Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft (raw, json)
Hash identifier: hOI41PF7J+npjwpwcBQGOLxMyKvs7REINCOCBq4wmC4=
Subject key identifier: 5C:FA:3C:66:A8:ED:6A:0B:39:88:0A:19:9A:94:F7:CD:10:97:B1:34
Authority key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Certificate issuer: /CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Certificate serial: 019D9AAC27C21DD22D9AF73584A24895359B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
Manifest number: 03CD
Signing time: Fri 17 Apr 2026 09:01:06 +0000
Manifest this update: Fri 17 Apr 2026 09:01:06 +0000
Manifest next update: Sat 18 Apr 2026 09:01:06 +0000
Files and hashes: 1: BWVL9f-KpOOHJHITcd_zmQga4BM.roa (hash: 16slF0zkT/3GuOWybhDOTweAZ519QDUn0ORtD9/qMi4=)
2: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl (hash: apy1CHlTYrYLwPo7v5r12mLN/HrVpNSOqkzXxiu33Wk=)
3: wFIGK-hJfwnzYHOy-0zpMlYIwX8.roa (hash: ijX/47c/1yaEzAjtMYS0nchNRSTG2HHJG2gdZxBcrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:27:c2:1d:d2:2d:9a:f7:35:84:a2:48:95:35:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Validity
Not Before: Apr 17 09:01:06 2026 GMT
Not After : Apr 18 09:01:06 2026 GMT
Subject: CN=5cfa3c66a8ed6a0b39880a199a94f7cd1097b134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a2:c5:2c:69:cf:da:e0:72:6e:10:d9:34:e3:
62:9d:96:ce:c9:e6:f0:b1:be:e7:9d:e4:31:d8:2f:
47:ee:05:dd:b7:15:9c:4f:d3:c6:f5:68:a3:1d:77:
b6:3d:24:6c:a3:3c:10:19:41:ee:67:40:35:3a:28:
96:70:bd:21:9d:4c:39:f3:49:22:c7:a2:f7:95:ce:
8c:23:38:38:e9:a3:42:a6:93:81:c7:56:68:4c:77:
ce:9d:a0:4f:22:50:37:91:fb:ba:0b:5c:93:f9:6d:
54:ba:bc:81:29:9d:15:72:d4:7b:f6:e0:3b:49:12:
b1:b0:0c:28:ec:7c:7c:fa:6a:87:10:dd:aa:c7:a3:
8c:fd:18:b7:a9:cc:2d:91:9f:19:73:e2:66:b0:a5:
d2:d0:7c:e4:be:c4:f7:cd:ee:9f:1f:d3:2a:16:08:
80:6a:f4:52:8d:84:25:1b:4e:bf:24:fd:24:ee:6f:
0a:99:6e:30:df:c9:56:b0:fc:70:da:f7:1f:de:17:
8c:1a:78:21:ac:73:93:6f:4d:5a:95:7e:ee:db:db:
23:d6:11:f2:c9:af:44:12:23:f9:95:61:1e:23:37:
cb:70:90:0e:e6:12:53:1e:16:7f:7f:cc:88:13:7a:
d0:6b:b0:1a:29:f5:01:66:13:7d:b6:ca:ce:48:41:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:3C:66:A8:ED:6A:0B:39:88:0A:19:9A:94:F7:CD:10:97:B1:34
X509v3 Authority Key Identifier:
keyid:45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b0:14:12:37:65:b9:97:82:0f:70:d3:33:27:2f:b4:2a:e9:
ab:c2:f9:0b:9d:16:e2:02:37:7c:d7:00:e3:2e:79:17:8b:8f:
92:d1:2d:e8:75:b5:8f:14:9d:05:63:02:20:12:89:cd:7d:10:
26:8e:11:6d:d4:fd:d5:d2:f1:1e:74:81:69:f8:e8:29:fa:22:
cb:b6:b1:64:83:d5:be:4c:33:55:fd:64:f4:a4:2e:16:82:75:
a6:38:3a:74:66:12:c8:1e:80:53:b0:32:f7:2e:71:e0:97:15:
7f:fa:7d:e7:43:5f:54:2d:8d:93:60:1e:e9:9e:15:d2:f4:57:
df:b7:28:a9:75:55:ea:5f:f7:9d:ab:94:ad:df:4f:b3:3f:da:
a9:f0:9b:70:51:c0:ab:44:3a:ff:09:a0:e0:e4:83:79:ac:a6:
e6:9c:60:4c:d0:0b:ec:f2:8f:ab:5e:5a:77:c3:eb:a5:91:fd:
ac:8b:08:08:c0:d1:cb:6a:9a:0a:76:59:3c:d4:ff:0f:fb:5d:
26:c5:9d:2f:24:ad:dc:c3:0d:a7:fd:a6:a2:26:79:fd:05:6b:
a4:b4:c8:9c:12:bd:07:7a:d9:24:b9:9c:8b:c4:b0:ef:87:4e:
fb:02:59:c2:89:53:2c:44:3a:e6:97:f9:99:a8:ef:f4:c3:5e:
ba:b9:94:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:12 2026 by rpki-client