4:3f:
5b:49:0d:76:3c:33:20:dc:9a:e9:8f:4f:d4:5c:d6:bd:f3:21:
1e:8c:0a:e7:71:b5:e8:f8:99:f0:cf:14:0c:a0:c0:6e:cb:73:
cc:1a:eb:f7:c9:34:2c:77:41:ce:42:c0:d8:f9:60:2a:54:0c:
5b:4d:67:1f:c8:96:0b:bd:34:93:c2:f4:f4:17:6c:96:8b:8a:
50:65:56:de:a3:e3:bd:df:71:a7:12:9f:d4:ac:62:93:83:c3:
fc:af:42:3f:06:5e:29:cd:d5:c5:85:6e:19:0f:3f:11:0f:ed:
41:22:e2:97:4e:27:08:be:fa:c3:eb:d1:81:7c:de:a0:c0:5e:
dc:d3:54:d7:4f:17:da:6e:bb:0e:57:a5:43:c2:6c:fc:d4:7f:
f1:c8:10:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:35:54 2026 by rpki-client