Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: DiAxc9DfU96QAyxlxdWdeRgyxdw8zlyURcRva401Okg=
Subject key identifier: 25:F6:6D:45:58:72:CF:0E:E8:72:90:24:C3:EF:BE:2C:91:9D:7B:4C
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 019D9A3E34D4189CA63C4CAD78805EBAD096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 07:01:01 +0000
Manifest this update: Fri 17 Apr 2026 07:01:01 +0000
Manifest next update: Sat 18 Apr 2026 07:01:01 +0000
Files and hashes: 1: hRQCi57thYOlY1i0Di_3OEU8RbI.roa (hash: CiJ/s78ir+15MqFOT5aaVIhr5Aw/xJZZ/G08VuU4cSs=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: Au+jITUjd6mp2drZPZCzMN22A+rP+FIx7Rx8oMTDXqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:34:d4:18:9c:a6:3c:4c:ad:78:80:5e:ba:d0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Apr 17 07:01:01 2026 GMT
Not After : Apr 18 07:01:01 2026 GMT
Subject: CN=25f66d455872cf0ee8729024c3efbe2c919d7b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:df:8d:bf:bc:3b:6f:5a:f3:9c:cc:64:61:
fc:93:58:55:02:89:d2:41:43:c3:0d:0f:f7:4a:81:
a7:94:24:98:97:8e:c0:1e:dc:98:32:1b:24:0c:64:
cf:7b:ab:33:39:d3:f3:61:98:33:63:ec:71:ff:21:
c1:ed:e3:b6:7e:0b:f3:21:99:be:9e:66:9d:7e:3b:
3b:1a:01:bd:02:01:fa:c9:14:be:d7:3d:29:7c:2b:
27:1f:1d:20:16:e7:d6:a0:06:79:48:f4:8d:7e:ed:
15:57:2d:e8:21:07:f8:57:a1:61:c9:22:66:f6:35:
e6:67:51:6b:91:4a:7d:d5:45:5b:50:a3:f2:13:7b:
18:24:83:ab:29:60:55:fb:de:93:ea:6b:46:b2:21:
94:fa:d0:b9:61:4e:0d:37:62:3c:0c:f3:9f:d5:8e:
0a:c6:05:e6:0a:f1:50:98:79:54:04:3b:33:ab:c6:
32:e4:19:43:18:96:2f:37:15:9e:63:bd:a5:4e:b6:
46:f3:9e:f8:7f:9f:36:c7:d5:8d:8d:7b:a9:03:a3:
7e:c5:fc:18:08:1d:14:64:c0:ea:a9:ba:3e:39:6c:
4b:02:fb:2a:e4:3e:4a:e5:ff:07:55:bd:b1:f6:53:
f4:bb:52:49:4f:e3:db:6b:8b:45:fb:fc:1f:f8:aa:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:6D:45:58:72:CF:0E:E8:72:90:24:C3:EF:BE:2C:91:9D:7B:4C
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:95:47:56:2e:3a:ee:c7:35:9a:e5:ab:eb:f6:f5:a0:43:c8:
9d:a3:e6:ba:f0:e2:13:c5:00:5b:9e:bc:1e:fb:a5:b9:38:81:
18:2b:f4:b4:65:63:8b:e1:8e:ac:d8:46:e6:85:83:25:c3:d7:
5c:eb:7b:88:a2:b6:ac:00:3e:0a:d5:e5:98:a5:14:eb:1f:b1:
8b:e9:4a:75:a2:ea:eb:fc:00:1b:cb:21:c2:4b:97:a4:11:3e:
8b:16:26:82:1e:04:35:32:fd:7e:3b:ec:9f:94:2c:77:cb:15:
8f:9c:90:8d:8b:30:94:f3:d3:4d:6a:e9:6b:1b:74:fb:39:5e:
7a:db:27:22:5d:14:b7:88:f8:1d:b5:a4:8d:35:3a:3f:9f:a6:
97:e3:ef:ce:c8:30:d5:9e:94:90:53:41:02:41:2b:2a:f5:f2:
f8:c4:e8:04:fc:4a:ff:66:e3:d3:6c:a5:25:41:4a:71:e3:13:
55:ec:11:64:cb:3a:6d:70:f5:0d:77:82:aa:61:2f:0a:de:2c:
1f:76:3a:07:4b:22:f2:a1:a1:c0:35:f1:dd:30:9e:c9:b0:fc:
c1:95:cd:a8:83:3f:44:c0:d9:b4:16:5d:c7:59:d4:54:d1:02:
b5:c7:32:78:b6:c5:05:a6:a3:29:ed:14:c4:1f:93:3a:66:e9:
e3:5a:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:49 2026 by rpki-client