Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
File: c_2uFQUEnkRtWw0USsyGDWwYFnw.mft (raw, json)
Hash identifier: AY38/uPhqtLrpArxOWJtFm4gNSK3n0Fz+qS6lSXws6Y=
Subject key identifier: 9E:12:1B:D4:E1:9F:30:30:F1:73:0F:C9:11:83:D4:02:A5:F5:67:8F
Authority key identifier: 73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
Certificate issuer: /CN=73fdae1505049e446d5b0d144acc860d6c18167c
Certificate serial: 019D999938937F4F0EECCE89205E8B001813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 04:00:48 +0000
Manifest this update: Fri 17 Apr 2026 04:00:48 +0000
Manifest next update: Sat 18 Apr 2026 04:00:48 +0000
Files and hashes: 1: TW2-9DzFOuohPs1xj6I1jkzuZzI.roa (hash: IdQKbJvB7AT8M3FZo1RjBrLT4XNU6TgjC9b0dCsoz+k=)
2: c_2uFQUEnkRtWw0USsyGDWwYFnw.crl (hash: /XVqj8ukstjlTu2gXCB7eEo+tOF2kPQFwotJ59wQ6dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:38:93:7f:4f:0e:ec:ce:89:20:5e:8b:00:18:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73fdae1505049e446d5b0d144acc860d6c18167c
Validity
Not Before: Apr 17 04:00:48 2026 GMT
Not After : Apr 18 04:00:48 2026 GMT
Subject: CN=9e121bd4e19f3030f1730fc91183d402a5f5678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:45:b3:88:f7:37:25:8c:b1:c9:e0:48:93:
28:54:b9:c5:e6:1e:f0:16:0f:54:74:eb:35:dc:2d:
e4:61:1d:4b:92:3c:b2:92:59:4e:44:e1:51:3a:b0:
8a:22:99:3b:25:f2:85:f1:a6:97:96:20:a4:00:ed:
b4:c2:50:3c:30:86:8a:26:e0:d7:d5:8d:1c:0f:db:
48:f1:4f:33:e5:80:f3:83:2a:ea:09:d2:72:9c:d2:
0c:05:74:f3:8f:54:92:da:cd:fe:b6:26:aa:9d:cf:
9e:cd:6a:eb:72:f0:fa:32:e4:78:8a:2d:55:01:54:
bd:53:0e:99:7c:84:ae:5c:50:da:9f:96:d7:50:fb:
b1:cb:25:85:6f:40:fd:fb:64:e0:66:c8:a4:d4:26:
43:be:3b:c6:26:dc:19:84:5a:7d:4e:00:88:7a:f8:
72:8f:a8:e6:4d:c1:1f:b1:17:45:d8:63:48:46:68:
e5:53:5e:a9:16:b9:64:f8:a3:7a:21:35:cb:dc:d7:
c9:ba:bf:a0:9b:5e:26:67:7a:7a:1b:17:d9:6d:0e:
32:d2:c1:05:38:48:1f:d6:f9:7d:1c:8b:96:5c:85:
ed:49:4f:d8:5c:a4:f8:c0:63:a2:b4:7b:63:c1:e6:
95:08:19:92:9b:ff:91:60:3c:b2:de:6a:98:e3:56:
23:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:12:1B:D4:E1:9F:30:30:F1:73:0F:C9:11:83:D4:02:A5:F5:67:8F
X509v3 Authority Key Identifier:
keyid:73:FD:AE:15:05:04:9E:44:6D:5B:0D:14:4A:CC:86:0D:6C:18:16:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_2uFQUEnkRtWw0USsyGDWwYFnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c3fcd9-00c8-436b-8c01-a5fea604ad53/1/c_2uFQUEnkRtWw0USsyGDWwYFnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2e:1e:99:39:c1:12:0c:07:b0:ba:c5:09:a1:37:0b:35:83:
69:5a:e3:bd:66:39:a8:cc:b8:d5:19:5d:f3:13:ba:89:48:b4:
51:93:f1:a5:9d:63:2e:13:1c:8d:c5:d3:d9:d7:27:ab:a0:7d:
13:53:24:a3:e2:59:06:1e:76:6d:fa:7a:95:b3:52:07:3a:a0:
1a:aa:71:88:1b:9f:fd:46:a8:65:0d:af:29:a6:70:49:d4:0d:
77:f9:f6:d6:0e:8b:27:d7:c5:14:50:b3:1c:ad:f7:8f:df:ef:
1a:cf:0b:d6:ed:50:81:5c:a6:a8:d7:11:3f:30:5b:f3:6c:70:
02:b8:6a:f1:71:52:c5:06:82:75:92:2a:a0:29:0e:fa:24:22:
02:19:f2:cb:53:f7:44:cc:fc:78:e5:33:0b:33:cd:76:e0:06:
ec:d8:61:2c:74:4f:92:26:2b:39:67:ba:28:b4:1d:55:c5:43:
a1:80:21:b3:e2:ac:23:95:cb:f0:42:64:c4:19:f2:21:d8:64:
48:0d:c8:1b:ea:89:a4:ab:02:e6:ba:30:2c:ea:7a:8d:e1:8c:
35:ab:4a:c7:c2:e5:71:96:aa:eb:7e:70:28:63:4c:d1:9a:ac:
58:9f:5f:a1:50:e4:65:7a:f2:d9:17:1f:39:fb:f2:fd:28:95:
36:f8:82:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:05 2026 by rpki-client