Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier: O2Zc0wR5c2kljgnwnAEyMNnCnGJeaqQGpUeXwWfTBvg=
Subject key identifier: E2:CD:C7:F7:D0:3D:B7:E1:74:07:AA:89:69:B3:D6:CF:BA:7D:FA:03
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 019D9BBE610471069FED73DD4271FCD8D6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:00:38 +0000
Manifest this update: Fri 17 Apr 2026 14:00:38 +0000
Manifest next update: Sat 18 Apr 2026 14:00:38 +0000
Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: nC7+7uZ9wr6rGGU9/JXw7xWToAq/rE/As8v72U6Nxq0=)
2: uOT6tJlrkH7uNore0SwrHv6B2q8.roa (hash: sj7kmuH/7FdqL+TtQaRY1OsxURdzt9SlOSUYNlEq6iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:61:04:71:06:9f:ed:73:dd:42:71:fc:d8:d6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: Apr 17 14:00:38 2026 GMT
Not After : Apr 18 14:00:38 2026 GMT
Subject: CN=e2cdc7f7d03db7e17407aa8969b3d6cfba7dfa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:a6:ab:71:ee:aa:b5:72:da:22:9d:48:28:
ed:5d:34:73:0a:52:ee:4f:51:24:f4:fc:22:49:e3:
f8:5f:97:eb:4c:d7:00:e6:95:54:ee:fb:2b:47:e4:
bf:8e:53:57:4d:6a:d5:9e:74:ca:73:9f:31:96:9f:
76:01:20:f3:19:14:51:b4:02:55:7b:2b:d8:ca:c6:
a2:42:f2:d1:5d:d6:02:51:c6:5e:f8:fb:f3:af:cf:
39:36:97:b8:e5:79:32:58:f0:8c:34:75:57:7f:01:
ae:d8:03:ed:e9:62:f2:97:f1:6e:3f:16:67:0e:4b:
f7:01:f5:83:f3:ac:a3:a9:cc:26:ba:87:35:26:79:
df:d4:95:d6:fa:d0:f6:5d:4c:3e:90:09:9f:1d:72:
3f:87:31:59:a6:7e:5a:55:a0:fc:f1:55:00:25:4a:
ff:bc:39:aa:61:f7:e0:eb:79:f2:43:78:e6:49:0a:
15:a7:bf:93:d0:7f:17:85:87:74:b6:53:e1:f1:7e:
8e:b5:c8:bf:3f:c0:e4:43:4f:45:d1:03:40:c1:3a:
11:3c:9a:28:cf:53:4d:5c:bb:cb:d9:34:79:35:13:
63:85:83:21:e6:87:bf:1b:82:c6:b0:c5:2c:48:d2:
3b:b6:9e:ab:53:12:83:91:4f:a9:0c:5e:a7:07:05:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CD:C7:F7:D0:3D:B7:E1:74:07:AA:89:69:B3:D6:CF:BA:7D:FA:03
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7c:49:78:c8:db:e0:76:22:cb:d6:49:39:bd:58:25:ef:00:
94:e8:9f:f4:0f:76:ce:46:f2:05:fc:4c:2a:88:16:17:67:19:
0b:3d:ef:60:a0:c7:3e:cc:a0:05:66:bd:58:0a:4c:52:40:10:
34:3d:22:7a:f6:da:35:b1:5b:30:ed:e8:3e:62:9d:f3:3d:9a:
bd:13:b4:3d:64:33:98:07:f4:22:1e:a7:1b:1a:30:95:11:46:
94:ec:cb:19:23:e6:96:a4:88:bf:b2:93:53:ac:9e:05:a8:c9:
1e:c2:85:d0:e9:e9:3c:76:8f:eb:ad:02:ac:7b:11:92:23:23:
12:b9:e4:2e:0f:24:c7:a1:ea:6f:4f:00:88:27:2c:c2:13:d6:
82:ae:e0:f6:8a:dd:ac:ce:29:0b:ca:15:dc:66:79:53:1f:fb:
27:12:eb:20:86:ce:bd:73:9f:28:f5:bf:d6:dc:63:3a:de:a3:
95:da:ad:70:ab:fc:db:84:4d:9c:9f:88:a6:0a:da:ba:7c:d4:
7e:f7:81:24:ed:c7:3f:31:cc:33:f6:88:cd:70:64:a7:05:1e:
46:42:0f:9b:6b:3e:39:20:07:35:02:e1:82:96:3e:6d:e4:b3:
ab:02:c7:13:ce:83:51:88:fd:14:fd:64:fc:7a:db:8c:0c:71:
d2:25:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:07 2026 by rpki-client